Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer
File:                     CFB7582F28699F351069C8C76CC97167BF7BB2EE.cer (raw, json)
Hash identifier:          MwjbChMeGi1WqZ7w4tEnW22ig3PPn7rHCZK7y2lP9oQ=
Subject key identifier:   CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       795B9915F59F03A154B4E7D07FB8EDC4CE44572C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 11:45:10 +0000
Certificate not after:    Thu 03 Apr 2025 11:50:10 +0000
Subordinate resources:    AS: 52742
                          IP: 177.130.16.0/20
                          IP: 2804:cb0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:5b:99:15:f5:9f:03:a1:54:b4:e7:d0:7f:b8:ed:c4:ce:44:57:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 11:45:10 2024 GMT
            Not After : Apr  3 11:50:10 2025 GMT
        Subject: CN=CFB7582F28699F351069C8C76CC97167BF7BB2EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f8:9e:95:78:46:82:80:d3:75:5a:7f:1f:57:
                    5c:5b:fb:0d:e8:91:13:f5:d8:96:58:a8:7b:72:b0:
                    fc:2e:77:e2:44:1f:87:55:83:d4:d1:3f:77:98:34:
                    f1:ac:37:07:87:9a:45:14:18:b6:63:2a:17:b7:dd:
                    61:3f:35:b1:1c:c1:24:92:62:10:b3:4a:34:56:7d:
                    30:b3:23:f9:98:5f:95:60:ed:61:1c:f5:13:5c:ae:
                    4d:d9:16:a7:bf:cf:f1:4b:a0:dd:9e:6d:74:bd:5d:
                    88:51:bb:da:e7:cf:05:0d:aa:ee:70:ec:0b:ed:47:
                    a3:5f:4d:37:8b:77:7b:55:4d:0e:e3:c3:3c:85:f0:
                    d6:9a:4a:e5:4a:08:da:41:3a:84:9f:aa:ff:10:18:
                    b3:20:6d:8f:70:02:c2:5f:6f:6c:9b:66:3f:f6:c8:
                    c4:8d:c9:f1:10:6b:cb:d3:a5:15:85:3c:ab:d4:d4:
                    47:b8:7a:61:51:f3:d3:ec:aa:5c:7c:4e:b1:43:9c:
                    fc:07:a5:82:15:e4:ec:0a:a7:b1:ba:f4:49:10:26:
                    31:1b:15:0b:a0:3c:8b:30:12:26:de:2a:46:ef:d8:
                    56:25:24:20:51:50:28:81:1f:c7:0a:08:4e:fd:2a:
                    a1:97:c5:48:97:9b:4b:a5:5d:36:8b:de:6d:8d:ae:
                    a6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:B7:58:2F:28:69:9F:35:10:69:C8:C7:6C:C9:71:67:BF:7B:B2:EE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BCneDvRBFSAzp7iw6SH6NKUw9oFjgcLDiHALZ3YEUrT7/1/CFB7582F28699F351069C8C76CC97167BF7BB2EE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.16.0/20
                IPv6:
                  2804:cb0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52742

    Signature Algorithm: sha256WithRSAEncryption
         50:27:aa:66:08:08:78:11:bd:cd:2d:e4:67:cd:88:a9:30:1a:
         34:f0:c4:bd:d6:53:cd:dd:6e:b3:01:d9:d8:1e:31:c1:d7:75:
         01:15:ea:35:36:ed:c9:42:4a:e6:dc:0c:3e:d3:63:69:53:86:
         9f:bd:a3:a1:4b:cd:51:f3:6a:b4:8b:d8:d2:de:aa:2d:a0:17:
         7e:03:a8:43:83:69:85:7c:6b:84:4f:eb:68:10:1b:cf:13:cc:
         80:8b:93:8d:ef:8c:48:62:e3:c3:e3:af:af:4d:c9:47:42:6c:
         32:7f:15:ea:af:3b:18:0c:59:bc:ea:e3:52:69:6d:9e:7d:f5:
         9a:81:bc:ca:28:eb:31:9c:bf:b2:aa:46:ce:c6:a9:2f:ef:03:
         f2:19:87:ac:a6:8e:30:42:31:fb:2e:3d:f1:88:3d:7f:76:e7:
         4d:cc:f9:d8:45:83:e8:7b:f4:81:5f:a3:e4:e7:d2:ca:b6:31:
         ab:cb:2a:ac:d9:aa:f4:5a:65:16:29:eb:06:d5:c3:9a:d5:2a:
         b5:21:21:2d:50:70:c5:8b:dd:32:8b:f6:87:17:85:19:9a:57:
         25:21:6c:75:b0:d0:af:12:93:c9:3f:65:ed:47:6d:0f:ac:ed:
         af:2e:33:a4:d9:e2:5e:be:c0:02:24:c4:12:a9:59:75:56:31:
         40:71:4e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:15 2024 by rpki-client on console.sobornost.net