Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/99D25D587D9589BDB42383AA05FD4F58C8E686AD.cer
File:                     99D25D587D9589BDB42383AA05FD4F58C8E686AD.cer (raw, json)
Hash identifier:          0e7WncTG/YFh8I6++fU2TNSMwBGo1x34b72exH7wMf8=
Subject key identifier:   99:D2:5D:58:7D:95:89:BD:B4:23:83:AA:05:FD:4F:58:C8:E6:86:AD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0D4C38F5267E5DEF7CB63378916289E3BA93F161
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/99D25D587D9589BDB42383AA05FD4F58C8E686AD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 14 Oct 2024 13:57:04 +0000
Certificate not after:    Mon 13 Oct 2025 14:02:04 +0000
Subordinate resources:    AS: 262473
                          IP: 177.47.208.0/20
                          IP: 2804:7f94::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:4c:38:f5:26:7e:5d:ef:7c:b6:33:78:91:62:89:e3:ba:93:f1:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 14 13:57:04 2024 GMT
            Not After : Oct 13 14:02:04 2025 GMT
        Subject: CN=99D25D587D9589BDB42383AA05FD4F58C8E686AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:96:d5:ca:48:a1:de:26:fd:a2:01:55:23:c3:
                    4e:64:0b:d3:fa:1e:b7:c1:e2:37:08:86:0b:78:ce:
                    30:82:8d:08:58:0d:7b:c2:ad:c6:28:03:12:96:3d:
                    b1:ee:73:fd:0d:f1:94:b5:e0:2b:df:e2:5c:62:be:
                    8e:01:84:a6:96:fc:36:d7:4c:d5:54:db:a4:da:e7:
                    e8:02:d9:52:40:9d:02:61:e9:dd:52:34:83:cd:99:
                    4d:d1:d9:5c:fd:8b:39:42:50:01:f5:7a:9a:06:a2:
                    e0:35:84:41:ec:32:f7:f2:eb:60:da:b2:8e:91:50:
                    20:b6:f4:bd:28:4e:e9:78:98:8c:7f:81:5a:34:58:
                    18:9d:ef:78:a9:41:c4:be:91:81:31:da:5c:53:ed:
                    79:4e:57:18:e9:33:ea:24:2d:96:94:65:b0:fc:95:
                    20:44:36:e6:53:85:a7:70:c4:44:c9:28:10:02:27:
                    ec:0c:35:85:6f:86:7a:db:88:8d:cf:ca:3b:26:98:
                    78:5b:c0:43:e5:ed:9c:58:ac:ad:57:d4:29:fb:02:
                    cc:68:23:b4:6c:ac:c4:fb:a7:ea:34:40:52:9b:76:
                    9b:8f:16:f7:28:a2:89:5a:18:ef:54:cb:8d:25:83:
                    b0:27:9a:14:fa:7e:db:7b:74:d0:4d:88:ca:e4:45:
                    81:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:D2:5D:58:7D:95:89:BD:B4:23:83:AA:05:FD:4F:58:C8:E6:86:AD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/12yKf5eMqPgjuk3hTsxAMPKRDFWny1HvnKtPR5AwTvFr/0/99D25D587D9589BDB42383AA05FD4F58C8E686AD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.208.0/20
                IPv6:
                  2804:7f94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262473

    Signature Algorithm: sha256WithRSAEncryption
         b5:2a:0a:1a:49:8b:5a:ae:d8:05:59:73:1b:6b:bc:36:33:17:
         ed:1a:cd:c4:1b:33:7d:ef:d7:35:ba:89:2b:0a:45:eb:ae:76:
         13:7a:4d:16:41:c2:0d:cc:e9:0f:b1:3e:28:4f:d9:7d:1a:1a:
         a6:bc:42:c6:14:13:7a:9e:05:f2:04:c6:e5:f3:7b:48:31:9e:
         43:6d:13:fb:0d:d0:88:54:60:24:86:03:b9:dc:1a:61:20:36:
         fe:91:0b:49:96:5b:01:ad:ec:9b:fc:8b:10:ca:00:b3:d6:92:
         98:cc:d6:3c:97:c4:db:c6:53:33:40:51:d0:ce:df:88:00:09:
         3b:c6:d5:a3:21:d8:7f:64:91:af:c9:c4:9d:ca:10:1a:20:15:
         0a:b0:1c:3a:cd:93:38:52:2e:2c:20:a2:58:6c:c3:69:2e:f4:
         cc:cd:f5:03:af:ea:26:b0:80:fa:d3:ce:0d:13:04:22:52:c0:
         24:86:ac:bf:e2:cc:1e:4e:89:0b:10:c5:01:ec:3e:b1:f0:dc:
         cb:1a:b3:5c:27:43:b1:5f:58:d3:ed:30:b8:08:db:ef:f9:bb:
         96:da:3c:c3:17:eb:8d:03:e5:2a:d2:43:ec:00:10:2a:e1:91:
         24:ca:7f:e8:68:88:fd:24:08:08:6d:4d:36:32:6c:07:13:9e:
         c3:c2:2c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:06 2024 by rpki-client on console.sobornost.net