Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer
File:                     A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.cer (raw, json)
Hash identifier:          rSCJNxx5qOngzjYKK75/ep9OTGJJ9rG/4l177eq49wc=
Subject key identifier:   A5:A3:3C:2B:9B:9B:1A:56:83:44:C1:6E:89:CE:84:E7:BC:E5:F0:41
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       770721D5E8A417FC6F6C45BEDDCA5046B55FB920
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Apr 2024 13:11:03 +0000
Certificate not after:    Wed 23 Apr 2025 13:16:03 +0000
Subordinate resources:    AS: 273689
                          IP: 2804:8abc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:07:21:d5:e8:a4:17:fc:6f:6c:45:be:dd:ca:50:46:b5:5f:b9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 24 13:11:03 2024 GMT
            Not After : Apr 23 13:16:03 2025 GMT
        Subject: CN=A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3b:00:8f:7e:b0:37:3c:f7:58:c7:db:b9:fc:
                    9d:1a:8f:23:74:15:13:b9:30:af:93:3e:28:7c:5c:
                    57:fb:5e:10:39:c2:77:a0:6f:a3:02:7e:21:4f:fc:
                    14:71:f5:6e:fb:1f:41:e7:7e:70:e1:33:33:b1:f8:
                    b2:dd:d1:04:13:b6:c0:9d:54:38:ce:3b:34:a3:e8:
                    c6:0d:2d:68:a9:69:3b:12:82:89:7a:1d:32:27:63:
                    54:57:ba:69:dd:f8:d7:fd:12:93:ae:8f:4d:aa:e1:
                    8b:1e:94:10:82:6d:2b:1a:8d:17:7e:24:c9:c5:34:
                    44:ca:dd:f2:df:8d:4b:c5:73:0a:66:82:3d:c9:da:
                    1a:a9:f4:0f:a4:00:c9:f9:f4:53:95:2d:f9:8b:57:
                    33:f2:73:34:17:7a:0f:36:09:ce:cc:96:10:db:2e:
                    7f:8a:cc:28:13:4b:b5:5d:6c:71:36:60:13:91:c7:
                    3c:c5:a5:f8:46:7d:10:f0:9f:b4:7a:b9:f5:82:2e:
                    c6:a4:92:8c:3b:34:82:ff:15:54:dc:20:f4:04:a0:
                    19:91:b6:18:07:76:49:2a:6f:36:97:93:0a:9c:ff:
                    b6:af:70:3a:11:a7:7d:f2:7f:f8:b3:f8:18:cf:38:
                    dc:bd:bd:73:36:de:05:c6:37:27:1a:82:01:73:17:
                    91:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:A3:3C:2B:9B:9B:1A:56:83:44:C1:6E:89:CE:84:E7:BC:E5:F0:41
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EE8mMraphEsdGoPU8GHLLHmkvnsHj4RZxtDXJKP8v9ZU/0/A5A33C2B9B9B1A568344C16E89CE84E7BCE5F041.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8abc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273689

    Signature Algorithm: sha256WithRSAEncryption
         56:19:1a:49:ca:96:d7:df:69:45:bc:b0:8b:9d:ff:c0:d6:ac:
         ae:ac:3d:fb:0e:82:a8:bc:65:f9:50:e4:2b:52:0a:af:98:eb:
         b0:f4:3b:10:b0:25:af:4a:3d:39:31:db:bb:bd:71:6a:dd:c2:
         a4:fa:b5:5d:fe:d4:46:09:57:93:b2:b3:46:e5:dd:89:ee:f6:
         b6:43:2c:65:34:86:32:c5:65:2a:af:cf:5e:27:fd:b8:5f:fc:
         19:ff:a0:7a:5c:45:66:3f:49:62:22:fc:6c:f1:9b:41:8d:e5:
         af:a0:84:d2:66:89:d2:9c:57:12:37:21:16:60:60:9c:a9:54:
         c0:e4:20:38:3d:ae:3d:73:fb:b9:a9:a2:b5:b1:ef:66:a2:1d:
         99:74:31:49:63:18:4d:1b:5a:27:49:f1:03:b4:49:c0:ad:38:
         72:a2:b6:b6:27:4f:f1:a9:1e:d3:7a:36:c6:41:90:3f:4b:c1:
         4e:b1:d7:79:a9:8e:0a:b5:58:ef:37:6d:02:33:15:97:62:04:
         17:56:53:ee:84:70:92:8f:85:47:c4:8f:a0:00:01:cb:e7:27:
         e6:52:43:5e:7a:40:b5:ee:e1:b1:28:1a:b6:74:f0:4f:14:4c:
         1b:be:03:3f:75:fe:55:94:90:f2:b9:95:88:bb:1e:61:10:2d:
         f8:10:7a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:08 2024 by rpki-client on console.sobornost.net