Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/85338CFAF888C0350AE9CB844AEBC476C4367656.cer
File:                     85338CFAF888C0350AE9CB844AEBC476C4367656.cer (raw, json)
Hash identifier:          rLkZ3E7jNvDeCvlIndELOlM3EYV7B4ywqz7883oGHC4=
Subject key identifier:   85:33:8C:FA:F8:88:C0:35:0A:E9:CB:84:4A:EB:C4:76:C4:36:76:56
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7FBE9CB29234B59A16DB2514B568EF6025687ECB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Jul 2024 14:27:47 +0000
Certificate not after:    Tue 22 Jul 2025 14:32:47 +0000
Subordinate resources:    AS: 269056
                          IP: 45.178.204.0/22
                          IP: 2804:5ec8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:be:9c:b2:92:34:b5:9a:16:db:25:14:b5:68:ef:60:25:68:7e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 23 14:27:47 2024 GMT
            Not After : Jul 22 14:32:47 2025 GMT
        Subject: CN=85338CFAF888C0350AE9CB844AEBC476C4367656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c8:f0:35:ad:7b:59:25:e0:76:fc:a5:0b:ed:
                    57:dc:f6:f2:8d:b8:d2:45:db:67:e8:1f:d0:d6:2e:
                    86:6f:65:96:bb:cb:1c:e4:06:b6:00:99:5e:15:d6:
                    af:84:d4:a9:1e:76:eb:21:1e:94:c2:75:13:07:1d:
                    41:3e:95:20:fa:72:25:d5:78:f8:fd:32:82:47:1d:
                    61:2b:58:8e:32:20:5f:46:e1:0c:a8:cf:13:54:6b:
                    8a:1b:81:38:cf:67:28:e5:e9:c2:dc:81:c2:22:7f:
                    6f:86:cb:76:db:6b:8d:5a:ae:2c:5f:07:f3:bf:c6:
                    cb:de:ab:3b:4d:99:2e:f3:ac:54:9a:8b:6c:1e:6b:
                    cb:87:68:df:c3:e0:37:53:79:f9:da:e9:d7:49:6a:
                    6a:eb:d2:12:4f:6c:de:49:28:8d:6b:aa:e2:e1:98:
                    9b:87:fb:6c:df:b3:8f:41:33:47:c9:b6:f2:b1:f1:
                    d6:26:6c:b9:c3:55:d0:74:7a:b9:3c:56:82:bf:9a:
                    3e:e9:77:fb:c2:35:7f:eb:70:c2:1a:e0:6c:d1:ca:
                    14:83:db:ab:5c:cd:4b:33:38:36:74:18:d4:48:b7:
                    81:a5:b5:51:ae:a5:aa:04:00:e7:23:65:89:78:e4:
                    e6:a6:57:40:0a:53:0f:0d:c8:1e:eb:f6:c0:c5:0e:
                    7f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                85:33:8C:FA:F8:88:C0:35:0A:E9:CB:84:4A:EB:C4:76:C4:36:76:56
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/85338CFAF888C0350AE9CB844AEBC476C4367656.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.204.0/22
                IPv6:
                  2804:5ec8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269056

    Signature Algorithm: sha256WithRSAEncryption
         c8:28:bc:e3:36:2c:1f:85:b3:94:8f:9c:0a:94:f7:45:c2:29:
         9f:9b:d7:2a:d8:12:b8:44:00:a5:c0:84:e5:c4:b9:c4:43:13:
         fa:d0:5c:10:25:ef:a4:b2:c1:51:37:ee:ce:76:80:c0:d9:f0:
         ec:91:6f:2f:26:73:84:e7:d7:9d:b8:7c:af:30:cb:a3:a4:5b:
         eb:63:d2:58:06:d5:c4:71:49:ca:6b:32:53:56:24:cd:c9:35:
         29:b1:90:f5:11:1a:3a:df:27:42:c6:2a:c0:8d:19:af:37:4e:
         62:c8:f0:45:37:97:d6:48:5b:f7:5c:bf:c9:da:1b:c9:6e:31:
         2a:6b:ca:2b:10:a8:9d:21:11:26:a8:6d:c8:a2:67:e2:49:bb:
         b5:31:f4:63:27:53:1f:fe:f5:15:be:91:2f:33:c3:af:86:41:
         df:ad:32:8d:99:bd:86:ff:7e:a9:7d:ce:44:43:dc:5b:2d:a9:
         29:7d:bb:26:23:b4:44:2b:2b:c8:63:d0:d7:54:2c:20:51:e8:
         ef:8e:6e:d7:53:18:94:6c:47:3f:89:be:89:5e:ce:8c:e5:bf:
         73:c3:63:ee:ca:48:cf:ac:a4:70:bc:0c:3d:71:91:15:07:0b:
         a6:1a:fd:c3:bd:78:ba:e3:25:c2:d5:e4:4a:63:59:4b:c2:27:
         02:aa:21:71
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUf76cspI0tZoW2yUUtWjvYCVofsswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA3MjMxNDI3NDdaFw0yNTA3MjIxNDMyNDdaMDMxMTAvBgNV
BAMTKDg1MzM4Q0ZBRjg4OEMwMzUwQUU5Q0I4NDRBRUJDNDc2QzQzNjc2NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEyPA1rXtZJeB2/KUL7Vfc9vKN
uNJF22foH9DWLoZvZZa7yxzkBrYAmV4V1q+E1KkedushHpTCdRMHHUE+lSD6ciXV
ePj9MoJHHWErWI4yIF9G4QyozxNUa4obgTjPZyjl6cLcgcIif2+Gy3bba41arixf
B/O/xsveqztNmS7zrFSai2wea8uHaN/D4DdTefna6ddJamrr0hJPbN5JKI1rquLh
mJuH+2zfs49BM0fJtvKx8dYmbLnDVdB0erk8VoK/mj7pd/vCNX/rcMIa4GzRyhSD
26tczUszODZ0GNRIt4GltVGupaoEAOcjZYl45OamV0AKUw8NyB7r9sDFDn/TAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSFM4z6+IjANQrp
y4RK68R2xDZ2VjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNVZC
WjhZVnA1ZW1WWkIycUVoTXNWWkJKOGpqaGlTOE5CcUJ2dWtmZThMQ2EvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVW
Qlo4WVZwNWVtVlpCMnFFaE1zVlpCSjhqamhpUzhOQnFCdnVrZmU4TENhLzAvODUz
MzhDRkFGODg4QzAzNTBBRTlDQjg0NEFFQkM0NzZDNDM2NzY1Ni5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLbLMMA0EAgACMAcDBQAoBF7IMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQbADANBgkqhkiG9w0BAQsFAAOCAQEAyCi84zYsH4WzlI+c
CpT3RcIpn5vXKtgSuEQApcCE5cS5xEMT+tBcECXvpLLBUTfuznaAwNnw7JFvLyZz
hOfXnbh8rzDLo6Rb62PSWAbVxHFJymsyU1Ykzck1KbGQ9REaOt8nQsYqwI0ZrzdO
YsjwRTeX1khb91y/ydobyW4xKmvKKxConSERJqhtyKJn4km7tTH0YydTH/71Fb6R
LzPDr4ZB360yjZm9hv9+qX3OREPcWy2pKX27JiO0RCsryGPQ11QsIFHo745u11MY
lGxHP4m+iV7OjOW/c8Nj7spIz6ykcLwMPXGRFQcLphr9w714uuMlwtXkSmNZS8In
AqohcQ==
-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:03 2024 by rpki-client on console.sobornost.net