Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D29DE518BF73E49B6087F7DE6776534CE238CD69.cer
File:                     D29DE518BF73E49B6087F7DE6776534CE238CD69.cer (raw, json)
Hash identifier:          fPYti5D2HYjYFEr64SJL8YYN/U8vquC/zqfXF/QK+Po=
Subject key identifier:   D2:9D:E5:18:BF:73:E4:9B:60:87:F7:DE:67:76:53:4C:E2:38:CD:69
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7DA628EA802458FBD62082C0D037CC9BF99BB58F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/0/D29DE518BF73E49B6087F7DE6776534CE238CD69.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Aug 2024 14:48:57 +0000
Certificate not after:    Fri 15 Aug 2025 14:53:57 +0000
Subordinate resources:    AS: 268679
                          IP: 45.165.68.0/22
                          IP: 2804:54f0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a6:28:ea:80:24:58:fb:d6:20:82:c0:d0:37:cc:9b:f9:9b:b5:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 16 14:48:57 2024 GMT
            Not After : Aug 15 14:53:57 2025 GMT
        Subject: CN=D29DE518BF73E49B6087F7DE6776534CE238CD69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:10:55:0d:99:b1:fb:2b:a4:19:45:96:e7:b4:
                    15:15:1f:a2:18:1d:f6:1c:e7:bb:29:65:d8:61:f7:
                    2d:90:80:0b:0d:3a:4c:6f:f8:1e:92:eb:33:2f:36:
                    6b:d5:13:57:e9:0e:ea:e0:4c:30:53:5e:49:cd:a4:
                    a6:06:ec:56:b6:e3:0e:87:db:6b:ab:96:0f:aa:09:
                    5f:3b:84:68:57:08:b3:14:4f:15:c8:4e:cf:4f:ca:
                    cf:20:83:8e:a2:f5:8c:9a:12:cd:80:7c:0c:f7:f9:
                    d7:b9:c7:22:1c:ce:a5:26:e0:1b:8e:5f:ab:ad:19:
                    66:35:82:ab:6e:77:b2:3b:3e:25:fa:4e:99:77:e4:
                    49:2f:fc:c6:4a:e6:f7:dd:9b:f5:13:07:2f:10:40:
                    f3:2b:ad:10:bb:cb:54:ca:36:ed:5a:83:ea:52:3a:
                    83:ad:e2:88:6f:7e:da:e6:4a:8f:11:b1:6b:51:9e:
                    6f:b5:48:87:73:44:23:0b:d5:e0:18:73:61:b6:8f:
                    92:34:f0:f1:a8:4f:60:f0:da:3f:ba:50:c0:c3:3d:
                    c7:9b:6b:eb:ca:cb:5b:44:5e:0d:00:64:40:2c:9a:
                    13:9d:e0:ca:7d:13:9a:d4:37:ce:3c:e1:4e:5b:e2:
                    9c:fb:03:35:c4:1a:8c:50:97:91:75:ae:99:53:b7:
                    f3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:9D:E5:18:BF:73:E4:9B:60:87:F7:DE:67:76:53:4C:E2:38:CD:69
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6yV4iJKDzNTvkwTMm9CKaY646wLN2NbtGt7boUUxvV62/0/D29DE518BF73E49B6087F7DE6776534CE238CD69.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.68.0/22
                IPv6:
                  2804:54f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268679

    Signature Algorithm: sha256WithRSAEncryption
         c8:54:16:05:e5:e9:43:52:18:42:5f:6d:e2:8c:39:40:21:29:
         77:c1:e2:57:f1:65:c8:ec:ce:a1:f5:10:b0:00:bb:4f:cc:27:
         ec:27:fb:61:f5:75:7a:77:a4:5b:e6:72:1e:44:0d:0d:10:95:
         5b:bb:19:17:02:cc:b0:6d:00:68:24:e0:e2:c8:89:c8:a8:47:
         24:37:c2:ac:b7:5b:7b:4a:2a:22:a0:10:76:1a:e6:b4:02:e7:
         a5:3c:f4:e1:4d:2c:25:22:dc:29:8b:9f:fe:7e:74:a5:06:10:
         21:0f:c1:a3:0b:d5:b4:37:7f:a4:69:12:0b:b7:c9:b5:65:aa:
         00:cb:52:c5:c4:05:f8:8d:56:33:0b:db:07:7b:ab:f6:af:a5:
         59:5f:32:8d:87:5f:2f:c0:27:8a:f8:41:78:e4:15:d8:92:d7:
         05:62:15:1f:61:ac:1e:b8:41:21:0f:ff:aa:ac:f8:97:b3:cc:
         48:ee:4a:65:88:f4:6a:d4:41:0d:cf:88:b2:e7:95:58:e4:a4:
         ac:cb:ae:d5:0c:37:c4:22:f9:f2:c4:ec:e7:93:27:5d:d1:83:
         92:3c:ab:bf:99:9e:72:28:fe:7f:3e:21:dc:90:32:fa:90:bf:
         d6:73:15:92:ed:86:ca:63:08:1f:5f:45:a5:89:4b:fe:b3:5b:
         42:2c:8d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:16 2024 by rpki-client on console.sobornost.net