Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.cer
File:                     89509769EB595BA27FC5B8208CFB0D05C39E2BD3.cer (raw, json)
Hash identifier:          LQ0n8ndRUMwpoHGGywUIrXkhDUaE9UQ23lyM9BKMP0Y=
Subject key identifier:   89:50:97:69:EB:59:5B:A2:7F:C5:B8:20:8C:FB:0D:05:C3:9E:2B:D3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       34DFE76AE87068236F1AFF45987DA324885839A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Aug 2024 21:47:26 +0000
Certificate not after:    Wed 06 Aug 2025 21:52:26 +0000
Subordinate resources:    AS: 266005
                          IP: 181.191.120.0/22
                          IP: 2804:4120::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:df:e7:6a:e8:70:68:23:6f:1a:ff:45:98:7d:a3:24:88:58:39:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  7 21:47:26 2024 GMT
            Not After : Aug  6 21:52:26 2025 GMT
        Subject: CN=89509769EB595BA27FC5B8208CFB0D05C39E2BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:57:45:c9:ae:63:6b:4d:3d:96:74:90:95:ab:
                    d7:c8:a2:bd:0c:37:55:42:bf:19:ee:0f:18:82:5d:
                    fd:09:6a:30:04:d9:42:fe:a4:95:86:46:22:71:a4:
                    ba:78:1b:45:b0:3d:3c:42:09:ee:dc:cd:be:aa:03:
                    be:d1:b7:ca:14:5b:77:6d:38:1e:8c:c7:8a:74:d6:
                    f3:2b:1f:78:42:29:38:f6:33:89:52:74:bb:c9:2a:
                    03:59:e0:07:69:a2:7f:a6:fa:1b:43:1e:d9:94:97:
                    b7:cb:19:d8:15:6a:d5:37:73:ed:a1:01:ba:5c:07:
                    19:30:c3:b3:32:2f:76:06:ba:a8:fb:57:87:19:f5:
                    ee:28:b3:3e:b9:b8:fa:ec:d9:99:2d:a5:89:1b:28:
                    95:a6:31:b4:21:9c:d5:cd:13:d9:2c:9f:a7:1e:a2:
                    24:34:f8:c7:8c:33:03:93:5c:65:85:34:a7:21:65:
                    dd:7a:fe:a4:d2:6f:9f:68:1a:07:15:a6:23:57:01:
                    36:f3:9a:bd:bc:30:7f:5b:64:7b:3f:2c:cf:c1:2e:
                    97:50:cb:54:36:42:0f:19:46:c4:01:66:c0:b9:75:
                    5d:00:f2:b9:51:53:20:ec:74:41:24:ad:c8:ab:06:
                    f5:c4:cf:6d:bd:a5:a2:f9:34:e6:61:97:c4:c4:d6:
                    a2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:50:97:69:EB:59:5B:A2:7F:C5:B8:20:8C:FB:0D:05:C3:9E:2B:D3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DvcAx7UknLZYjHdmAHVQhLsAH7G6j2bUdS9mMayukb5t/0/89509769EB595BA27FC5B8208CFB0D05C39E2BD3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.120.0/22
                IPv6:
                  2804:4120::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266005

    Signature Algorithm: sha256WithRSAEncryption
         3f:ae:44:e0:d8:24:7e:31:07:36:1a:f1:46:dc:1f:56:6f:82:
         43:23:94:b7:b0:1a:2f:89:18:c5:24:01:e3:86:1b:a1:1c:09:
         bc:21:0b:0a:36:cb:46:bd:2e:23:1c:7c:06:a2:53:d1:ce:15:
         9a:28:1f:8d:b9:23:61:02:e9:c0:96:04:ca:bf:c3:e7:3d:0b:
         9b:13:8a:52:aa:99:51:ae:0a:67:bf:02:02:cc:15:c2:52:ca:
         b8:15:45:74:77:b9:b4:4f:ff:39:49:1b:1b:ab:dc:06:cd:ed:
         95:ce:75:63:91:2e:b5:cc:25:7a:01:5f:98:37:06:27:da:b2:
         70:1d:01:99:da:95:79:11:4e:34:18:d7:a3:23:66:96:22:21:
         8a:4e:de:4a:b5:a6:c3:dc:9d:1c:4c:b2:18:7b:e6:35:ac:85:
         3c:30:ba:64:ea:93:52:4a:4c:14:4d:df:62:8f:42:20:3d:0e:
         34:b6:7d:aa:83:92:59:44:7c:35:86:99:5c:45:99:05:4a:7b:
         62:b5:a7:d5:07:78:9d:5b:01:9d:a2:1e:d7:83:ac:3c:59:4f:
         8e:77:db:55:20:ef:75:c2:2c:b9:0a:12:10:8c:2d:aa:41:2b:
         a6:54:8f:c9:54:eb:74:0f:4f:d3:6b:31:3e:9a:39:5f:df:09:
         9c:46:55:ec
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUNN/nauhwaCNvGv9FmH2jJIhYOaAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA4MDcyMTQ3MjZaFw0yNTA4MDYyMTUyMjZaMDMxMTAvBgNV
BAMTKDg5NTA5NzY5RUI1OTVCQTI3RkM1QjgyMDhDRkIwRDA1QzM5RTJCRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgV0XJrmNrTT2WdJCVq9fIor0M
N1VCvxnuDxiCXf0JajAE2UL+pJWGRiJxpLp4G0WwPTxCCe7czb6qA77Rt8oUW3dt
OB6Mx4p01vMrH3hCKTj2M4lSdLvJKgNZ4Adpon+m+htDHtmUl7fLGdgVatU3c+2h
AbpcBxkww7MyL3YGuqj7V4cZ9e4osz65uPrs2ZktpYkbKJWmMbQhnNXNE9ksn6ce
oiQ0+MeMMwOTXGWFNKchZd16/qTSb59oGgcVpiNXATbzmr28MH9bZHs/LM/BLpdQ
y1Q2Qg8ZRsQBZsC5dV0A8rlRUyDsdEEkrcirBvXEz229paL5NOZhl8TE1qLzAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSJUJdp61lbon/F
uCCM+w0Fw54r0zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRHZj
QXg3VWtuTFpZakhkbUFIVlFoTHNBSDdHNmoyYlVkUzltTWF5dWtiNXQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0R2
Y0F4N1VrbkxaWWpIZG1BSFZRaExzQUg3RzZqMmJVZFM5bU1heXVrYjV0LzAvODk1
MDk3NjlFQjU5NUJBMjdGQzVCODIwOENGQjBEMDVDMzlFMkJEMy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCtb94MA0EAgACMAcDBQAoBEEgMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQPFTANBgkqhkiG9w0BAQsFAAOCAQEAP65E4NgkfjEHNhrx
RtwfVm+CQyOUt7AaL4kYxSQB44YboRwJvCELCjbLRr0uIxx8BqJT0c4Vmigfjbkj
YQLpwJYEyr/D5z0LmxOKUqqZUa4KZ78CAswVwlLKuBVFdHe5tE//OUkbG6vcBs3t
lc51Y5EutcwlegFfmDcGJ9qycB0BmdqVeRFONBjXoyNmliIhik7eSrWmw9ydHEyy
GHvmNayFPDC6ZOqTUkpMFE3fYo9CID0ONLZ9qoOSWUR8NYaZXEWZBUp7YrWn1Qd4
nVsBnaIe14OsPFlPjnfbVSDvdcIsuQoSEIwtqkErplSPyVTrdA9P02sxPpo5X98J
nEZV7A==
-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:04 2024 by rpki-client on console.sobornost.net