Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A22397E95F2C96E43716EC7A998DB69418401B55.cer
File:                     A22397E95F2C96E43716EC7A998DB69418401B55.cer (raw, json)
Hash identifier:          SJIV7AJvO9Nq54Lh6mKchpm668f9N1vGynAtmevICwY=
Subject key identifier:   A2:23:97:E9:5F:2C:96:E4:37:16:EC:7A:99:8D:B6:94:18:40:1B:55
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4EA1F9D34EBC718F3D322632A494D88AB9DB925A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/A22397E95F2C96E43716EC7A998DB69418401B55.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Jun 2024 18:26:01 +0000
Certificate not after:    Thu 26 Jun 2025 18:31:01 +0000
Subordinate resources:    AS: 268057
                          IP: 45.168.108.0/22
                          IP: 2804:574c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a1:f9:d3:4e:bc:71:8f:3d:32:26:32:a4:94:d8:8a:b9:db:92:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 27 18:26:01 2024 GMT
            Not After : Jun 26 18:31:01 2025 GMT
        Subject: CN=A22397E95F2C96E43716EC7A998DB69418401B55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:33:e8:f7:f4:3b:b4:f1:0d:97:5d:97:0a:c4:
                    c2:66:a9:5f:d8:58:6b:db:70:5d:7c:95:b1:27:3b:
                    2a:66:93:8d:98:6c:b9:ed:7d:45:88:04:68:59:07:
                    82:5b:d4:1c:26:a7:7f:a7:ff:ac:9e:d8:18:61:aa:
                    e0:76:41:68:9b:98:35:d8:fd:ee:e7:ae:c4:7a:dd:
                    a2:01:a4:6f:79:d8:1c:bf:4c:d4:ab:63:2e:bb:b6:
                    51:e6:cf:9a:01:06:b3:a7:39:33:13:3e:b0:18:a6:
                    09:14:1e:37:8b:b3:1a:47:0b:5f:7c:a7:56:25:37:
                    1a:82:85:50:ea:2b:cb:c7:f7:a4:f8:6f:9c:46:95:
                    3c:5e:13:47:94:dc:28:6b:fe:71:f7:c0:06:e2:d2:
                    0c:27:65:28:10:56:9d:19:02:b8:0c:05:b7:92:d4:
                    6f:15:1d:6a:95:28:db:7b:66:ba:36:96:49:0a:8d:
                    55:37:b3:af:01:9c:ea:29:6f:35:64:21:28:9f:aa:
                    78:d1:8e:4f:09:b3:b9:e8:37:99:a0:7f:e8:35:ab:
                    18:27:5a:99:ad:7d:07:37:bc:78:33:2c:53:a3:35:
                    7b:48:3b:b6:3e:07:4a:92:fa:03:1c:79:c8:46:29:
                    99:bf:d7:fa:50:00:45:2e:3d:62:0c:70:5d:c3:e4:
                    b0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A2:23:97:E9:5F:2C:96:E4:37:16:EC:7A:99:8D:B6:94:18:40:1B:55
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EnHREsNpLviKCwb5LAAeyLEaDWKWSYc2kBanYLqW794v/0/A22397E95F2C96E43716EC7A998DB69418401B55.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.108.0/22
                IPv6:
                  2804:574c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268057

    Signature Algorithm: sha256WithRSAEncryption
         7f:d8:65:32:58:fb:6b:63:01:02:30:6a:51:23:bb:0a:6f:e0:
         91:fe:3b:48:08:49:99:c6:a2:60:c7:23:4c:3f:78:3e:2f:6c:
         fb:cb:b0:e8:40:18:94:a0:81:0e:b4:97:c7:c3:e3:82:01:4c:
         16:b9:08:7b:12:49:c8:8a:7a:f7:34:48:a7:b8:5b:1f:e2:2b:
         dc:67:40:27:11:aa:3b:76:95:f3:4b:e7:4d:85:19:80:45:a4:
         47:ae:ec:81:92:d3:21:4c:95:60:c4:62:b7:c6:62:b3:5d:de:
         6a:12:05:c7:1c:a6:3a:56:67:99:27:dc:fb:fb:b5:00:b1:91:
         06:e6:28:5f:1c:07:2b:84:05:38:52:22:10:3c:a3:0e:2d:1f:
         b4:89:d0:64:52:1d:0d:08:34:3c:a5:c5:aa:3f:cc:23:3f:ec:
         b8:31:1c:53:9d:db:e2:4d:4c:cf:ba:86:24:27:35:d4:d0:ef:
         df:33:60:80:92:cd:16:f8:e7:c1:e4:1a:10:7f:57:c1:33:97:
         67:46:95:14:32:09:db:1a:ba:56:eb:ab:ed:20:14:a0:46:8f:
         30:bc:80:48:dc:d5:a7:c8:e8:ef:6f:c8:50:09:f7:bf:c6:36:
         fa:68:fe:0c:81:67:c3:db:16:db:ee:f2:c5:a8:fb:7c:4c:4e:
         ed:53:5a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:08 2024 by rpki-client on console.sobornost.net