Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.cer
File:                     D2EAFBBDD27515C2E642A28C64C61A932A14BD02.cer (raw, json)
Hash identifier:          MXwaU8+/2lseWoJvF5q6jOOGFG9FoPvMIIUsJl6TAq4=
Subject key identifier:   D2:EA:FB:BD:D2:75:15:C2:E6:42:A2:8C:64:C6:1A:93:2A:14:BD:02
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       18DAB799691A624EEBBE80FF4ACA2B38FC09F267
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 07 Oct 2024 15:44:07 +0000
Certificate not after:    Mon 06 Oct 2025 15:49:07 +0000
Subordinate resources:    AS: 274632
                          IP: 2804:914c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:da:b7:99:69:1a:62:4e:eb:be:80:ff:4a:ca:2b:38:fc:09:f2:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  7 15:44:07 2024 GMT
            Not After : Oct  6 15:49:07 2025 GMT
        Subject: CN=D2EAFBBDD27515C2E642A28C64C61A932A14BD02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:22:84:36:24:c1:e8:55:da:24:32:9c:f0:
                    fd:3a:dc:38:3f:81:54:2f:2b:a1:b3:4f:e9:04:3f:
                    6c:fd:7d:3e:2f:25:75:2d:d0:e8:b8:24:bc:6d:d3:
                    c9:b2:2f:96:e1:b2:8a:5a:3f:81:b4:05:71:fa:37:
                    2f:8d:4d:16:fd:ec:86:93:a2:3b:6f:81:4a:f8:7e:
                    7f:25:a9:50:9e:e0:2b:f3:c7:e5:c2:53:1f:34:5f:
                    88:71:22:59:8d:d8:33:03:ba:68:da:57:1e:6c:38:
                    c2:53:d4:a4:2f:80:c2:a8:cd:fc:56:05:fd:d6:67:
                    5d:49:f3:ea:f5:39:12:d0:22:ac:5c:47:0c:ee:34:
                    61:46:a7:71:28:70:b9:79:df:27:b9:08:8b:1d:0b:
                    24:fc:eb:74:1f:d3:0b:5c:71:85:ad:0b:d1:ca:68:
                    5e:61:dd:1c:f3:7e:0d:5e:c6:3d:7f:63:a3:75:e7:
                    4c:0e:78:6f:19:9a:7a:c6:64:e5:81:e5:fa:62:d4:
                    71:5d:7e:ff:b0:de:53:6c:1f:3f:9a:fc:00:7b:3f:
                    b4:01:29:0a:7c:ae:4a:ca:53:49:9f:76:21:70:eb:
                    9d:17:1c:dd:cf:f8:a7:42:b8:77:88:8d:3a:da:76:
                    76:a0:84:3b:6a:39:fa:e6:e2:3a:65:84:9d:45:0f:
                    1d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:EA:FB:BD:D2:75:15:C2:E6:42:A2:8C:64:C6:1A:93:2A:14:BD:02
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9RYH9pxFNe3nDdSjZjzp74JmtDVdx3oifWEkhGzNBFf/0/D2EAFBBDD27515C2E642A28C64C61A932A14BD02.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:914c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274632

    Signature Algorithm: sha256WithRSAEncryption
         85:2f:96:2d:1c:f6:c4:54:ee:8b:58:db:8d:a4:42:cf:9f:ba:
         77:b2:94:79:1e:28:a9:21:ff:a9:66:95:a6:d5:42:22:43:f2:
         aa:1a:33:c8:37:f9:2a:dd:b2:34:8c:a4:f0:d1:eb:86:6c:52:
         3e:5f:c1:02:04:6b:a0:d4:85:bf:67:ed:97:eb:b8:59:21:d5:
         19:0a:34:e8:28:3a:c5:13:75:9e:70:9c:55:c6:66:37:85:8f:
         e4:7e:90:76:46:44:19:c6:b0:33:50:36:0f:fb:d4:77:90:06:
         d9:2d:43:f9:74:81:35:cc:a8:fb:18:73:34:4a:6c:02:eb:1a:
         3b:c1:39:4b:94:47:8f:f0:d9:71:27:a9:f4:ab:ed:63:2d:cf:
         f2:af:7d:a6:cf:b8:5d:c2:0e:02:a5:7d:25:4d:99:12:25:54:
         24:78:ee:0b:98:35:3d:f8:72:04:84:1c:88:47:42:4a:dd:05:
         c0:91:7a:3a:4b:62:b2:e1:0d:47:78:c4:3f:07:35:a6:47:9b:
         45:c4:95:85:9a:12:0d:d7:e7:2f:f1:ea:2c:d9:55:6a:a3:2b:
         44:ac:ec:8b:7d:08:b4:19:e8:ba:c5:4c:6d:44:74:f8:4a:08:
         2a:f9:0a:ba:4c:85:54:0e:f6:51:9b:10:c0:5a:b9:f5:38:3f:
         f1:ac:23:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:16 2024 by rpki-client on console.sobornost.net