Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B4F54174CAB335222D5C3A179199900DBAC503F6.cer
File:                     B4F54174CAB335222D5C3A179199900DBAC503F6.cer (raw, json)
Hash identifier:          RIAj/5OUvnKpaoTCYBOL/iMn8hMltqRLjw4o3ItYbyc=
Subject key identifier:   B4:F5:41:74:CA:B3:35:22:2D:5C:3A:17:91:99:90:0D:BA:C5:03:F6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1C0E730CD85F46AC4C497820F84B6D57320603CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/B4F54174CAB335222D5C3A179199900DBAC503F6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 18:14:43 +0000
Certificate not after:    Thu 03 Apr 2025 18:19:43 +0000
Subordinate resources:    AS: 267256
                          IP: 45.232.48.0/22
                          IP: 2804:4aac::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:0e:73:0c:d8:5f:46:ac:4c:49:78:20:f8:4b:6d:57:32:06:03:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 18:14:43 2024 GMT
            Not After : Apr  3 18:19:43 2025 GMT
        Subject: CN=B4F54174CAB335222D5C3A179199900DBAC503F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:87:68:91:1f:db:1c:0c:cc:c8:c4:f8:51:36:
                    dc:62:c2:33:dc:79:e5:e8:59:ad:ba:e5:46:5a:59:
                    2e:f1:16:d2:6d:84:aa:e6:bd:ba:1b:27:d1:4f:b8:
                    35:3f:65:6d:33:80:26:0c:0b:0b:af:65:96:6c:00:
                    7a:4d:6c:19:95:a0:c9:d7:59:6c:d7:1b:d4:a2:1d:
                    0d:46:74:f2:96:25:95:ba:a0:d2:fe:69:c5:d8:68:
                    42:d6:fc:eb:d6:8b:e7:aa:cc:bd:27:30:d6:78:55:
                    7f:c0:2e:2a:3b:18:7b:02:c8:9f:b2:bc:56:17:7c:
                    44:3d:90:6e:34:80:80:b3:d2:7a:a2:d8:b6:a1:8a:
                    4b:c9:b2:b3:c9:bb:58:8e:ae:e3:fb:b6:34:cd:ab:
                    87:fb:fc:30:f0:8a:32:20:52:20:82:be:2a:93:37:
                    c9:aa:c0:90:a8:37:ab:8f:f9:28:cd:8a:b9:93:fc:
                    24:dd:bf:54:9c:7e:9e:cb:10:43:06:b6:0f:cf:aa:
                    5f:66:1b:4b:c2:88:4b:61:28:0c:f1:e0:0b:49:dd:
                    1b:1c:f3:3b:70:e8:d0:73:57:21:72:84:b7:1f:07:
                    3b:87:85:c1:a8:50:63:fc:22:14:b2:89:bf:d2:86:
                    45:89:0b:97:a0:16:19:14:c9:d3:ea:be:86:76:f2:
                    cc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:F5:41:74:CA:B3:35:22:2D:5C:3A:17:91:99:90:0D:BA:C5:03:F6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/B4F54174CAB335222D5C3A179199900DBAC503F6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.48.0/22
                IPv6:
                  2804:4aac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267256

    Signature Algorithm: sha256WithRSAEncryption
         91:42:04:e2:72:d4:41:a2:49:a2:82:89:02:5f:97:11:1a:c5:
         cc:fa:e9:c9:52:b7:b3:f4:14:f9:06:69:7b:d6:04:09:79:ab:
         5b:4b:f1:0a:eb:71:09:d3:42:e4:9c:02:6b:3a:e0:8d:e2:66:
         69:95:73:4e:88:f8:5f:bf:f6:68:63:cf:93:fd:7c:3f:41:0a:
         06:7b:d4:81:19:a8:a8:8c:10:87:a3:5b:27:96:9c:bb:08:30:
         ae:78:c8:29:38:36:74:fb:0a:28:1d:47:57:68:e1:95:06:61:
         22:02:17:b7:b3:d3:26:d8:be:7e:bd:58:55:ae:9e:01:4e:6c:
         74:09:07:48:b1:09:3b:9e:bd:16:82:c4:42:b9:20:78:55:ff:
         18:07:19:cf:3a:0a:14:5d:1f:e6:77:bf:21:0a:95:44:b8:3b:
         6d:18:c9:c3:a3:56:73:51:e5:4c:0a:c7:ef:68:4a:31:20:8f:
         0a:44:28:77:10:72:3b:80:d6:7e:26:62:42:7c:cb:2d:0c:95:
         72:25:81:cb:05:f7:95:54:0b:fc:cc:d7:c8:95:9b:49:c9:77:
         39:cf:56:ab:f0:ce:a7:5a:0f:7a:bd:78:43:8d:c8:07:4b:b1:
         79:13:ed:75:c1:0d:b9:95:ab:eb:91:43:32:6b:3d:8c:bb:4b:
         e8:bf:a1:55
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUHA5zDNhfRqxMSXgg+EttVzIGA8wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxODE0NDNaFw0yNTA0MDMxODE5NDNaMDMxMTAvBgNV
BAMTKEI0RjU0MTc0Q0FCMzM1MjIyRDVDM0ExNzkxOTk5MDBEQkFDNTAzRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTh2iRH9scDMzIxPhRNtxiwjPc
eeXoWa265UZaWS7xFtJthKrmvbobJ9FPuDU/ZW0zgCYMCwuvZZZsAHpNbBmVoMnX
WWzXG9SiHQ1GdPKWJZW6oNL+acXYaELW/OvWi+eqzL0nMNZ4VX/ALio7GHsCyJ+y
vFYXfEQ9kG40gICz0nqi2LahikvJsrPJu1iOruP7tjTNq4f7/DDwijIgUiCCviqT
N8mqwJCoN6uP+SjNirmT/CTdv1Scfp7LEEMGtg/Pql9mG0vCiEthKAzx4AtJ3Rsc
8ztw6NBzVyFyhLcfBzuHhcGoUGP8IhSyib/ShkWJC5egFhkUydPqvoZ28swrAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS09UF0yrM1Ii1c
OheRmZANusUD9jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMzVl
SzRoOEhreUxUNDlIRGkxY1BjZGh1NnNDWHE0QjVQb3FEWjRQbVprbmgvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzM1
ZUs0aDhIa3lMVDQ5SERpMWNQY2RodTZzQ1hxNEI1UG9xRFo0UG1aa25oLzEvQjRG
NTQxNzRDQUIzMzUyMjJENUMzQTE3OTE5OTkwMERCQUM1MDNGNi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLegwMA0EAgACMAcDBQAoBEqsMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQT+DANBgkqhkiG9w0BAQsFAAOCAQEAkUIE4nLUQaJJooKJ
Al+XERrFzPrpyVK3s/QU+QZpe9YECXmrW0vxCutxCdNC5JwCazrgjeJmaZVzToj4
X7/2aGPPk/18P0EKBnvUgRmoqIwQh6NbJ5acuwgwrnjIKTg2dPsKKB1HV2jhlQZh
IgIXt7PTJti+fr1YVa6eAU5sdAkHSLEJO569FoLEQrkgeFX/GAcZzzoKFF0f5ne/
IQqVRLg7bRjJw6NWc1HlTArH72hKMSCPCkQodxByO4DWfiZiQnzLLQyVciWBywX3
lVQL/MzXyJWbScl3Oc9Wq/DOp1oPer14Q43IB0uxeRPtdcENuZWr65FDMms9jLtL
6L+hVQ==
-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:11 2024 by rpki-client on console.sobornost.net