Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.cer
File:                     8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.cer (raw, json)
Hash identifier:          QeRfoN6jJWz20cPZ2NXv5A73U2Cd/NUvk7fDHlSwswo=
Subject key identifier:   8D:CC:FA:18:68:5F:EC:CC:15:8E:8F:5C:79:31:CA:2D:EF:78:5A:67
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       78A2F5B711439F817E1B2A872C343FD2322D96DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BEiNBxrYQsTCNbARtszLobzqyJ2ZqEbRg3sgBf1EhD3z/0/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BEiNBxrYQsTCNbARtszLobzqyJ2ZqEbRg3sgBf1EhD3z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Jun 2024 19:12:28 +0000
Certificate not after:    Fri 06 Jun 2025 19:17:28 +0000
Subordinate resources:    AS: 269223
                          IP: 45.182.108.0/22
                          IP: 2804:614c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a2:f5:b7:11:43:9f:81:7e:1b:2a:87:2c:34:3f:d2:32:2d:96:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun  7 19:12:28 2024 GMT
            Not After : Jun  6 19:17:28 2025 GMT
        Subject: CN=8DCCFA18685FECCC158E8F5C7931CA2DEF785A67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5e:bd:a6:24:b3:dd:e6:73:32:18:0b:04:3d:
                    b0:48:5f:6d:bf:96:0c:9f:1c:70:43:1f:a1:b2:ab:
                    da:44:3c:a9:21:55:2e:5e:5e:52:e0:6f:0e:76:2e:
                    b9:13:66:c5:fe:fe:e4:62:36:90:ec:3e:e3:b4:75:
                    0d:21:7c:60:f6:ea:dc:b9:93:9f:d8:93:4f:59:4e:
                    e9:93:d4:ab:6d:a5:cd:ce:7f:3a:4f:59:36:e9:13:
                    1d:7d:d0:c2:b6:97:cc:e7:d9:8c:5f:fc:b9:2f:e9:
                    1b:50:a5:27:86:a4:e7:34:74:38:d1:68:6d:b3:f1:
                    d8:57:e0:49:aa:dc:b8:b0:1f:1d:3f:dd:90:5b:aa:
                    bd:98:e4:65:54:81:c5:a3:b8:94:cf:f4:e2:1f:9e:
                    a3:e8:9c:e6:2a:b6:c0:83:79:a3:1a:8b:ad:0a:b0:
                    82:c9:8d:a8:49:71:a8:ee:59:11:3b:af:ff:76:17:
                    b0:5e:2c:12:ef:95:76:18:58:c3:e3:d8:81:aa:fe:
                    1c:18:4c:62:16:bc:7c:8a:6f:64:b1:3a:e1:e0:5b:
                    35:4e:49:89:a5:ba:d0:98:7a:c3:c4:23:33:d0:12:
                    5d:e0:06:d9:84:6f:3d:13:49:f9:f5:1b:39:27:56:
                    0c:39:d2:7c:2c:bc:2f:9e:84:f6:e7:f2:89:c2:b6:
                    ba:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:CC:FA:18:68:5F:EC:CC:15:8E:8F:5C:79:31:CA:2D:EF:78:5A:67
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BEiNBxrYQsTCNbARtszLobzqyJ2ZqEbRg3sgBf1EhD3z/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BEiNBxrYQsTCNbARtszLobzqyJ2ZqEbRg3sgBf1EhD3z/0/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.108.0/22
                IPv6:
                  2804:614c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269223

    Signature Algorithm: sha256WithRSAEncryption
         d4:1d:52:2e:e9:10:82:81:f6:a7:a0:de:5d:a6:3e:75:36:9b:
         1f:c7:6f:b4:b6:41:ab:fb:c0:4e:1a:ef:90:6c:c6:f1:a5:d4:
         18:0b:9e:52:a8:1f:b6:3b:02:2f:b9:59:6f:f1:de:98:3e:ce:
         93:e9:53:80:b8:19:82:a9:06:6c:3b:a7:37:df:3c:62:d4:ea:
         8e:dd:98:6b:a0:65:ae:df:06:a1:ec:85:2f:4d:1d:cc:54:21:
         86:1e:c7:68:f5:8c:ba:66:f1:d9:13:03:60:13:d5:36:cf:8a:
         09:bd:bb:d4:af:87:71:06:ab:ba:45:5f:9e:42:17:4f:ca:b6:
         46:68:f6:3e:dc:57:92:2f:0f:39:ad:5b:d7:b6:f4:31:fd:47:
         ae:67:10:7f:d3:6b:fe:b0:a9:16:24:56:9c:f5:33:52:4b:78:
         cc:ca:10:87:cd:ed:50:42:d4:fb:ef:89:f7:e1:6e:06:82:42:
         08:9e:40:48:9f:5d:29:d6:2c:99:81:be:41:ed:c4:76:3b:8c:
         2c:88:97:52:b8:38:5e:cd:90:c8:4f:89:6a:ac:8f:0c:f4:43:
         05:65:8f:eb:65:58:e8:16:eb:d6:3b:73:3e:29:6a:6b:85:88:
         43:4a:2c:ce:c8:95:12:64:95:7d:46:a6:ad:65:e3:9c:12:bb:
         bf:e0:f3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:04 2024 by rpki-client on console.sobornost.net