Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.cer
File:                     D05EC24593D2026D2D5B7D7EF76C0E52331234DF.cer (raw, json)
Hash identifier:          uxUUJw7feQ//4yIdIRRWGXn5IviGV+hxJRTkNsc2Qo0=
Subject key identifier:   D0:5E:C2:45:93:D2:02:6D:2D:5B:7D:7E:F7:6C:0E:52:33:12:34:DF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       75E8EDD6339A6BB0D631422180832B9E493F5865
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 14:01:47 +0000
Certificate not after:    Thu 03 Apr 2025 14:06:47 +0000
Subordinate resources:    AS: 267622
                          IP: 45.71.168.0/22
                          IP: 2804:4448::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e8:ed:d6:33:9a:6b:b0:d6:31:42:21:80:83:2b:9e:49:3f:58:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 14:01:47 2024 GMT
            Not After : Apr  3 14:06:47 2025 GMT
        Subject: CN=D05EC24593D2026D2D5B7D7EF76C0E52331234DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:99:76:93:70:57:b2:ee:a6:79:29:ff:30:f9:
                    35:73:25:e4:29:0c:60:6f:1e:14:fc:98:ab:3a:80:
                    9f:6b:04:7b:81:97:0b:0f:c6:05:c3:2f:d7:a7:c9:
                    6b:d5:ec:bc:5b:30:f4:e5:32:a6:31:99:52:5e:14:
                    8f:6b:61:bf:a7:b1:c7:b5:50:4c:21:ea:81:38:e9:
                    f8:ad:02:dd:2a:da:c8:d5:58:48:50:30:f7:d5:a4:
                    92:bf:6c:13:0b:61:65:49:a0:bb:85:3f:6d:8c:11:
                    32:fd:7a:cc:fd:a0:05:d4:a8:15:a4:6f:68:5f:d0:
                    84:04:2e:cc:79:b2:86:42:93:dc:7e:9d:c1:b9:d6:
                    2b:20:88:2b:3a:d0:50:72:3a:d6:9c:ea:1f:da:be:
                    d9:73:de:41:23:5e:4c:fb:fe:f4:d3:23:f7:b7:04:
                    81:50:5c:44:06:bd:60:ad:2b:00:19:08:11:3b:51:
                    75:5a:38:27:f4:e6:50:84:7b:59:1a:d4:82:c0:f4:
                    78:1e:52:9f:02:39:70:a3:3b:cc:92:b3:fa:33:31:
                    95:21:eb:fb:a9:a3:fd:70:cd:91:b2:fc:44:f1:39:
                    28:d8:d4:f8:b6:38:54:91:be:bd:84:b7:64:a5:42:
                    85:cb:62:2b:9c:d9:45:b2:a9:06:1c:7f:81:8d:81:
                    4b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:5E:C2:45:93:D2:02:6D:2D:5B:7D:7E:F7:6C:0E:52:33:12:34:DF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.168.0/22
                IPv6:
                  2804:4448::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267622

    Signature Algorithm: sha256WithRSAEncryption
         8c:24:40:6a:d3:94:f7:e5:fb:b1:b5:ae:e4:24:2e:3c:6c:f0:
         f6:e4:65:c6:38:ed:a9:8f:68:74:39:c7:7c:d7:95:91:3f:7f:
         78:60:44:23:f2:3d:0d:e9:4f:94:d2:03:ef:72:17:c2:96:09:
         68:c0:d3:9f:db:d7:37:1b:7d:7c:c3:5e:b5:a7:d9:21:86:1a:
         49:1f:54:d0:76:bd:d5:ab:42:75:2e:8b:80:2f:c9:40:c8:0e:
         92:65:bd:4d:e0:3f:07:e1:70:ad:2f:f8:4a:0b:16:c5:44:35:
         cf:97:4e:7b:0b:91:db:47:07:80:e0:33:bd:40:60:9e:a3:2b:
         d9:82:14:4a:a6:27:79:9a:7f:2d:e1:38:94:cd:f8:0b:15:39:
         45:a6:db:f7:7c:3c:94:68:ab:87:16:e2:45:22:64:de:19:4d:
         bf:c2:c9:82:a1:c6:1e:74:5b:09:e0:88:23:39:64:fe:6c:04:
         61:b0:e9:cc:6a:2a:e1:6c:b1:44:22:68:e1:9a:fe:c7:40:eb:
         2e:b3:90:fd:1d:be:7c:dd:9a:e7:ce:82:fd:ee:f7:09:f1:35:
         6c:78:17:e2:f7:b9:95:07:98:74:cd:7e:a5:ae:c3:7b:81:bc:
         2e:5a:f1:00:f7:52:a8:64:58:93:04:0b:91:36:a7:36:d8:e1:
         23:52:5a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:15 2024 by rpki-client on console.sobornost.net