Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C6F6AAF3D87A29E1329BFD2FD169A87246675046.cer
File:                     C6F6AAF3D87A29E1329BFD2FD169A87246675046.cer (raw, json)
Hash identifier:          RzNv+7aVgaqlVEWGVo43HflXlL2ttNxCuUCQDN5ecTE=
Subject key identifier:   C6:F6:AA:F3:D8:7A:29:E1:32:9B:FD:2F:D1:69:A8:72:46:67:50:46
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       60FDA79DB768FDD50C6A8BDA93104CC91A0EAFCB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/C6F6AAF3D87A29E1329BFD2FD169A87246675046.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 04 Oct 2024 06:42:37 +0000
Certificate not after:    Fri 03 Oct 2025 06:47:37 +0000
Subordinate resources:    AS: 266279
                          IP: 170.78.128.0/22
                          IP: 2804:3548::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fd:a7:9d:b7:68:fd:d5:0c:6a:8b:da:93:10:4c:c9:1a:0e:af:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  4 06:42:37 2024 GMT
            Not After : Oct  3 06:47:37 2025 GMT
        Subject: CN=C6F6AAF3D87A29E1329BFD2FD169A87246675046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:20:61:25:16:83:90:79:84:92:77:9e:8a:41:
                    94:ea:17:92:fb:99:fb:32:cd:63:26:25:d1:57:9c:
                    44:a2:58:53:9f:84:04:97:2b:66:0b:7d:95:f4:01:
                    e7:b3:f9:0e:37:7e:2a:a4:00:6b:3f:fb:b6:89:2d:
                    9e:1d:d9:80:68:45:43:32:66:c1:71:af:49:62:ed:
                    de:20:60:18:06:b9:79:b1:d6:3d:0e:4b:81:6a:03:
                    b2:25:a8:18:89:80:fc:7e:d2:72:03:0b:79:42:ae:
                    0f:a0:3f:22:2f:3b:de:14:b3:9a:ec:89:42:9e:fb:
                    9e:9f:4d:db:6b:6d:e5:3e:dd:e2:e2:42:e1:26:a3:
                    c0:ee:1b:ce:61:d6:0a:6c:4e:ee:54:37:72:c9:21:
                    c1:9f:ed:11:11:ce:ec:66:1c:2e:e4:c0:61:38:be:
                    8b:71:ab:df:1c:dd:9b:d5:31:7b:65:4b:0e:51:ef:
                    5a:58:2c:c3:8f:b8:50:8a:34:a0:17:6b:49:48:78:
                    6b:94:16:4f:53:7a:8e:ae:84:d1:47:84:b9:a0:73:
                    94:f3:3b:c5:cb:cd:5f:a3:dc:38:a4:8a:84:d1:d5:
                    18:1a:df:88:27:74:65:12:fb:c8:e8:c4:25:76:6c:
                    c6:d6:b4:1f:76:01:16:5b:01:6a:d3:cc:e7:af:3c:
                    2f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C6:F6:AA:F3:D8:7A:29:E1:32:9B:FD:2F:D1:69:A8:72:46:67:50:46
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ETm9SHjuk1Y4e78y5pPtETXRECkjNRi7FB5zX5cv6uNs/0/C6F6AAF3D87A29E1329BFD2FD169A87246675046.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.128.0/22
                IPv6:
                  2804:3548::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266279

    Signature Algorithm: sha256WithRSAEncryption
         49:00:89:05:8b:2d:c9:35:5a:d5:91:e3:90:f9:3b:a6:54:75:
         d7:3b:17:b1:00:2a:09:e1:a2:29:d4:b7:80:f3:65:51:22:e6:
         7f:18:9e:e2:67:03:1d:6f:83:68:8c:b2:54:ea:1f:bc:64:cc:
         be:48:df:8e:1c:da:65:c0:b9:86:1c:b5:f6:c6:e3:09:a1:14:
         ac:32:91:d7:5f:b7:41:31:36:b2:99:2e:7d:95:42:83:94:75:
         f9:c8:12:70:f3:01:08:91:52:f6:23:d9:a6:df:80:4c:49:5c:
         5e:88:1b:f1:73:7c:08:2d:12:72:a6:32:e3:89:f5:c6:e0:cc:
         31:fa:af:c1:15:83:4c:4f:d7:25:69:f0:83:fb:f7:9b:ff:29:
         10:1a:10:de:bb:57:e5:b9:55:44:80:6f:01:e6:dd:24:22:0a:
         e6:59:f5:9f:16:f7:c9:a8:0a:6d:63:6e:ad:ef:b0:b5:c0:13:
         2e:07:ca:4c:42:3f:b6:b4:53:33:6e:b9:0b:95:23:30:be:84:
         24:fb:ca:53:83:2e:82:94:1b:e9:c3:cf:f8:fa:05:ba:ad:f9:
         87:25:7a:ea:86:ca:f5:c2:e0:1e:a1:60:75:37:a0:6a:2a:0b:
         ef:ad:68:ad:3d:48:0c:3d:3f:a2:f1:30:fc:16:ab:75:a3:cd:
         85:73:32:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:13 2024 by rpki-client on console.sobornost.net