Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.cer
File:                     BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.cer (raw, json)
Hash identifier:          aY43v9k/hhOUKwcgz/rXwlxeXaAJEvW/8bCRcErC1/I=
Subject key identifier:   BB:AC:19:E9:2B:45:87:A3:AD:58:AD:44:95:16:DF:D7:6B:B3:CD:73
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3803AB68737C54D86CA4E69F00D24FF0AE5B38E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Apr 2024 14:57:00 +0000
Certificate not after:    Wed 23 Apr 2025 15:02:00 +0000
Subordinate resources:    AS: 267286
                          IP: 45.233.8.0/22
                          IP: 2804:4b24::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:03:ab:68:73:7c:54:d8:6c:a4:e6:9f:00:d2:4f:f0:ae:5b:38:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 24 14:57:00 2024 GMT
            Not After : Apr 23 15:02:00 2025 GMT
        Subject: CN=BBAC19E92B4587A3AD58AD449516DFD76BB3CD73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cf:7a:4d:76:12:40:22:d1:ea:5e:3c:0f:3b:
                    37:69:21:95:9a:27:6c:d9:06:75:f5:ad:e9:89:3d:
                    f0:8e:f3:f4:a9:a7:3f:8c:82:58:65:30:1c:01:78:
                    35:45:45:71:9a:af:2e:02:b1:8d:d5:b4:f6:c4:b2:
                    69:6e:82:ac:23:89:80:cb:97:64:f7:27:ae:2c:75:
                    bd:05:01:50:48:c9:e7:74:61:d1:53:c6:df:ef:09:
                    6f:22:26:3d:ea:cb:f0:1a:a1:b2:59:35:d7:8e:6e:
                    e8:2b:a5:dc:3e:4a:22:04:20:63:3e:4c:77:be:af:
                    fb:ec:37:ac:14:59:0c:f4:21:7e:cd:f4:94:bd:f1:
                    27:7d:a9:01:1b:2f:e6:28:b5:4c:47:4e:c1:5f:8c:
                    59:b5:80:98:fb:ad:e2:3a:da:60:68:aa:5b:e2:55:
                    96:af:ac:fe:f1:dc:81:c2:af:2e:2d:45:2e:14:d2:
                    16:1c:0a:76:15:52:a2:fa:87:1c:4b:4f:93:c9:3f:
                    0f:43:33:96:dc:3f:ad:12:2a:c7:25:6a:6a:2f:bb:
                    e2:5a:be:d5:de:da:79:7e:ba:82:ce:bf:87:10:f1:
                    18:fc:8d:08:3b:4f:d7:4e:44:05:78:76:3f:b0:8a:
                    19:4e:e2:de:ef:03:75:2b:a9:71:7c:30:dc:47:27:
                    4a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BB:AC:19:E9:2B:45:87:A3:AD:58:AD:44:95:16:DF:D7:6B:B3:CD:73
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4epocpKUp1Q9fFFL4QGa9CnsLFZyrJ4Xn4uFGj8qxT7E/0/BBAC19E92B4587A3AD58AD449516DFD76BB3CD73.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.8.0/22
                IPv6:
                  2804:4b24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267286

    Signature Algorithm: sha256WithRSAEncryption
         49:78:73:89:3b:55:4e:36:70:44:88:72:3a:3e:98:37:5d:3e:
         72:bb:31:ea:a9:20:eb:12:3f:89:28:b7:97:69:ef:1f:36:2f:
         74:2f:37:e5:75:49:f0:9e:e6:3b:1a:30:63:74:ff:e9:51:6f:
         71:74:81:3c:03:1e:3d:19:7a:a2:58:01:f2:1a:c5:a2:cd:2a:
         49:0c:7f:cd:d9:84:a6:44:af:bf:ae:3a:42:61:a0:a1:31:64:
         10:04:3b:ed:d8:aa:19:c1:52:4a:8a:ee:20:1f:e5:68:84:f1:
         35:37:06:06:29:5e:d9:be:b5:8c:b4:b9:1b:d4:fe:91:2f:a3:
         b6:d8:64:5d:0e:04:05:b5:8f:0e:47:53:fd:ca:ff:df:f8:fa:
         6b:cf:27:aa:f4:28:e4:ab:2a:9c:43:43:7c:08:37:1d:2b:34:
         cd:e2:f8:d2:1d:74:fa:5f:b6:8f:6c:df:68:f7:b1:6c:87:4e:
         2c:10:68:a0:ce:db:63:98:7b:37:e0:30:53:5f:3f:18:8f:c4:
         7a:f9:fe:f6:72:35:17:76:cc:92:f3:72:14:8e:e4:30:50:96:
         ea:17:6e:78:8e:19:0d:8c:45:15:38:55:b3:e2:c1:12:4f:68:
         18:a9:8f:55:54:7c:e4:3c:66:86:c4:13:21:ef:f5:ce:65:d7:
         c3:31:01:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:12 2024 by rpki-client on console.sobornost.net