Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BA0000290CCA847B173A7D196F03889806E7091A.cer
File:                     BA0000290CCA847B173A7D196F03889806E7091A.cer (raw, json)
Hash identifier:          krbQMP/WHKiYBCPp4ysLhl0+M37SLJyYf0FMcGgQEXs=
Subject key identifier:   BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6EF70C05E9609BB7515237807B688FB1D6C175F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Jul 2024 19:09:47 +0000
Certificate not after:    Mon 14 Jul 2025 19:14:47 +0000
Subordinate resources:    AS: 262758
                          IP: 186.224.240.0/20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f7:0c:05:e9:60:9b:b7:51:52:37:80:7b:68:8f:b1:d6:c1:75:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 15 19:09:47 2024 GMT
            Not After : Jul 14 19:14:47 2025 GMT
        Subject: CN=BA0000290CCA847B173A7D196F03889806E7091A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:ae:da:93:a5:ab:02:fe:14:83:16:74:50:
                    e4:e7:72:58:d4:92:9b:b1:d2:ab:51:a6:02:6c:b8:
                    eb:5a:1c:0e:3b:d6:f4:e5:ce:d5:29:e9:e4:38:c7:
                    17:11:f0:88:81:d6:5a:d7:eb:14:f1:7a:d0:b9:f1:
                    e9:ca:80:6b:27:59:32:e2:be:06:13:14:e5:24:f6:
                    9e:6e:66:d9:a0:a9:50:95:95:c2:86:37:27:5e:af:
                    90:8d:9c:c7:77:6f:5b:40:ab:7e:5f:c2:be:77:f0:
                    84:45:11:e7:80:da:61:f7:ba:c0:3e:67:2b:fd:82:
                    62:cc:fb:2f:58:90:fa:1d:5e:c3:7b:6b:db:b5:8d:
                    82:31:fa:0f:a0:92:58:c3:17:e8:d3:6c:c9:9f:ad:
                    c4:26:33:ee:49:75:67:dd:1d:9a:49:c1:3b:d6:0c:
                    5b:15:0d:bb:71:d1:50:36:7d:89:7c:0d:da:71:f1:
                    27:98:70:b1:8f:72:32:5e:cc:f1:d7:a4:b9:f7:06:
                    d4:fe:5b:73:dd:2a:de:27:12:f8:81:0c:be:16:c1:
                    62:4d:75:06:ad:fa:b9:97:0a:ce:3b:8a:37:63:07:
                    39:aa:20:65:e6:9e:fb:fc:3d:83:9b:3a:4f:cd:06:
                    0b:07:df:61:cc:bc:b1:cf:26:32:e5:0b:d2:ab:fa:
                    fb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:00:00:29:0C:CA:84:7B:17:3A:7D:19:6F:03:88:98:06:E7:09:1A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/0/BA0000290CCA847B173A7D196F03889806E7091A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.240.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262758

    Signature Algorithm: sha256WithRSAEncryption
         ad:1d:08:5d:a7:2a:43:5f:be:ca:c7:58:f7:cf:c9:b9:40:36:
         85:21:09:73:ae:f6:b2:75:58:fe:e2:3f:a4:29:21:a2:e4:1a:
         29:99:11:b3:53:fd:37:c4:ba:13:dc:02:21:71:e1:19:cf:46:
         78:7c:04:e7:4f:a4:17:20:73:71:3e:a2:74:08:9e:42:42:23:
         07:f9:3c:3d:56:64:22:94:09:34:71:9e:ce:4d:31:b1:a1:d8:
         b4:36:2e:45:19:96:05:84:8f:1b:1f:b0:63:c5:d0:45:b0:f1:
         01:d7:5a:aa:aa:67:a6:cf:84:b1:73:d3:11:dc:a5:3b:37:30:
         f5:64:9f:1b:52:97:43:b3:a3:ec:a9:06:6f:17:d9:fd:91:32:
         e2:8b:7d:9c:6f:9a:8b:cc:22:1b:7e:a8:8f:3e:a3:f9:6e:e3:
         d0:5c:16:60:08:da:a5:4e:53:ff:ea:cc:b9:96:29:b4:6b:3c:
         57:26:a2:c0:18:24:90:06:d0:05:2e:4a:b1:17:56:4c:56:cf:
         68:b7:60:7a:d9:c4:88:ab:74:f6:d5:81:e0:e6:47:4f:3a:06:
         65:5c:87:14:bb:d2:bb:bf:54:f5:7a:b9:71:d0:b6:f4:e3:f9:
         0d:55:d9:f5:19:af:4c:be:6b:33:04:53:33:40:5b:3d:26:b9:
         df:6f:57:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:12 2024 by rpki-client on console.sobornost.net