Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7F47009C8F403A7156B677A0E7EF30D662978434.cer
File:                     7F47009C8F403A7156B677A0E7EF30D662978434.cer (raw, json)
Hash identifier:          8etaG7wEQcB7zHAgcZ6LVbil/SgzG/okKeqXnC05L1s=
Subject key identifier:   7F:47:00:9C:8F:40:3A:71:56:B6:77:A0:E7:EF:30:D6:62:97:84:34
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6847969CE718CE8D5D334509464A7229D1C037CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/7F47009C8F403A7156B677A0E7EF30D662978434.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 11 Jul 2024 19:20:07 +0000
Certificate not after:    Thu 10 Jul 2025 19:25:07 +0000
Subordinate resources:    AS: 61581
                          IP: 138.94.196.0/22
                          IP: 2804:2398::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:47:96:9c:e7:18:ce:8d:5d:33:45:09:46:4a:72:29:d1:c0:37:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 11 19:20:07 2024 GMT
            Not After : Jul 10 19:25:07 2025 GMT
        Subject: CN=7F47009C8F403A7156B677A0E7EF30D662978434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b3:43:f2:fc:fe:61:24:37:d5:0a:31:1e:9d:
                    b3:81:78:4a:b8:56:78:0e:e1:48:1f:68:e8:a0:cc:
                    89:23:af:8b:f9:00:b9:86:c8:dd:86:b2:13:7f:b2:
                    30:8c:d4:3c:aa:98:7e:3e:a8:f0:07:83:40:a1:cd:
                    d9:e0:5e:ad:d9:e4:67:d9:62:28:23:99:94:a4:f8:
                    58:63:87:42:8a:3a:dd:a6:28:ae:58:8f:25:f8:08:
                    2e:75:df:89:2c:95:e5:58:38:ea:f6:87:de:cf:c4:
                    81:a0:e5:f5:c8:31:11:cc:ed:9d:d9:28:2b:65:96:
                    b4:ce:bb:55:14:62:44:23:c0:53:01:41:ae:e9:a6:
                    6a:59:c4:8d:05:3c:d2:d1:ed:63:8f:9f:a4:70:97:
                    5b:e1:a8:7b:57:40:1b:45:66:57:16:b2:b2:91:4c:
                    9c:95:5b:e2:8c:95:47:68:53:43:5e:ff:8c:bc:16:
                    4b:a0:cc:a1:84:da:61:69:15:76:ca:32:8c:d8:94:
                    36:f4:9c:3f:5f:45:64:b0:1b:bf:12:62:f1:7a:e8:
                    07:1e:21:e8:79:ae:7c:e1:2c:90:ae:c0:e3:89:02:
                    3b:aa:e6:71:08:40:48:19:9f:63:85:64:b4:14:23:
                    ef:20:37:11:e2:2c:28:ba:e0:fb:ef:dc:6a:1d:79:
                    43:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7F:47:00:9C:8F:40:3A:71:56:B6:77:A0:E7:EF:30:D6:62:97:84:34
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CDNPzzLQTEV283xCvZxRS9ZqWJigwRu1mahJYwYe9LD6/0/7F47009C8F403A7156B677A0E7EF30D662978434.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.196.0/22
                IPv6:
                  2804:2398::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61581

    Signature Algorithm: sha256WithRSAEncryption
         77:81:32:2f:6f:a8:a2:38:ef:56:a9:d1:fc:6a:48:96:6d:7a:
         66:d8:6c:df:a9:78:16:1a:d2:5a:52:97:89:8f:4f:5e:38:28:
         08:75:f4:ab:ca:49:07:01:69:20:e6:e1:99:7b:fd:8a:97:6c:
         00:52:66:9a:10:49:7c:ce:7b:31:69:06:3a:6e:27:bb:ca:5e:
         5a:c4:14:26:45:13:e8:aa:3f:76:64:d7:f0:0a:4f:8e:9c:56:
         b0:71:82:76:16:87:44:7c:43:0f:14:9e:6a:28:83:f8:58:a8:
         d2:a9:cd:1f:4b:37:75:e3:c4:e5:9b:2f:86:d2:f8:73:b0:ca:
         d4:15:e2:a0:c2:13:ed:7b:0d:e0:02:b8:ad:a1:8a:ee:3c:43:
         e4:09:e1:46:4f:6a:19:fa:10:fd:c4:01:b1:d1:19:27:71:d0:
         8e:f7:6f:29:bd:5d:03:2e:56:88:58:f3:ca:4d:a4:ab:eb:9e:
         51:42:1d:9c:9b:7a:70:df:cb:77:0d:26:33:97:13:5e:f4:65:
         c7:76:4e:34:d0:33:f5:46:69:25:3d:61:07:44:1b:a3:5f:7d:
         47:87:29:02:2b:39:ef:ba:fb:3c:92:0a:44:a7:07:88:c8:30:
         e5:d2:8b:3c:fd:56:d8:90:aa:76:c4:f7:55:f3:6e:50:f2:9c:
         91:db:28:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:02 2024 by rpki-client on console.sobornost.net