Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.cer
File:                     6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.cer (raw, json)
Hash identifier:          xKQbrJPf4Twfs2/58QS536tJYIkDIXygO3g1vM3SeYk=
Subject key identifier:   6C:B0:79:67:DE:3E:15:D1:96:7D:5C:3D:97:2F:CC:73:4D:13:D1:D9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6A9738157D35D4CA2112087117CEC6020061D33C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 13 Sep 2024 17:50:02 +0000
Certificate not after:    Fri 12 Sep 2025 17:55:02 +0000
Subordinate resources:    AS: 270622
                          IP: 189.50.211.0/24
                          IP: 2804:6ed8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:97:38:15:7d:35:d4:ca:21:12:08:71:17:ce:c6:02:00:61:d3:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 13 17:50:02 2024 GMT
            Not After : Sep 12 17:55:02 2025 GMT
        Subject: CN=6CB07967DE3E15D1967D5C3D972FCC734D13D1D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8e:99:5f:0b:dd:e5:bf:bb:6f:87:42:2c:a3:
                    11:ba:8f:5e:ba:4c:dd:bc:6d:d0:04:db:f6:d3:d7:
                    a4:5b:3d:a1:f7:85:01:f2:cc:48:38:f5:7f:2c:b0:
                    1c:64:87:0b:81:97:fd:db:d3:b7:3b:8a:99:7b:46:
                    12:7d:cb:b3:5b:41:6c:ab:d5:85:26:21:29:05:3c:
                    6f:a7:6a:8f:4e:c5:42:9e:d4:a7:d2:18:66:4a:3b:
                    ac:d3:98:ad:80:dd:ca:dc:36:09:bd:8e:4e:cf:fe:
                    31:8a:cb:52:de:24:a8:f5:cd:fe:f0:f1:cd:c8:19:
                    b6:e6:36:ef:7e:c8:31:46:5d:c3:e3:cd:d9:7d:9c:
                    88:d1:85:fa:2c:c2:53:66:6c:ce:06:6d:1d:b0:b0:
                    f1:63:74:53:17:ac:01:87:c2:34:f4:f4:fe:92:26:
                    0a:75:10:6d:e6:b8:ae:f0:1a:c4:aa:e5:a8:bb:15:
                    6f:a4:c4:f0:ff:ca:16:a1:3d:86:c4:1c:00:ea:dc:
                    b8:2e:f9:f7:88:b7:97:19:a8:87:4c:22:dc:6b:70:
                    6b:00:75:e8:16:48:ba:c4:e2:10:04:91:55:53:1a:
                    5d:1e:93:23:37:1e:1f:c3:e6:8e:56:2c:d5:fe:25:
                    4d:04:f1:aa:e6:2d:1b:2e:05:6a:77:b6:23:10:64:
                    b1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6C:B0:79:67:DE:3E:15:D1:96:7D:5C:3D:97:2F:CC:73:4D:13:D1:D9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DSiw6Dbyi23tu3jiwSQAKUYBsSRJfvNFTZP6EEQfNA9C/0/6CB07967DE3E15D1967D5C3D972FCC734D13D1D9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.211.0/24
                IPv6:
                  2804:6ed8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270622

    Signature Algorithm: sha256WithRSAEncryption
         c2:7a:c5:11:f7:cc:b7:1f:58:34:76:fa:1c:50:50:be:0f:7e:
         73:c0:99:03:63:29:0e:b4:b3:1b:9f:d7:ea:e4:f9:18:db:2a:
         64:5f:8e:f9:d4:1c:75:63:d2:89:03:56:2d:74:54:1c:01:91:
         b5:87:c7:1c:1f:cd:38:56:76:e2:c5:54:06:68:f7:cd:20:5d:
         18:75:96:e3:77:c3:b4:32:3b:3f:46:08:0a:c4:36:ac:ec:82:
         5e:a6:e8:db:bc:77:20:0b:fa:a6:0d:b3:a9:61:39:0b:3a:77:
         56:86:9e:b7:6c:8f:0f:6a:08:dc:73:0b:fb:95:45:f7:4f:a1:
         27:91:e4:88:6b:6f:52:7b:86:77:70:b7:25:0f:56:70:a3:00:
         b7:69:5e:35:26:85:c4:d2:58:67:55:31:3d:08:ec:4e:00:c0:
         76:59:b6:94:c0:03:f4:70:1f:4d:b4:f7:c2:01:66:4d:49:a6:
         df:ac:d2:41:f0:0d:51:a9:fe:48:45:9f:d9:07:bf:5c:9b:3a:
         ae:12:fd:7a:41:32:c7:0a:0b:36:d4:ec:eb:ff:ce:97:78:12:
         d4:e2:88:a0:33:35:3b:90:76:1c:a1:60:96:b1:38:b3:42:77:
         f7:c8:96:7c:97:7a:22:c2:60:62:9e:0e:64:00:67:3c:bd:f4:
         e4:3a:a1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:59 2024 by rpki-client on console.sobornost.net