Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.cer
File:                     5A5E26B1B0F12ABA275375436239BFDD76E5189A.cer (raw, json)
Hash identifier:          yXQ+TOZ84tAgvlUKL4kW9pWWEFNYDdAUliAHkBVHfV0=
Subject key identifier:   5A:5E:26:B1:B0:F1:2A:BA:27:53:75:43:62:39:BF:DD:76:E5:18:9A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       633A6F7D0A8472BE4B2F816E401CDBD7B05F9A7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 19:11:17 +0000
Certificate not after:    Wed 02 Apr 2025 19:16:17 +0000
Subordinate resources:    AS: 265897
                          IP: 128.201.196.0/22
                          IP: 2804:3f80::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:3a:6f:7d:0a:84:72:be:4b:2f:81:6e:40:1c:db:d7:b0:5f:9a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 19:11:17 2024 GMT
            Not After : Apr  2 19:16:17 2025 GMT
        Subject: CN=5A5E26B1B0F12ABA275375436239BFDD76E5189A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8a:f6:4d:49:e9:15:4f:c1:87:f0:39:25:5c:
                    ab:09:53:0a:8d:24:c9:cd:56:d0:4c:be:72:c8:33:
                    dc:85:28:a5:65:21:06:af:32:a3:cf:59:83:76:d5:
                    cc:a9:cc:d7:1c:e5:e6:96:5c:f3:8c:f1:87:7f:24:
                    65:33:1f:7f:1a:d0:f7:e6:0a:c8:b8:fb:cf:de:f6:
                    a2:41:b2:88:47:00:43:56:62:a8:95:b7:97:01:90:
                    05:ab:dd:ff:e0:7e:85:af:cd:47:9e:d1:ff:81:d7:
                    99:17:37:a6:cf:e2:d6:ea:33:4a:2f:3e:29:1a:45:
                    bd:3a:ed:a2:1d:f5:b9:5f:ea:7b:46:e6:6e:9a:b8:
                    d5:ac:8f:fd:9e:f6:2d:63:db:92:d2:de:bf:59:09:
                    71:73:b3:1d:21:2a:c4:d4:b7:37:e5:1c:e9:97:62:
                    c9:32:b3:8b:2d:db:33:68:dc:aa:ed:d6:40:ba:1f:
                    b1:7c:2b:af:40:25:3e:e8:a4:3a:3c:ff:28:00:3b:
                    5d:d4:9a:84:31:02:9e:38:ca:4e:10:ae:4a:f1:74:
                    37:98:fa:98:51:a7:ff:3f:4d:ad:69:f0:c5:17:8a:
                    e5:ec:5c:70:be:c7:af:09:7d:0f:67:26:1f:32:96:
                    74:d7:2d:74:ae:7e:fc:5e:1c:22:c0:5c:19:24:4d:
                    ea:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:5E:26:B1:B0:F1:2A:BA:27:53:75:43:62:39:BF:DD:76:E5:18:9A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FDaQjM2ZNghQd6kM9B1AcNsfUV4FMHZzc2u3oNvxd9g5/1/5A5E26B1B0F12ABA275375436239BFDD76E5189A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.196.0/22
                IPv6:
                  2804:3f80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265897

    Signature Algorithm: sha256WithRSAEncryption
         90:97:08:fa:3c:fd:d2:8f:f9:73:dd:4b:9c:0b:60:94:0a:05:
         49:7a:65:7b:bc:77:78:d8:3c:3a:c9:c2:f0:a0:56:79:a5:f4:
         b9:26:20:51:98:34:20:32:b3:35:19:31:7a:6a:d9:76:dc:52:
         9a:45:6d:91:e3:f5:91:24:d1:d8:ba:bd:78:af:13:6e:27:08:
         06:15:f2:4e:e7:9c:08:c8:61:49:86:b8:6e:77:a6:0e:81:ed:
         69:2f:b5:5e:3c:29:b5:44:de:2f:90:7b:ce:b5:28:ff:6d:b6:
         27:66:b2:57:70:0a:a4:0f:0b:97:6d:86:da:12:57:c3:75:80:
         cc:0c:a3:36:b3:ca:4e:96:56:55:66:b1:a8:0e:a7:e0:07:a5:
         99:0f:66:dd:65:c8:4f:f9:8d:3c:e2:28:f5:f2:c7:dc:7b:2a:
         54:f2:8d:6c:9a:63:22:7e:93:bf:09:a7:4f:f1:4b:94:bd:a1:
         97:18:ec:f2:38:4e:bb:61:fa:7c:76:51:71:06:dc:2c:c0:c9:
         f7:f6:92:64:5a:f5:82:dc:12:b7:c0:4f:70:f4:61:6a:18:90:
         b5:95:cc:5b:7c:70:ee:4d:dd:0f:cf:b0:69:1d:bf:a8:7f:ed:
         76:0c:8c:d5:43:d4:f6:19:1f:1e:f1:0f:a5:8b:82:53:83:4f:
         df:70:f9:ec
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUYzpvfQqEcr5LL4FuQBzb17Bfmn8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMxOTExMTdaFw0yNTA0MDIxOTE2MTdaMDMxMTAvBgNV
BAMTKDVBNUUyNkIxQjBGMTJBQkEyNzUzNzU0MzYyMzlCRkRENzZFNTE4OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWivZNSekVT8GH8DklXKsJUwqN
JMnNVtBMvnLIM9yFKKVlIQavMqPPWYN21cypzNcc5eaWXPOM8Yd/JGUzH38a0Pfm
Csi4+8/e9qJBsohHAENWYqiVt5cBkAWr3f/gfoWvzUee0f+B15kXN6bP4tbqM0ov
PikaRb067aId9blf6ntG5m6auNWsj/2e9i1j25LS3r9ZCXFzsx0hKsTUtzflHOmX
Yskys4st2zNo3Krt1kC6H7F8K69AJT7opDo8/ygAO13UmoQxAp44yk4QrkrxdDeY
+phRp/8/Ta1p8MUXiuXsXHC+x68JfQ9nJh8ylnTXLXSufvxeHCLAXBkkTeqBAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRaXiaxsPEquidT
dUNiOb/dduUYmjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkRh
UWpNMlpOZ2hRZDZrTTlCMUFjTnNmVVY0Rk1IWnpjMnUzb052eGQ5ZzUvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZE
YVFqTTJaTmdoUWQ2a005QjFBY05zZlVWNEZNSFp6YzJ1M29OdnhkOWc1LzEvNUE1
RTI2QjFCMEYxMkFCQTI3NTM3NTQzNjIzOUJGREQ3NkU1MTg5QS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCgMnEMA0EAgACMAcDBQAoBD+AMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQOqTANBgkqhkiG9w0BAQsFAAOCAQEAkJcI+jz90o/5c91L
nAtglAoFSXple7x3eNg8OsnC8KBWeaX0uSYgUZg0IDKzNRkxemrZdtxSmkVtkeP1
kSTR2Lq9eK8TbicIBhXyTuecCMhhSYa4bnemDoHtaS+1XjwptUTeL5B7zrUo/222
J2ayV3AKpA8Ll22G2hJXw3WAzAyjNrPKTpZWVWaxqA6n4AelmQ9m3WXIT/mNPOIo
9fLH3HsqVPKNbJpjIn6TvwmnT/FLlL2hlxjs8jhOu2H6fHZRcQbcLMDJ9/aSZFr1
gtwSt8BPcPRhahiQtZXMW3xw7k3dD8+waR2/qH/tdgyM1UPU9hkfHvEPpYuCU4NP
33D57A==
-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:56 2024 by rpki-client on console.sobornost.net