Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.cer
File:                     A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.cer (raw, json)
Hash identifier:          DIwvaMwGAaE95e5HHYFt7sLWWwdl8jfUvmN7tXC4jiQ=
Subject key identifier:   A0:E7:81:7C:46:BA:B0:14:CC:0A:8E:B2:B6:DC:C3:C0:D7:2C:6E:63
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1A91C356C54B3D1216B82E2CD1852E7494944609
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Jun 2024 16:56:53 +0000
Certificate not after:    Thu 26 Jun 2025 17:01:53 +0000
Subordinate resources:    AS: 266166
                          IP: 72.44.20.0/22
                          IP: 2804:3bb4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:91:c3:56:c5:4b:3d:12:16:b8:2e:2c:d1:85:2e:74:94:94:46:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 27 16:56:53 2024 GMT
            Not After : Jun 26 17:01:53 2025 GMT
        Subject: CN=A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:04:9f:4e:5e:bb:46:2e:c4:c0:0c:03:92:
                    93:b7:fd:c1:2b:b8:f6:84:0f:11:c1:74:0a:c9:36:
                    5a:f8:c4:8b:de:10:31:b7:60:22:e3:58:99:81:95:
                    2f:aa:73:ee:18:a2:69:a6:9a:c0:54:eb:f1:d3:89:
                    15:06:c6:0c:68:50:8b:7a:01:b1:a6:62:46:eb:b1:
                    dc:76:c1:46:41:75:9f:80:f0:e0:ff:3c:bd:fb:37:
                    fd:21:72:74:91:b3:13:59:e0:85:b8:d5:92:e2:2b:
                    c2:5c:0e:38:bc:b4:9b:72:3d:d5:22:36:c1:f3:1b:
                    a6:2c:1b:fb:b9:a1:d8:92:30:f5:b9:93:99:dc:9d:
                    ef:c7:95:a8:5a:84:ad:2c:e7:ab:58:43:16:16:df:
                    1a:e6:49:77:6d:46:de:cb:93:44:a7:9c:4c:61:a9:
                    66:54:a7:9b:f7:16:31:b0:97:49:98:c0:fe:5f:54:
                    cb:0f:0c:11:06:5b:54:08:f5:8c:14:8d:55:74:a6:
                    71:54:2b:26:a7:c9:e8:aa:a9:c5:07:61:97:11:0d:
                    80:94:78:ee:65:64:2d:d2:e9:77:48:c9:33:72:17:
                    99:cd:67:84:26:52:8d:53:44:eb:10:6e:f3:63:26:
                    2b:92:45:b2:00:8b:16:62:fe:00:8f:f5:47:ba:4f:
                    85:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:E7:81:7C:46:BA:B0:14:CC:0A:8E:B2:B6:DC:C3:C0:D7:2C:6E:63
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/A0E7817C46BAB014CC0A8EB2B6DCC3C0D72C6E63.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.20.0/22
                IPv6:
                  2804:3bb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266166

    Signature Algorithm: sha256WithRSAEncryption
         93:23:ab:e9:88:48:89:06:9e:00:7d:b9:35:57:ba:d6:a0:39:
         d0:52:aa:36:e8:10:86:79:1e:bf:6b:ad:02:54:11:32:be:e8:
         1d:73:b9:db:06:49:5e:14:3b:b1:51:ed:f2:23:27:3d:2f:77:
         d0:92:d0:08:80:69:e5:08:2c:32:8b:e3:6a:0e:7c:44:91:8a:
         ab:75:44:d1:12:12:78:7c:55:31:dc:9b:3f:6f:04:2e:98:ca:
         da:0d:d2:70:df:bf:fe:dd:ec:13:e0:4d:1a:26:cf:fe:97:15:
         e4:90:3b:b1:1a:0b:a2:50:4e:bc:a4:f0:d4:d0:0a:61:5a:56:
         e2:cd:1d:86:da:47:0e:f8:54:cc:c5:a8:75:64:36:a2:36:98:
         00:b3:17:ef:39:04:a7:ab:68:65:70:8d:97:d1:36:aa:c2:d6:
         2b:91:ae:18:ef:84:db:8c:6a:06:33:d5:94:bc:0e:35:00:a9:
         8b:3b:71:22:28:91:17:16:30:4a:86:61:a5:c2:3e:e2:ff:d7:
         68:d7:bd:08:a9:46:04:f8:bc:ad:be:74:39:5b:54:97:44:2c:
         16:57:f0:48:20:21:6c:27:d0:24:f1:55:b0:fc:17:8e:e9:56:
         65:b1:7e:d9:e9:34:ea:04:39:b0:2e:7a:12:f4:77:48:ed:d1:
         46:43:80:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:07 2024 by rpki-client on console.sobornost.net