Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/657731EA8AADBD36707C5C7D6615321C5380EEE0.cer
File:                     657731EA8AADBD36707C5C7D6615321C5380EEE0.cer (raw, json)
Hash identifier:          Bks0LEN9anI9+lzU0n/jbm2ldLdRHzydodjIVM5MnKo=
Subject key identifier:   65:77:31:EA:8A:AD:BD:36:70:7C:5C:7D:66:15:32:1C:53:80:EE:E0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4630C562321FC0F093EC4342F02BED1CDADB4B15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/1/657731EA8AADBD36707C5C7D6615321C5380EEE0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 08:05:45 +0000
Certificate not after:    Thu 03 Apr 2025 08:10:45 +0000
Subordinate resources:    AS: 265080
                          IP: 170.233.120.0/22
                          IP: 2804:3278::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:30:c5:62:32:1f:c0:f0:93:ec:43:42:f0:2b:ed:1c:da:db:4b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 08:05:45 2024 GMT
            Not After : Apr  3 08:10:45 2025 GMT
        Subject: CN=657731EA8AADBD36707C5C7D6615321C5380EEE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4b:54:db:3f:54:4e:65:54:c4:5a:66:0f:e7:
                    2d:77:2d:76:2a:f0:4e:f1:b6:fc:bd:20:51:25:91:
                    f3:e6:31:29:4e:f4:b4:60:a8:0a:d3:b7:74:cf:07:
                    33:5a:20:ba:15:25:da:1b:f2:2c:c7:b1:10:71:d6:
                    a1:fc:0b:6a:b2:ca:ad:80:b6:cd:f0:1c:bd:2e:fa:
                    16:36:79:09:8e:35:81:f9:13:07:66:db:3e:3d:5f:
                    a1:cd:fe:f0:ff:04:46:b6:e3:1d:14:de:b2:1f:5a:
                    39:5f:e3:62:dc:62:fe:9f:55:1f:68:f4:30:ce:5e:
                    84:39:a4:86:df:25:23:b3:af:85:5d:f9:cb:cf:60:
                    01:94:d2:7a:ed:1f:b2:f5:1e:1a:26:5c:7d:c3:89:
                    e1:78:5a:c7:2e:83:0a:97:07:4a:b6:26:f2:d9:cb:
                    06:5d:16:0b:72:a3:a5:07:9d:90:05:ed:bb:9d:b7:
                    41:8e:89:35:98:b0:0d:c8:2f:37:20:0d:9c:c8:ba:
                    4d:1e:59:75:f3:d1:7d:09:04:03:c6:86:85:ac:4b:
                    52:80:ab:32:a5:c3:64:a3:3d:88:42:31:42:bb:63:
                    76:20:99:ba:13:fb:9f:b2:ab:22:a6:5f:e6:a2:e4:
                    aa:91:19:cd:ac:56:a4:e2:04:e9:62:28:74:02:b0:
                    8d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:77:31:EA:8A:AD:BD:36:70:7C:5C:7D:66:15:32:1C:53:80:EE:E0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/1/657731EA8AADBD36707C5C7D6615321C5380EEE0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.120.0/22
                IPv6:
                  2804:3278::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265080

    Signature Algorithm: sha256WithRSAEncryption
         48:f1:9e:7c:88:38:d1:3f:2a:b0:ca:ae:56:01:ca:e6:92:7e:
         e9:92:be:85:07:a8:44:18:63:c2:c3:47:09:d8:e5:dd:c2:24:
         a7:1e:7d:a8:0c:41:80:8a:d6:2a:7c:1a:59:a8:4e:ff:7f:ac:
         1d:2d:c4:e9:85:dd:6b:ae:dc:ee:31:ef:79:20:52:e8:5f:1f:
         d3:18:04:98:0e:25:9c:0e:b9:38:4b:2d:b9:9c:04:4e:8a:80:
         3f:4f:df:03:e9:5f:4c:2d:1f:bc:0e:ce:70:e4:92:4b:35:17:
         90:7a:73:c4:20:68:98:eb:8f:29:88:51:2c:1c:0b:29:4e:07:
         37:ab:82:d1:7d:c0:38:3e:50:61:6d:82:a3:c2:02:7c:a4:2b:
         2f:5e:68:ff:0c:a6:bf:65:72:41:bb:33:5f:18:b3:5c:be:5a:
         26:36:6d:d9:44:00:22:00:9c:b5:74:f8:0f:5e:c8:11:2f:95:
         6a:db:84:71:68:c3:31:0e:d5:9c:95:ad:3c:dd:08:03:8b:17:
         19:6f:9d:68:39:6b:09:24:22:99:9a:12:54:ec:0c:8a:78:f6:
         b5:ee:fc:4a:70:16:98:6b:2d:39:b1:48:7e:c9:69:a2:15:23:
         4f:7b:86:3d:88:6a:22:3a:6f:20:20:a2:35:c2:e5:94:a1:81:
         bb:44:7c:5c
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIURjDFYjIfwPCT7ENC8CvtHNrbSxUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwODA1NDVaFw0yNTA0MDMwODEwNDVaMDMxMTAvBgNV
BAMTKDY1NzczMUVBOEFBREJEMzY3MDdDNUM3RDY2MTUzMjFDNTM4MEVFRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSS1TbP1ROZVTEWmYP5y13LXYq
8E7xtvy9IFElkfPmMSlO9LRgqArTt3TPBzNaILoVJdob8izHsRBx1qH8C2qyyq2A
ts3wHL0u+hY2eQmONYH5Ewdm2z49X6HN/vD/BEa24x0U3rIfWjlf42LcYv6fVR9o
9DDOXoQ5pIbfJSOzr4Vd+cvPYAGU0nrtH7L1HhomXH3DieF4WscugwqXB0q2JvLZ
ywZdFgtyo6UHnZAF7budt0GOiTWYsA3ILzcgDZzIuk0eWXXz0X0JBAPGhoWsS1KA
qzKlw2SjPYhCMUK7Y3YgmboT+5+yqyKmX+ai5KqRGc2sVqTiBOliKHQCsI29AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRldzHqiq29NnB8
XH1mFTIcU4Du4DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRkZY
a0xrYUtYSGVyWExwZlVBc283MzZyUUVlbnFNcGl2NlFlaEZ3bVUxdlcvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZG
WGtMa2FLWEhlclhMcGZVQXNvNzM2clFFZW5xTXBpdjZRZWhGd21VMXZXLzEvNjU3
NzMxRUE4QUFEQkQzNjcwN0M1QzdENjYxNTMyMUM1MzgwRUVFMC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqul4MA0EAgACMAcDBQAoBDJ4MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQLeDANBgkqhkiG9w0BAQsFAAOCAQEASPGefIg40T8qsMqu
VgHK5pJ+6ZK+hQeoRBhjwsNHCdjl3cIkpx59qAxBgIrWKnwaWahO/3+sHS3E6YXd
a67c7jHveSBS6F8f0xgEmA4lnA65OEstuZwEToqAP0/fA+lfTC0fvA7OcOSSSzUX
kHpzxCBomOuPKYhRLBwLKU4HN6uC0X3AOD5QYW2Co8ICfKQrL15o/wymv2VyQbsz
XxizXL5aJjZt2UQAIgCctXT4D17IES+VatuEcWjDMQ7VnJWtPN0IA4sXGW+daDlr
CSQimZoSVOwMinj2te78SnAWmGstObFIfslpohUjT3uGPYhqIjpvICCiNcLllKGB
u0R8XA==
-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:58 2024 by rpki-client on console.sobornost.net