Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer
File:                     6EE5DC8E816AC86198A0379BE60A62BE9F390792.cer (raw, json)
Hash identifier:          0czOAPv9z/prpcRJoVvtIWCz4EMywNk4/BMkSeQ8p3M=
Subject key identifier:   6E:E5:DC:8E:81:6A:C8:61:98:A0:37:9B:E6:0A:62:BE:9F:39:07:92
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7C1A1C3B3B54DBCBB4EA8A029ECE3A998A94B2F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 22:44:36 +0000
Certificate not after:    Wed 02 Apr 2025 22:49:36 +0000
Subordinate resources:    AS: 16685
                          AS: 18836
                          IP: 200.185.0.0 -- 200.185.191.255
                          IP: 200.188.192.0/20
                          IP: 2001:1280::/32
                          IP: 2804:3a10::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:1a:1c:3b:3b:54:db:cb:b4:ea:8a:02:9e:ce:3a:99:8a:94:b2:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 22:44:36 2024 GMT
            Not After : Apr  2 22:49:36 2025 GMT
        Subject: CN=6EE5DC8E816AC86198A0379BE60A62BE9F390792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9d:8b:76:c1:e7:ce:20:f5:c2:a5:92:6e:52:
                    46:17:78:96:09:a0:c4:bc:78:e0:5a:b6:30:7c:de:
                    69:56:f0:78:2b:50:0c:3d:ed:e2:67:0f:5f:b9:83:
                    f6:51:67:7f:e5:e2:cf:3b:79:b3:79:fb:22:40:55:
                    f8:43:80:14:2b:1f:31:98:a9:56:18:0a:cc:f8:52:
                    e1:cd:4d:73:09:69:c8:64:41:0e:f5:9d:8f:d2:e6:
                    83:c4:6f:d1:04:cf:07:0a:51:96:c9:a9:55:e8:ae:
                    b2:47:ef:83:23:4c:c5:c9:56:70:b2:1c:3e:b6:b6:
                    da:f8:89:57:f2:8e:1e:67:0d:40:cc:94:d4:d9:6d:
                    ed:a9:e9:44:2b:10:32:ef:ef:e5:bd:b9:b3:03:29:
                    6f:d2:81:4f:bc:9c:0c:82:2f:9f:6c:a8:ce:83:c3:
                    1c:8f:e2:1d:be:0a:9e:4b:cd:b8:1f:7e:b8:89:fe:
                    43:6d:1b:25:a2:e7:7a:c5:e9:64:e7:85:c1:16:c8:
                    d3:4d:0b:98:6c:99:c4:be:62:89:af:da:dd:4e:63:
                    d7:91:65:01:1e:97:c6:9f:84:c7:83:15:9d:01:f1:
                    fe:1b:a5:a3:73:7b:6c:49:5f:66:09:82:bf:89:85:
                    5d:76:e9:7f:22:cc:7e:9c:63:ec:07:fc:dd:4e:ea:
                    fc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6E:E5:DC:8E:81:6A:C8:61:98:A0:37:9B:E6:0A:62:BE:9F:39:07:92
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JBpGh4i3z5AZuKGy9qEXfEUwE8WP1rj9qzBfHh6mkM8z/1/6EE5DC8E816AC86198A0379BE60A62BE9F390792.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.185.0.0-200.185.191.255
                  200.188.192.0/20
                IPv6:
                  2001:1280::/32
                  2804:3a10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16685
                  18836

    Signature Algorithm: sha256WithRSAEncryption
         9d:9d:c2:3c:c0:d4:65:f0:97:18:8f:a3:90:19:7e:ab:14:9a:
         28:95:25:d0:8b:7e:b5:aa:7f:9d:84:19:40:0f:af:fa:0c:77:
         8a:ec:5b:64:a5:c8:f6:04:e2:67:e5:11:8c:bf:41:66:6e:18:
         28:bc:c1:fb:10:3b:f6:41:18:c1:aa:6a:1d:87:f7:93:7b:9c:
         b5:1f:79:57:4c:a2:4f:0e:45:07:c0:e0:c7:4f:40:8a:96:47:
         d3:50:f6:76:a4:5f:23:92:be:59:df:9e:6e:59:3b:a4:92:f2:
         a8:d9:8b:0b:1f:0a:8c:be:05:a7:72:0d:0f:8a:c5:10:1c:23:
         99:66:08:e8:18:b8:d3:3c:ac:f6:2e:fb:39:63:56:17:3e:4b:
         24:74:07:5e:d5:d7:7f:49:9b:e0:d7:7c:17:1e:e5:6a:3d:9a:
         e1:18:9f:8d:b3:42:51:0d:0e:8f:45:67:5a:c9:ca:fc:c4:db:
         99:80:07:25:23:87:c2:bb:85:e5:80:21:9c:1f:b9:1f:ee:c7:
         01:a9:83:d6:29:3c:68:cd:15:0a:12:ba:92:bd:d8:e0:cb:05:
         ef:b2:d5:8e:28:68:e5:0c:6e:9b:51:02:69:c5:b8:f6:56:08:
         33:51:41:eb:2d:10:c6:0b:72:e3:cb:aa:48:2a:0a:80:ca:d1:
         38:8b:c5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:59 2024 by rpki-client on console.sobornost.net