Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.cer
File:                     AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.cer (raw, json)
Hash identifier:          GzgyIFlnTzxfDymS8U2oT76BAfi78s0ZEOUoYADXFWA=
Subject key identifier:   AF:4C:19:7F:36:65:20:5A:2C:9E:DF:8E:68:0E:8A:E5:75:AF:97:D9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6FB6C13747115B68DF0A7BB96E8B4E3B8391DD4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Jul 2024 15:40:06 +0000
Certificate not after:    Mon 28 Jul 2025 15:45:06 +0000
Subordinate resources:    AS: 267188
                          IP: 45.231.28.0/22
                          IP: 2804:4984::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b6:c1:37:47:11:5b:68:df:0a:7b:b9:6e:8b:4e:3b:83:91:dd:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 29 15:40:06 2024 GMT
            Not After : Jul 28 15:45:06 2025 GMT
        Subject: CN=AF4C197F3665205A2C9EDF8E680E8AE575AF97D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b0:da:70:dd:d5:b7:21:d6:9d:b4:a6:aa:65:
                    84:a8:ec:58:2f:ef:1e:ba:59:b8:0d:e7:f1:f9:ac:
                    d9:97:08:12:2b:50:9b:26:bf:d1:c0:06:cc:7f:db:
                    80:95:6e:fc:1e:7b:fb:34:87:46:76:7e:9f:f9:f8:
                    b7:80:2b:4a:e0:93:7b:5d:da:54:85:34:39:88:c8:
                    f3:cf:17:34:40:01:f5:bc:fc:df:3e:dc:1b:c7:da:
                    28:3b:c5:84:5d:e2:8e:eb:ce:59:5b:a3:0a:78:96:
                    ec:b6:f3:0b:c1:a5:a2:8a:27:5d:b5:52:f7:d1:d6:
                    fc:8c:6d:92:61:64:43:a5:6b:04:e1:9a:c3:a4:07:
                    16:38:0c:68:4e:ad:6f:14:20:fa:aa:4b:3b:12:b0:
                    d5:c1:e2:ed:9a:d0:48:f0:42:d8:da:5a:59:49:3d:
                    93:f0:4a:d2:ec:1d:c8:e4:a0:d9:c9:c1:95:42:f6:
                    bd:c0:d0:ad:76:66:5f:88:9d:74:9d:59:91:56:17:
                    73:a3:44:fd:d9:dd:5a:8e:98:d6:f2:73:e7:5f:79:
                    08:9d:bd:1e:74:2e:56:51:f5:79:83:b4:6c:43:64:
                    18:39:8f:9c:74:22:b1:53:4b:8c:32:15:d8:61:96:
                    49:89:61:6c:b2:7d:fc:e1:83:b8:cf:40:3c:47:6c:
                    4a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:4C:19:7F:36:65:20:5A:2C:9E:DF:8E:68:0E:8A:E5:75:AF:97:D9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Ua5xWesRSiX4ui7G6jmoYgH6BarDj8zzuQ3JrgyPwTh/0/AF4C197F3665205A2C9EDF8E680E8AE575AF97D9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.28.0/22
                IPv6:
                  2804:4984::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267188

    Signature Algorithm: sha256WithRSAEncryption
         bd:c4:92:69:35:70:a4:01:83:99:0f:6c:ed:67:11:fe:31:2a:
         22:57:29:fd:17:db:c2:f4:09:f0:f5:e9:46:04:db:2d:7c:7e:
         dd:80:31:47:47:a7:76:dc:b4:f4:70:67:8f:f8:4a:2b:91:0c:
         65:28:a0:fd:eb:f2:66:2a:a1:76:af:30:e8:8e:5e:f7:97:15:
         33:b8:fb:e3:88:df:52:3f:c6:36:db:1f:66:82:2c:9d:40:ba:
         25:6b:d2:c1:64:36:d3:56:7a:f2:8b:8f:d3:a1:cc:0c:ba:8c:
         3e:03:41:83:3a:e7:de:5c:f4:a8:67:65:47:64:8c:48:cc:1b:
         1e:0c:57:4f:aa:2d:13:35:48:b7:53:cc:7a:01:78:ba:79:9f:
         88:31:39:56:57:4b:6e:21:f2:e2:d9:d2:1c:ae:34:80:e3:c3:
         01:02:90:22:ce:b5:06:2d:37:23:0b:dd:f0:8a:ea:bc:53:9d:
         2b:cf:36:92:3c:35:16:bd:2e:86:4f:aa:b4:aa:24:1c:34:e1:
         64:a4:de:8c:59:5a:b1:12:68:cd:b5:f9:16:ef:44:78:b0:8e:
         97:79:69:ce:0f:e4:d6:26:2e:1c:46:7f:4b:77:a8:55:50:93:
         16:06:0a:9c:b3:f3:14:a3:d7:d7:f2:d9:3f:f8:a9:04:80:98:
         a7:36:bb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:10 2024 by rpki-client on console.sobornost.net