Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5705E4372A8B28EB99913B22E4D866ED49A551A4.cer
File:                     5705E4372A8B28EB99913B22E4D866ED49A551A4.cer (raw, json)
Hash identifier:          S1HoWDUMDg9Z6oHng5yzvm/t2aJTE74nGXWb02I/I40=
Subject key identifier:   57:05:E4:37:2A:8B:28:EB:99:91:3B:22:E4:D8:66:ED:49:A5:51:A4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6500C1A9FAA01C6BFA0BDFB93A85C1D7E7E0CCA0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/2/5705E4372A8B28EB99913B22E4D866ED49A551A4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Jun 2024 22:19:29 +0000
Certificate not after:    Mon 02 Jun 2025 22:24:29 +0000
Subordinate resources:    AS: 269640
                          IP: 45.190.68.0/22
                          IP: 2804:67a0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:00:c1:a9:fa:a0:1c:6b:fa:0b:df:b9:3a:85:c1:d7:e7:e0:cc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  3 22:19:29 2024 GMT
            Not After : Jun  2 22:24:29 2025 GMT
        Subject: CN=5705E4372A8B28EB99913B22E4D866ED49A551A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cc:91:8a:e0:9a:bc:01:21:20:79:b7:c5:ec:
                    71:c2:33:28:22:43:d8:03:e3:0b:bb:5c:1a:26:91:
                    fe:23:7c:e3:5b:67:09:80:17:0f:01:3e:06:86:b8:
                    6a:fc:6d:5b:e0:c9:5d:29:d6:75:14:bb:9f:9e:e2:
                    00:81:ef:53:55:64:03:c7:43:2c:ba:4b:ed:8f:22:
                    02:c1:7b:2a:d0:ad:fa:a3:6a:81:4e:fa:5c:e4:30:
                    6c:34:a5:9e:be:54:32:81:88:4d:9a:40:2e:86:09:
                    50:29:b3:56:99:1f:8b:15:91:7f:53:4e:03:6b:dd:
                    5f:c7:3d:0a:fd:53:7d:17:da:31:1e:31:17:fb:91:
                    55:3d:a1:7d:e3:79:9c:6d:81:84:c7:b9:2b:f3:5e:
                    9e:e8:a2:d8:da:17:08:67:62:6a:36:5a:04:df:e0:
                    2d:50:1b:6b:25:63:1b:dd:cb:1e:cd:2b:99:de:24:
                    72:23:1a:f1:1c:16:a9:6c:8d:01:ea:81:6d:27:31:
                    f2:75:92:a6:a9:c8:6d:e7:60:1e:40:e9:f4:93:4b:
                    53:43:d7:51:86:f3:cb:59:8a:72:e0:6e:af:cd:45:
                    a4:65:d9:88:cc:1b:af:9d:d1:48:cf:8c:2f:a2:15:
                    90:e6:aa:fc:97:29:67:8f:37:08:5a:c2:00:c4:6c:
                    3b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:05:E4:37:2A:8B:28:EB:99:91:3B:22:E4:D8:66:ED:49:A5:51:A4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/2/5705E4372A8B28EB99913B22E4D866ED49A551A4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.68.0/22
                IPv6:
                  2804:67a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269640

    Signature Algorithm: sha256WithRSAEncryption
         c2:07:63:43:51:ef:69:39:06:8f:8b:2b:8c:f2:18:9c:6b:92:
         68:89:b9:7b:70:cc:5b:5a:94:2f:63:05:0d:7b:79:b5:5b:d8:
         c2:5e:a9:d9:22:fb:27:6c:51:73:fe:2c:13:1e:7b:75:09:3a:
         34:67:88:9c:2e:0c:a5:ad:1a:fd:f8:de:40:57:2d:a4:95:04:
         a1:55:88:ea:fd:ee:ab:7f:23:34:05:5c:76:7c:3a:43:f0:f7:
         4f:e2:02:34:b3:e6:8b:9a:5a:1f:25:34:07:35:9e:2a:f4:72:
         6e:1d:04:e6:a3:b6:c5:2c:97:9b:6d:9f:5e:f2:67:93:fa:69:
         a2:d5:db:13:ad:fc:60:99:e0:9b:75:05:39:06:1e:28:75:06:
         7f:92:6b:73:3f:fa:f2:36:ec:1e:31:7c:2d:ed:20:da:97:ad:
         8b:6d:76:63:0e:65:0d:d3:8c:aa:0b:c8:4d:f1:f0:94:79:03:
         b7:99:9f:87:6a:4a:47:5e:78:b8:cb:45:2b:a3:5f:f8:84:b8:
         40:39:ee:d4:0e:2a:bd:ab:42:6f:3f:f1:4e:f3:f6:0c:d9:6a:
         0b:24:87:58:a5:90:9d:97:9a:d4:c5:5b:7d:cb:05:f3:33:d9:
         52:da:45:09:d7:02:98:97:4d:8c:66:cc:6e:cd:a6:c3:30:29:
         23:4f:42:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:55 2024 by rpki-client on console.sobornost.net