Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/922E3735E5BF16BE90E9010EF27CD44BFD7D40EB.cer
File:                     922E3735E5BF16BE90E9010EF27CD44BFD7D40EB.cer (raw, json)
Hash identifier:          MUozOXs3ik4OIsI+mZzw+f9VNrl5kWIZaaqnPJYxLkc=
Subject key identifier:   92:2E:37:35:E5:BF:16:BE:90:E9:01:0E:F2:7C:D4:4B:FD:7D:40:EB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       123202359DFFABC85FE4FC00251E1B6EFAF4D259
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/922E3735E5BF16BE90E9010EF27CD44BFD7D40EB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Sep 2024 20:32:01 +0000
Certificate not after:    Thu 25 Sep 2025 20:37:01 +0000
Subordinate resources:    AS: 262543
                          IP: 177.72.80.0/21
                          IP: 2804:37a4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:32:02:35:9d:ff:ab:c8:5f:e4:fc:00:25:1e:1b:6e:fa:f4:d2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 26 20:32:01 2024 GMT
            Not After : Sep 25 20:37:01 2025 GMT
        Subject: CN=922E3735E5BF16BE90E9010EF27CD44BFD7D40EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8b:c1:18:e1:14:13:fa:bb:c6:8a:11:f8:fb:
                    9c:36:46:8b:31:c8:a1:f3:93:9a:c0:d2:27:8c:b5:
                    78:c0:5d:c8:cf:aa:15:d4:9d:1a:32:74:36:4f:9d:
                    55:f3:16:9c:8d:e6:d3:7f:e4:99:3b:12:36:d2:14:
                    f2:57:89:c5:4d:16:65:97:c9:28:8a:60:fd:7f:ca:
                    1e:02:81:d7:a1:83:a7:09:91:4b:07:44:ca:2e:34:
                    ca:2b:8e:e7:42:22:ca:93:5d:63:79:dc:a9:7b:cf:
                    b2:bc:82:8a:93:c2:08:45:f0:ae:ce:4f:d6:43:ab:
                    cf:49:6f:19:66:cd:9a:bd:ff:37:e4:e4:88:61:25:
                    4f:d7:26:ac:96:ad:58:24:17:bd:0c:d3:c0:a1:03:
                    e1:9e:1d:4f:74:29:79:c8:1a:81:81:54:d6:43:e3:
                    fe:3a:76:c9:a8:92:28:29:69:e5:46:c0:39:13:6b:
                    79:6e:09:1e:b8:5a:f4:99:c0:c8:01:cb:16:df:93:
                    9c:14:66:70:7c:75:e0:37:a2:af:48:15:7f:c5:20:
                    8e:b7:65:ce:cf:81:10:6a:b6:fe:42:20:84:6d:28:
                    00:d1:69:1c:58:74:9f:f1:65:c1:32:a2:71:86:e0:
                    ba:d6:0e:ea:8f:e0:8b:6a:a1:35:ae:b5:50:f1:ef:
                    e4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                92:2E:37:35:E5:BF:16:BE:90:E9:01:0E:F2:7C:D4:4B:FD:7D:40:EB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/922E3735E5BF16BE90E9010EF27CD44BFD7D40EB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.80.0/21
                IPv6:
                  2804:37a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262543

    Signature Algorithm: sha256WithRSAEncryption
         53:73:5f:34:f8:d5:28:a0:8b:83:fa:f7:7a:2f:fd:8f:c1:d6:
         23:0d:07:5f:aa:f2:34:c9:c6:94:c5:ed:b6:50:cd:4d:38:c2:
         8a:0a:8e:42:d0:68:e0:49:a8:9c:fa:73:94:cc:e6:77:ad:8d:
         87:f0:93:cb:b4:9e:3d:fd:1e:3c:2e:50:91:22:c0:54:a0:a8:
         2a:b6:cb:7e:be:64:ce:f7:bd:8d:ac:d1:dc:a8:7f:b7:cb:8e:
         9c:05:b7:53:db:7b:35:9e:f6:8c:3f:f8:b9:ac:bd:ff:30:97:
         42:23:b8:a6:24:7b:62:cf:f9:3e:0c:bb:a8:ec:ea:8f:5d:ad:
         e3:62:aa:d6:82:b8:03:1e:ed:4e:24:7f:56:cf:2b:90:bf:e1:
         07:94:04:18:89:ff:3b:b8:5a:6b:a2:e7:c1:86:98:a4:2f:6a:
         6e:15:8b:60:23:21:33:db:e8:b8:40:68:5a:44:df:9e:6e:d5:
         54:37:0b:96:73:2e:61:5b:46:cc:24:e5:28:19:18:f1:87:b8:
         df:0e:87:6f:c4:3e:f4:e6:59:f5:1c:c0:93:82:6f:b1:c3:ed:
         10:0d:d6:06:d3:e2:dd:06:91:7d:c6:0e:b7:16:57:f6:2b:ae:
         e8:16:44:c9:12:a6:24:f4:33:68:e7:38:4c:9e:73:0b:b0:75:
         a4:dd:f1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:05 2024 by rpki-client on console.sobornost.net