Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D2D869CA8C0182B8F3C1BACFB318670556CFEC3C.cer
File:                     D2D869CA8C0182B8F3C1BACFB318670556CFEC3C.cer (raw, json)
Hash identifier:          cJ7lNmCSZh+Xk0SpWhsVne1ORiSsXuypCEobVwVWvos=
Subject key identifier:   D2:D8:69:CA:8C:01:82:B8:F3:C1:BA:CF:B3:18:67:05:56:CF:EC:3C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       36BA0CF347C313E78F36BB3E85643803F22F66DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/D2D869CA8C0182B8F3C1BACFB318670556CFEC3C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 Aug 2024 13:54:41 +0000
Certificate not after:    Fri 01 Aug 2025 13:59:41 +0000
Subordinate resources:    AS: 270760
                          IP: 179.109.116.0/22
                          IP: 2804:70fc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ba:0c:f3:47:c3:13:e7:8f:36:bb:3e:85:64:38:03:f2:2f:66:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug  2 13:54:41 2024 GMT
            Not After : Aug  1 13:59:41 2025 GMT
        Subject: CN=D2D869CA8C0182B8F3C1BACFB318670556CFEC3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c4:19:01:90:c0:ea:52:a6:ee:db:37:89:84:
                    6f:d2:2f:65:fb:fe:96:73:1c:b6:75:76:0a:ea:a0:
                    e2:db:83:92:68:b8:fd:bf:8c:f7:64:8d:3d:32:ec:
                    46:88:ce:2c:9c:10:ac:a0:df:6e:d4:97:5a:3c:3d:
                    4e:46:24:0c:86:c1:a0:d7:8a:1a:bc:2c:a3:95:08:
                    22:7b:a8:64:3c:75:b2:80:d6:fa:ea:b7:6e:e3:f0:
                    54:3c:1d:c7:ec:ce:c2:98:75:66:2c:e0:57:e2:2a:
                    ab:d4:94:2d:d2:75:c0:16:e6:ab:6f:46:e5:2c:ce:
                    5b:fc:2e:dd:ba:8c:58:52:17:e2:6d:c9:80:a6:a8:
                    3b:08:14:b8:55:81:36:be:bc:17:25:09:90:d3:40:
                    f2:6d:77:92:1f:7b:4d:59:36:a2:bb:34:7e:44:a8:
                    59:3e:71:1e:31:f8:1e:8b:ec:20:29:89:ef:25:b1:
                    00:33:82:4f:b1:e4:52:7b:c1:66:ab:e9:df:29:1f:
                    57:c2:9e:49:57:cc:3a:a0:18:d5:a4:d1:0e:9e:00:
                    19:eb:59:83:d5:4d:1b:95:e8:d8:42:00:23:2e:2f:
                    c0:c0:7d:62:04:de:d5:7d:11:99:05:85:5d:d4:0c:
                    b2:fa:f4:34:7f:f4:f3:43:b5:b9:ad:fa:87:97:65:
                    17:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:D8:69:CA:8C:01:82:B8:F3:C1:BA:CF:B3:18:67:05:56:CF:EC:3C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5x1DBr5uij9rUuc39pJTi2PBYzEiyBjXmZPicKy5AeUM/0/D2D869CA8C0182B8F3C1BACFB318670556CFEC3C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.116.0/22
                IPv6:
                  2804:70fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270760

    Signature Algorithm: sha256WithRSAEncryption
         4b:56:e5:21:a0:e2:bf:2f:c6:65:88:f2:c0:f0:1a:2f:1b:e0:
         3d:26:33:5a:24:31:ae:c1:08:a0:b9:73:43:48:41:96:ed:ef:
         80:90:50:4d:df:88:fd:09:e2:9f:63:9c:7d:86:55:c7:9a:3b:
         9f:f5:cf:c0:18:82:bc:e0:c6:a6:68:db:be:d5:56:31:53:c6:
         92:d7:74:21:ed:75:ea:20:26:97:cf:0a:2d:d6:c4:60:c5:e6:
         a9:b5:7e:cc:72:85:bc:02:15:58:c7:3d:78:12:20:f2:7e:f5:
         fe:11:a8:c7:d7:b9:fd:35:fa:d3:66:81:c7:c9:75:9e:c3:4c:
         a1:c7:17:fa:b8:8a:b8:16:ba:db:7a:10:0e:28:9a:18:11:da:
         19:bd:a5:13:bc:ce:d8:57:ad:f6:a9:0c:b4:4e:3a:d5:fc:1d:
         2a:6b:69:2b:66:6b:67:29:cf:87:48:31:62:3b:2b:3f:2c:33:
         e9:ea:40:cf:ec:a9:25:94:bf:ce:e1:9c:1b:76:81:1a:cc:cf:
         89:62:e3:0e:c2:4e:7e:5e:37:37:dd:61:7a:1d:8d:41:b8:81:
         04:93:27:84:48:80:a2:c5:9d:c0:34:10:53:0a:7b:a9:91:42:
         ca:60:05:b7:d4:f4:bf:b5:b1:33:89:5e:d6:70:70:09:ac:e6:
         ba:67:7a:2d
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUNroM80fDE+ePNrs+hWQ4A/IvZt0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA4MDIxMzU0NDFaFw0yNTA4MDExMzU5NDFaMDMxMTAvBgNV
BAMTKEQyRDg2OUNBOEMwMTgyQjhGM0MxQkFDRkIzMTg2NzA1NTZDRkVDM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwxBkBkMDqUqbu2zeJhG/SL2X7
/pZzHLZ1dgrqoOLbg5JouP2/jPdkjT0y7EaIziycEKyg327Ul1o8PU5GJAyGwaDX
ihq8LKOVCCJ7qGQ8dbKA1vrqt27j8FQ8HcfszsKYdWYs4FfiKqvUlC3SdcAW5qtv
RuUszlv8Lt26jFhSF+JtyYCmqDsIFLhVgTa+vBclCZDTQPJtd5Ife01ZNqK7NH5E
qFk+cR4x+B6L7CApie8lsQAzgk+x5FJ7wWar6d8pH1fCnklXzDqgGNWk0Q6eABnr
WYPVTRuV6NhCACMuL8DAfWIE3tV9EZkFhV3UDLL69DR/9PNDtbmt+oeXZRd9AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTS2GnKjAGCuPPB
us+zGGcFVs/sPDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNXgx
REJyNXVpajlyVXVjMzlwSlRpMlBCWXpFaXlCalhtWlBpY0t5NUFlVU0vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzV4
MURCcjV1aWo5clV1YzM5cEpUaTJQQll6RWl5QmpYbVpQaWNLeTVBZVVNLzAvRDJE
ODY5Q0E4QzAxODJCOEYzQzFCQUNGQjMxODY3MDU1NkNGRUMzQy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCs210MA0EAgACMAcDBQAoBHD8MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQhqDANBgkqhkiG9w0BAQsFAAOCAQEAS1blIaDivy/GZYjy
wPAaLxvgPSYzWiQxrsEIoLlzQ0hBlu3vgJBQTd+I/Qnin2OcfYZVx5o7n/XPwBiC
vODGpmjbvtVWMVPGktd0Ie116iAml88KLdbEYMXmqbV+zHKFvAIVWMc9eBIg8n71
/hGox9e5/TX602aBx8l1nsNMoccX+riKuBa623oQDiiaGBHaGb2lE7zO2Fet9qkM
tE461fwdKmtpK2ZrZynPh0gxYjsrPywz6epAz+ypJZS/zuGcG3aBGszPiWLjDsJO
fl43N91heh2NQbiBBJMnhEiAosWdwDQQUwp7qZFCymAFt9T0v7WxM4le1nBwCazm
umd6LQ==
-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:16 2024 by rpki-client on console.sobornost.net