Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.cer
File:                     57C950BD274ED8EA04B2AF337313BFE612E66E95.cer (raw, json)
Hash identifier:          8TQ/borP09G329kjDMU4J1Ti3Aacx1iBhEUEpmM+ub0=
Subject key identifier:   57:C9:50:BD:27:4E:D8:EA:04:B2:AF:33:73:13:BF:E6:12:E6:6E:95
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3A965C23A4CE7767ED9FF707EBAD6363A9617A94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.mft
caRepository:             rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 02:56:18 +0000
Certificate not after:    Thu 03 Apr 2025 03:01:18 +0000
Subordinate resources:    AS: 267258
                          IP: 45.232.108.0/22
                          IP: 2804:4ab4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:96:5c:23:a4:ce:77:67:ed:9f:f7:07:eb:ad:63:63:a9:61:7a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 02:56:18 2024 GMT
            Not After : Apr  3 03:01:18 2025 GMT
        Subject: CN=57C950BD274ED8EA04B2AF337313BFE612E66E95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:b0:f6:1d:ce:87:28:39:36:73:00:f1:c8:
                    ca:05:2c:96:70:4b:e9:83:0a:a1:58:52:d3:1f:bd:
                    a5:f4:93:a5:dd:31:3a:e3:f3:cd:97:00:64:c3:35:
                    cd:20:ed:7d:fd:4e:a2:44:27:20:27:ad:c9:24:ee:
                    9a:8c:47:d5:05:94:d3:33:22:e2:9a:14:a5:fd:c1:
                    df:96:2e:b7:be:ef:24:fd:0c:6d:21:76:d2:c6:4b:
                    b1:31:19:07:e9:09:3c:63:1e:0e:d1:75:e9:ce:b8:
                    80:b2:59:46:6c:29:38:c5:b2:3a:12:d4:d8:cb:e3:
                    95:b1:dc:5e:ec:9f:ae:1e:fc:00:50:8a:ea:42:fe:
                    44:1f:a3:3c:29:50:68:0b:3b:13:88:5a:59:9b:cb:
                    1b:10:58:eb:f8:4f:35:7d:8e:40:2c:bc:bb:da:ec:
                    6a:1b:d9:ec:e5:91:91:1b:03:d0:4d:c6:1e:44:74:
                    64:da:3f:3a:01:6a:43:cf:7b:48:5b:cf:21:97:64:
                    32:63:2b:0a:21:ef:5a:c1:bf:97:06:fd:b6:83:d7:
                    6b:be:1f:8c:a9:0b:ee:68:67:22:34:ab:eb:9e:0d:
                    6d:f6:48:7f:ce:55:2f:d5:29:a2:84:c0:6f:ca:f2:
                    4c:ef:52:4d:08:b8:c9:6f:ce:13:f4:c8:b3:24:92:
                    1c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:C9:50:BD:27:4E:D8:EA:04:B2:AF:33:73:13:BF:E6:12:E6:6E:95
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.108.0/22
                IPv6:
                  2804:4ab4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267258

    Signature Algorithm: sha256WithRSAEncryption
         aa:89:0b:e0:4f:ac:f5:96:0b:06:16:5b:90:15:e4:89:33:a1:
         87:9e:de:6d:c5:c7:11:3a:4c:27:c4:7c:55:9d:15:63:89:a7:
         90:d2:a2:72:76:ee:1d:ef:b2:1b:82:0e:e7:1c:df:dc:19:6d:
         02:a8:d8:66:a5:50:b4:e2:bb:25:34:25:54:cd:8b:9e:d3:61:
         76:93:fd:54:b8:2b:cb:fb:72:4c:3e:06:54:37:a0:87:35:b5:
         e2:39:7b:4a:5b:90:d6:1c:2d:57:b7:b7:81:39:ad:10:24:ee:
         e0:e9:ae:63:60:7a:22:19:50:a5:b9:41:c4:25:ad:30:36:d2:
         bb:cf:c4:fc:96:da:fa:da:e7:6b:67:e0:17:50:51:fa:f3:27:
         1b:16:c7:97:2b:40:5d:c8:34:8e:f3:db:f2:f2:e8:53:25:6c:
         64:c8:0c:1e:4f:06:00:3c:6e:fb:b2:3f:ba:7b:fb:8d:59:3e:
         ce:79:3c:89:73:65:7f:b2:3f:ad:47:c7:0b:2d:c5:62:fe:69:
         28:65:e2:ac:73:fb:d6:33:f6:e1:33:fb:a7:cc:3b:85:58:4b:
         43:36:66:bd:76:10:83:14:41:46:60:1d:45:40:a3:ec:1f:fb:
         06:b3:af:3c:4f:91:d8:cf:83:64:e0:0b:c8:60:29:1b:1b:de:
         18:01:4e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:55 2024 by rpki-client on console.sobornost.net