Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.cer
File:                     56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.cer (raw, json)
Hash identifier:          Q9oE1NBmTpn18DTRK3kO7QZS0zhjmpLisigYZv1ACIo=
Subject key identifier:   56:EC:3C:FD:56:D8:A2:A7:E9:EA:72:5F:1A:F5:D8:4C:59:CC:56:1D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       72A8DC11EF2980CB5F34D73FA2936B4D35F95C35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 00:57:05 +0000
Certificate not after:    Thu 03 Apr 2025 01:02:05 +0000
Subordinate resources:    AS: 268842
                          IP: 45.174.40.0/22
                          IP: 2804:5b6c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a8:dc:11:ef:29:80:cb:5f:34:d7:3f:a2:93:6b:4d:35:f9:5c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 00:57:05 2024 GMT
            Not After : Apr  3 01:02:05 2025 GMT
        Subject: CN=56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d4:a1:75:55:78:b4:77:35:db:6f:b4:50:0f:
                    f1:5d:2b:b6:92:52:c3:1b:d6:a5:c5:5e:26:63:ba:
                    45:67:fb:da:c3:32:0b:52:21:6e:c4:f6:10:fd:31:
                    34:fa:b7:90:75:9b:dd:81:30:4e:57:d8:bb:66:93:
                    a5:f2:47:6e:08:a0:9d:ea:1a:95:48:19:a0:59:fb:
                    08:d5:2d:60:a5:c5:8e:5d:23:7f:a7:fb:be:0c:dc:
                    38:31:43:25:ad:74:93:8f:ed:d8:40:19:16:65:08:
                    6c:db:ab:86:d2:85:84:18:8c:85:e1:e0:9d:8e:da:
                    0d:de:be:46:ff:83:6e:66:34:ae:d5:04:de:1d:15:
                    5a:51:45:36:f2:09:de:c9:01:e3:f0:ea:f8:2e:a8:
                    43:b7:ed:6b:93:2e:12:68:8e:5a:b8:f2:31:99:b6:
                    23:7d:1b:c5:88:92:cb:8e:30:f0:23:ae:dc:02:d5:
                    5f:60:08:d9:24:fc:94:2b:7b:b3:3f:d7:41:fe:65:
                    ee:98:88:a8:f7:1c:5f:27:42:2e:17:44:ec:9f:55:
                    c0:fb:10:31:43:60:bc:b0:53:95:91:a8:ed:b6:ea:
                    81:25:64:46:20:ef:4b:48:16:39:18:fa:88:14:64:
                    dd:40:d0:74:11:dd:3b:9b:59:3a:58:2c:89:00:4b:
                    88:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:EC:3C:FD:56:D8:A2:A7:E9:EA:72:5F:1A:F5:D8:4C:59:CC:56:1D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/1/56EC3CFD56D8A2A7E9EA725F1AF5D84C59CC561D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.40.0/22
                IPv6:
                  2804:5b6c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268842

    Signature Algorithm: sha256WithRSAEncryption
         da:df:70:83:01:c0:0e:e8:75:3c:95:f1:ed:2b:6c:7a:1a:96:
         aa:16:8c:84:c5:7d:d7:0a:06:f4:7b:ba:66:e2:36:21:28:80:
         e9:3a:f6:24:50:5e:90:b3:67:f0:4a:71:45:dd:db:c6:0c:e1:
         d3:3c:c6:b4:b1:38:b4:82:a7:01:09:44:bb:3e:8c:ab:23:2e:
         40:65:4f:1c:84:f6:d5:77:0c:d4:6b:4f:a8:1e:ff:18:66:12:
         dc:46:77:3f:c2:77:6d:64:42:67:03:ae:71:15:e3:62:44:a6:
         c5:48:3c:8f:42:10:4b:66:84:1e:4e:1f:97:ba:8c:27:38:08:
         07:f0:1d:53:0e:a8:bd:0d:a8:b5:c7:d1:1d:2a:55:8b:26:a5:
         81:c2:b7:09:c6:19:77:d8:84:54:bb:4d:87:f4:ce:c4:fa:a3:
         b4:52:3d:b3:8a:87:e5:77:f2:b3:38:13:84:78:ba:1e:17:93:
         f6:6b:8e:b2:a4:31:3c:60:22:28:1d:2b:8f:1a:f1:d3:4f:68:
         3c:1a:52:ca:14:af:b4:e2:48:51:3a:b3:82:88:70:a9:4b:50:
         54:a3:46:9f:e9:c4:02:97:f2:4b:0d:3a:05:7b:30:35:48:89:
         c6:26:4e:76:bb:d5:c3:bd:b5:00:45:b5:1a:11:6b:85:1f:ce:
         58:ff:21:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:55 2024 by rpki-client on console.sobornost.net