Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.cer
File:                     73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.cer (raw, json)
Hash identifier:          MR0T0K1TOgX7NgtmlIrsn9bbuNjX284YHDPxKTKY9UU=
Subject key identifier:   73:BA:17:30:0B:8B:33:6E:71:62:A6:CD:35:AB:67:EC:BE:2D:0D:C4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6B591856985A9159CFBE6DC5716063E8EBBFF58D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Aug 2024 16:24:24 +0000
Certificate not after:    Tue 12 Aug 2025 16:29:24 +0000
Subordinate resources:    AS: 28153
                          IP: 164.163.140.0/22
                          IP: 170.233.60.0/22
                          IP: 186.193.208.0/20
                          IP: 187.60.144.0/20
                          IP: 201.148.252.0/22
                          IP: 2804:1a14::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:59:18:56:98:5a:91:59:cf:be:6d:c5:71:60:63:e8:eb:bf:f5:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 13 16:24:24 2024 GMT
            Not After : Aug 12 16:29:24 2025 GMT
        Subject: CN=73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:40:67:54:23:a5:15:63:45:b2:33:29:69:d2:
                    c3:d2:ec:00:31:b1:7d:cf:e7:d7:3d:3c:ec:f8:d6:
                    09:1a:3c:17:f6:1f:1f:47:48:4f:41:77:13:a9:a8:
                    d6:c4:c3:b1:4e:db:57:0e:a1:50:d6:95:19:b3:e4:
                    47:0d:7d:97:d8:b6:65:4e:0c:32:89:46:92:f2:6b:
                    d3:3f:04:40:ef:2d:65:6e:27:e8:3c:df:df:91:22:
                    5c:e2:dc:4c:fe:15:61:23:67:d3:c1:65:9f:2d:ea:
                    a2:28:69:d3:6c:d2:31:76:fd:19:eb:fe:7b:b5:cd:
                    39:ce:99:8a:18:8c:93:81:ee:b0:25:d5:3d:e1:b5:
                    31:37:d1:c8:ee:e1:da:68:77:ee:a3:af:7e:74:cf:
                    48:a5:20:82:09:af:db:96:bb:38:ed:24:04:e8:4a:
                    93:1f:4a:e1:ae:97:2f:f5:95:88:b0:61:7a:a1:e4:
                    b4:29:14:c5:b3:84:62:21:53:1c:7e:e7:1a:b7:08:
                    d6:9c:94:5b:06:69:8c:f2:68:3f:23:9f:47:62:44:
                    ac:7f:42:1b:43:a7:52:b4:cb:6b:e5:bf:60:2c:93:
                    74:34:96:df:c1:12:d2:2e:12:0d:4f:12:9f:63:cb:
                    1e:fb:b0:4b:66:e3:c3:22:53:1b:91:a2:3e:99:7e:
                    bc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                73:BA:17:30:0B:8B:33:6E:71:62:A6:CD:35:AB:67:EC:BE:2D:0D:C4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AzyrbZtH2tAgXm7vodNwhDS752KrFcVEsBLUkHAoLdiG/1/73BA17300B8B336E7162A6CD35AB67ECBE2D0DC4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.140.0/22
                  170.233.60.0/22
                  186.193.208.0/20
                  187.60.144.0/20
                  201.148.252.0/22
                IPv6:
                  2804:1a14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28153

    Signature Algorithm: sha256WithRSAEncryption
         c6:c3:01:fe:bc:1b:8f:02:dc:f8:a2:7c:bf:ad:85:01:e3:89:
         0b:1c:14:ff:79:7e:fc:ee:b8:89:09:61:07:30:ea:6c:41:ea:
         1a:ee:40:b1:3c:12:4e:e1:80:01:e6:29:60:75:d5:6a:0b:3d:
         a2:97:61:90:93:6e:98:2d:d0:c6:5d:f2:fe:f1:a5:c6:6a:4f:
         51:78:7b:11:ea:e9:4c:f9:6c:be:7c:df:c1:74:23:3c:30:68:
         45:d4:bf:73:52:04:78:86:8d:fa:b1:9c:16:5c:e1:62:62:80:
         3b:9c:b2:54:6b:eb:dd:db:67:d7:81:77:1b:35:10:4a:5c:e5:
         e2:02:a0:21:1f:33:02:33:1e:be:a7:23:c7:f8:e9:1c:ed:d3:
         5f:c6:ab:6e:e8:fc:3f:ed:3f:02:29:2d:4c:da:f5:25:d1:59:
         a3:d3:8b:8a:ce:ff:60:d4:b4:51:65:57:fe:f8:6e:05:37:82:
         59:e9:55:b3:51:67:7d:30:6f:9f:04:81:69:ac:9b:d5:35:cf:
         fb:17:e0:51:e7:21:44:16:d2:22:e1:5a:f6:92:4c:de:0f:ca:
         c0:ea:c2:28:05:7c:7c:fc:74:1a:72:e2:d9:4a:e9:be:bb:48:
         91:88:5e:26:9d:06:f5:33:c4:0a:f1:38:65:cd:36:a3:77:b0:
         1a:07:53:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:00 2024 by rpki-client on console.sobornost.net