Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/98EA20A009301C2358E08E395002F34F079AC9D0.cer
File:                     98EA20A009301C2358E08E395002F34F079AC9D0.cer (raw, json)
Hash identifier:          v7ZS2C/ytch2sPsz2Rp/NUASIUXBWsdJ6hu1+9C12Ww=
Subject key identifier:   98:EA:20:A0:09:30:1C:23:58:E0:8E:39:50:02:F3:4F:07:9A:C9:D0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1D99F75B1FD5AA977EAE2A75671ADF226AD2C9DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/98EA20A009301C2358E08E395002F34F079AC9D0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 01:01:06 +0000
Certificate not after:    Thu 03 Apr 2025 01:06:06 +0000
Subordinate resources:    AS: 269286
                          IP: 45.183.112.0/22
                          IP: 2804:6240::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:99:f7:5b:1f:d5:aa:97:7e:ae:2a:75:67:1a:df:22:6a:d2:c9:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 01:01:06 2024 GMT
            Not After : Apr  3 01:06:06 2025 GMT
        Subject: CN=98EA20A009301C2358E08E395002F34F079AC9D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4c:56:94:f8:0f:04:e8:64:e7:ff:4a:46:49:
                    38:44:56:94:85:96:e2:d2:4f:13:be:13:1b:27:3e:
                    af:76:4f:81:68:4e:8f:b9:1f:fd:76:0f:7b:b9:74:
                    ba:8c:6d:7e:f7:07:b1:88:f0:d0:85:94:b5:a2:c8:
                    c4:7e:76:97:9a:93:48:a0:d0:75:8d:85:df:0b:9b:
                    5c:50:97:6f:dc:83:ef:a4:51:ba:fc:da:2c:09:17:
                    92:af:83:8a:de:bb:fc:0e:d1:49:f3:1b:98:de:e4:
                    f3:fb:c9:f3:43:50:01:65:8d:95:bd:2e:54:31:2e:
                    22:4c:21:c6:9c:e3:99:ab:08:77:c3:aa:47:2f:e3:
                    a4:8a:dc:0c:8f:55:a8:bf:8e:12:75:21:aa:ca:d9:
                    e0:2a:0e:04:6a:a7:fd:55:6e:20:ce:45:ab:88:80:
                    79:be:9e:c5:a1:76:05:c4:c5:cc:c9:b2:08:d7:fe:
                    9a:86:77:f1:db:3b:26:95:ec:aa:8f:95:77:65:6a:
                    72:ce:71:bd:50:cb:d1:27:77:b0:43:05:73:40:3f:
                    92:57:1c:61:6e:01:d8:7a:1a:63:1b:f7:11:5a:8b:
                    75:71:6e:b6:40:8e:ce:1f:b7:bf:b1:60:5b:08:7c:
                    0a:f3:6d:7b:15:32:3c:40:09:76:d4:f4:a0:6a:ca:
                    df:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:EA:20:A0:09:30:1C:23:58:E0:8E:39:50:02:F3:4F:07:9A:C9:D0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AZVcVHKo6Kq1Ab2a29Heg5Nsq6eM9eMyA417h75H4k7i/1/98EA20A009301C2358E08E395002F34F079AC9D0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.112.0/22
                IPv6:
                  2804:6240::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269286

    Signature Algorithm: sha256WithRSAEncryption
         90:cd:28:3a:e0:cd:f0:37:a7:e5:ec:dd:c5:dd:b2:4e:96:5c:
         ab:0e:fd:84:4e:fd:a5:2a:aa:8f:ad:a2:59:e7:ac:e3:27:44:
         cd:97:9d:33:92:89:1e:63:15:dc:08:40:ed:6c:c0:27:cf:de:
         72:04:aa:f9:ba:af:bb:f6:c4:5b:82:7e:07:d6:2a:9d:ea:2d:
         61:8d:9a:91:5c:ca:87:8d:e5:c8:9b:ee:e1:d2:4e:e6:b0:ea:
         67:cc:15:64:63:33:32:e9:dc:f6:33:cd:44:b3:87:81:21:c6:
         04:d6:a9:5c:23:9e:a2:0c:c7:a4:b0:c0:ea:61:f9:8f:a7:6c:
         8f:d0:a1:fc:0f:9f:e7:d9:4f:5a:f5:ca:85:6a:a1:81:97:94:
         d5:34:a0:96:59:99:d9:31:1d:19:35:4a:92:d1:99:1d:48:85:
         9e:c7:4e:05:54:ba:a4:08:d1:71:da:35:02:30:0c:24:82:12:
         76:0d:38:a5:58:7b:32:67:74:bc:f0:70:8d:b4:46:b1:8b:4b:
         aa:f0:a8:06:d8:6f:47:60:2c:9e:bc:45:26:77:50:57:2f:0f:
         d9:f1:98:ba:36:33:d2:10:d6:8d:44:47:66:c8:93:78:58:21:
         f2:92:c1:f5:7d:3a:62:67:5b:28:14:a3:bf:17:01:45:2f:e8:
         d6:1e:10:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:06 2024 by rpki-client on console.sobornost.net