Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9A72AC165710D3D2240950F90FF41932E5992CFB.cer
File:                     9A72AC165710D3D2240950F90FF41932E5992CFB.cer (raw, json)
Hash identifier:          It9tVMd1HG9Nfizakd/FhWTQH7apT6VHAlNHmY8AvWQ=
Subject key identifier:   9A:72:AC:16:57:10:D3:D2:24:09:50:F9:0F:F4:19:32:E5:99:2C:FB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1F8D39832E7055A5D9F376785DA2ADE85008459F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/9A72AC165710D3D2240950F90FF41932E5992CFB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 23:28:30 +0000
Certificate not after:    Wed 02 Apr 2025 23:33:30 +0000
Subordinate resources:    AS: 269079
                          IP: 45.179.132.0/22
                          IP: 2804:5f24::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:8d:39:83:2e:70:55:a5:d9:f3:76:78:5d:a2:ad:e8:50:08:45:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 23:28:30 2024 GMT
            Not After : Apr  2 23:33:30 2025 GMT
        Subject: CN=9A72AC165710D3D2240950F90FF41932E5992CFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:32:f3:97:26:e6:16:a4:3d:a5:f3:b2:24:9f:
                    ed:82:29:78:2e:19:40:a8:0c:0f:4f:a5:75:39:e4:
                    49:02:83:ca:f9:f8:31:b9:41:3d:1a:eb:5b:a2:7b:
                    d6:02:b0:43:74:9f:15:76:b6:b3:7e:91:38:b4:36:
                    16:a3:74:90:13:e9:28:5b:28:e8:79:7e:78:b2:3f:
                    66:c1:ba:45:25:02:b4:c2:d5:d7:09:87:b1:cf:38:
                    84:86:03:3f:c5:17:8d:9a:2a:a7:f0:d7:ea:03:9e:
                    15:89:2f:88:6d:02:08:c6:45:0e:49:f9:aa:61:bc:
                    5f:59:34:2a:49:c9:35:aa:93:31:2c:8f:ba:8d:3f:
                    3e:30:87:40:2d:ae:52:52:26:7c:25:c7:ca:b3:03:
                    e7:90:c1:b0:0a:f6:10:53:65:08:d2:ff:e1:e7:80:
                    94:a9:d0:c0:9d:94:da:62:4e:d0:ae:35:4c:76:6d:
                    33:f8:73:58:51:66:bd:d2:65:c7:78:c5:49:eb:ec:
                    5f:51:5b:31:01:ff:d1:d9:e7:bf:f2:83:2c:0b:51:
                    31:9d:d1:ee:e6:1e:46:7f:9a:ef:13:28:e1:a2:9c:
                    4b:36:ef:37:0a:d0:8b:a9:a7:32:ec:f4:55:40:9e:
                    44:3e:05:79:8a:85:ab:32:0a:5c:40:f4:bd:9c:32:
                    0f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:72:AC:16:57:10:D3:D2:24:09:50:F9:0F:F4:19:32:E5:99:2C:FB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FjwNFnYc3Bk5FhrTRU1HAevcAGTqDqNyKjmXj9gEPgpD/1/9A72AC165710D3D2240950F90FF41932E5992CFB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.132.0/22
                IPv6:
                  2804:5f24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269079

    Signature Algorithm: sha256WithRSAEncryption
         3e:b2:bb:00:43:36:1a:87:62:29:00:e6:aa:bf:77:bb:f1:c9:
         62:2b:27:79:b3:82:bc:6c:7c:10:45:78:6f:6a:00:6c:e5:99:
         b5:f2:71:36:51:d0:1f:e6:90:21:b8:00:16:37:40:0e:84:24:
         84:0f:07:bd:30:a4:ad:55:93:72:aa:33:66:d7:d3:d9:25:d8:
         75:cf:8f:a1:be:2b:59:2e:ad:ed:93:57:ca:76:e0:3c:d1:cd:
         5a:b9:aa:d2:da:9c:66:c4:94:85:d3:4d:f3:ff:fd:9e:28:07:
         d0:15:f3:eb:f4:da:93:70:a1:c6:c7:11:6c:90:88:39:03:e4:
         f1:fa:d1:ea:d6:03:0b:80:a9:56:ed:97:fc:26:98:40:94:bd:
         31:93:89:8a:5c:4f:83:bf:1f:73:27:75:59:99:df:bf:7a:78:
         dc:7c:38:2b:72:06:be:6a:ff:78:57:ab:f2:d3:49:03:f9:9b:
         4c:34:bc:32:d4:42:f1:f2:b8:36:e2:86:42:e3:7e:56:aa:f7:
         9f:a5:2f:a5:bf:70:1b:f4:d2:25:06:31:81:8b:a6:b3:19:68:
         ae:c2:cb:9b:7a:b0:2c:02:48:a6:b1:fd:f5:32:f5:0c:f6:48:
         3c:e4:d2:f6:5c:52:92:d1:93:db:80:9c:44:f1:f5:0c:97:c4:
         39:24:89:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:07 2024 by rpki-client on console.sobornost.net