Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.cer
File:                     6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.cer (raw, json)
Hash identifier:          E+Z3sk7elFUB/raLBbEwQVkslE2SOGMWoK+D3jJZAz0=
Subject key identifier:   6F:9D:7C:16:F6:F1:19:AD:3C:95:41:A0:F9:81:AB:ED:6F:D2:85:A6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       48542D12EF3DF19A16DAD4984B4B113D8B06494E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 08:54:09 +0000
Certificate not after:    Thu 03 Apr 2025 08:59:09 +0000
Subordinate resources:    AS: 266610
                          IP: 45.7.68.0/22
                          IP: 2804:3ea0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:54:2d:12:ef:3d:f1:9a:16:da:d4:98:4b:4b:11:3d:8b:06:49:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 08:54:09 2024 GMT
            Not After : Apr  3 08:59:09 2025 GMT
        Subject: CN=6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b7:c0:4f:f8:da:d7:34:6c:99:ac:a0:1e:bf:
                    87:a3:01:a7:69:6a:d5:b8:07:c3:36:46:e1:07:f5:
                    22:90:4e:31:87:6a:f6:37:40:46:93:08:30:1a:72:
                    9d:10:83:f7:85:da:0d:a1:76:d3:68:3d:78:92:8b:
                    54:18:96:ee:1a:4b:b9:a0:04:9e:bf:c1:bb:ec:7b:
                    3c:1e:6c:3f:4d:5b:59:69:1c:91:69:27:3e:06:63:
                    63:b4:ed:57:cb:3b:79:23:c6:10:3d:c6:a0:e6:73:
                    f5:9c:e9:57:22:5f:34:6d:28:26:dd:4e:80:5d:96:
                    c2:f2:f8:90:ad:fc:98:58:f1:76:c2:da:c7:00:15:
                    d6:49:59:49:63:42:9f:fa:8a:9b:22:bd:cf:7c:5f:
                    ae:5b:4e:48:3b:21:2f:4a:af:75:17:23:40:f3:3f:
                    fd:98:04:ef:fd:fe:23:aa:a1:d6:e9:a5:b0:2a:89:
                    21:8a:eb:a0:fd:2d:5a:35:38:e2:da:b8:5d:29:ba:
                    54:8c:cb:80:70:aa:ea:f1:c8:6f:83:41:3d:f7:bf:
                    3a:bc:0b:94:ae:9c:ae:f3:10:a3:cc:4c:df:fd:17:
                    66:90:18:6d:51:55:b8:ce:7b:b2:db:ef:59:33:96:
                    42:b5:fb:0b:04:d0:0a:45:aa:1a:e4:c6:74:67:92:
                    8f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6F:9D:7C:16:F6:F1:19:AD:3C:95:41:A0:F9:81:AB:ED:6F:D2:85:A6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9kaZt5jUjo12hLMjeDBwjKJ15Jh25TgGmsLazeAFBJVa/1/6F9D7C16F6F119AD3C9541A0F981ABED6FD285A6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.68.0/22
                IPv6:
                  2804:3ea0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266610

    Signature Algorithm: sha256WithRSAEncryption
         a9:55:7e:b8:12:b5:53:e8:c0:27:ca:fd:88:34:6c:80:08:39:
         b1:c8:36:ec:e7:fe:c7:9d:c4:e1:a4:94:5b:d7:b1:bf:9b:ad:
         68:ab:c2:25:75:b1:a3:4b:64:86:8d:da:02:b8:d5:3d:55:db:
         6b:1c:f9:0c:1a:08:ff:52:69:f1:3e:a8:38:01:b1:19:40:e6:
         d1:0e:de:6a:91:8a:5b:03:fb:65:99:26:e1:48:67:23:ef:1b:
         64:5b:d5:c2:bd:b6:cd:63:53:e2:94:85:4f:0e:59:32:da:1f:
         4d:f6:74:2d:8e:1e:a8:dd:d2:e7:ae:9a:c2:fc:7c:90:f7:5d:
         47:c9:4b:4a:d4:35:b3:93:5d:01:ad:32:9b:d3:6b:dd:6a:33:
         95:67:a9:a4:db:6f:02:05:f0:17:ef:b3:da:63:3a:99:77:7d:
         14:5c:57:c8:7c:f5:57:04:33:df:5f:0e:b2:68:f0:8f:c5:8c:
         fa:55:7d:75:94:43:f0:bb:0d:57:98:6a:1b:58:3b:64:41:6c:
         c3:50:28:4b:9e:05:52:80:04:10:88:4f:47:a8:db:dc:de:70:
         62:80:62:2d:27:28:94:25:ac:f1:11:d4:a8:6f:62:36:ca:6a:
         19:72:12:3f:51:75:47:59:d4:3a:86:10:0f:19:5e:ef:7d:a4:
         7d:71:3c:cd
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUSFQtEu898ZoW2tSYS0sRPYsGSU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQwODU0MDlaFw0yNTA0MDMwODU5MDlaMDMxMTAvBgNV
BAMTKDZGOUQ3QzE2RjZGMTE5QUQzQzk1NDFBMEY5ODFBQkVENkZEMjg1QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLt8BP+NrXNGyZrKAev4ejAadp
atW4B8M2RuEH9SKQTjGHavY3QEaTCDAacp0Qg/eF2g2hdtNoPXiSi1QYlu4aS7mg
BJ6/wbvsezwebD9NW1lpHJFpJz4GY2O07VfLO3kjxhA9xqDmc/Wc6VciXzRtKCbd
ToBdlsLy+JCt/JhY8XbC2scAFdZJWUljQp/6ipsivc98X65bTkg7IS9Kr3UXI0Dz
P/2YBO/9/iOqodbppbAqiSGK66D9LVo1OOLauF0pulSMy4BwqurxyG+DQT33vzq8
C5SunK7zEKPMTN/9F2aQGG1RVbjOe7Lb71kzlkK1+wsE0ApFqhrkxnRnko9bAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRvnXwW9vEZrTyV
QaD5gavtb9KFpjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOWth
WnQ1alVqbzEyaExNamVEQndqS0oxNUpoMjVUZ0dtc0xhemVBRkJKVmEvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlr
YVp0NWpVam8xMmhMTWplREJ3aktKMTVKaDI1VGdHbXNMYXplQUZCSlZhLzEvNkY5
RDdDMTZGNkYxMTlBRDNDOTU0MUEwRjk4MUFCRUQ2RkQyODVBNi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLQdEMA0EAgACMAcDBQAoBD6gMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQRcjANBgkqhkiG9w0BAQsFAAOCAQEAqVV+uBK1U+jAJ8r9
iDRsgAg5scg27Of+x53E4aSUW9exv5utaKvCJXWxo0tkho3aArjVPVXbaxz5DBoI
/1Jp8T6oOAGxGUDm0Q7eapGKWwP7ZZkm4UhnI+8bZFvVwr22zWNT4pSFTw5ZMtof
TfZ0LY4eqN3S566awvx8kPddR8lLStQ1s5NdAa0ym9Nr3WozlWeppNtvAgXwF++z
2mM6mXd9FFxXyHz1VwQz318Osmjwj8WM+lV9dZRD8LsNV5hqG1g7ZEFsw1AoS54F
UoAEEIhPR6jb3N5wYoBiLScolCWs8RHUqG9iNspqGXISP1F1R1nUOoYQDxle732k
fXE8zQ==
-----END CERTIFICATE-----
Generated at Mon Oct 21 06:36:59 2024 by rpki-client on console.sobornost.net