Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D54D28DD1135EB4EA68416B42CFD19DF502929D2.cer
File:                     D54D28DD1135EB4EA68416B42CFD19DF502929D2.cer (raw, json)
Hash identifier:          kvzuWGr1zNHywEvzhzsQ2H0l2lJWzAgXtJ43XG+Rgf4=
Subject key identifier:   D5:4D:28:DD:11:35:EB:4E:A6:84:16:B4:2C:FD:19:DF:50:29:29:D2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       564365ACE8AC596F0075B20DBF4FF7D0B1042650
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Jul 2024 13:38:32 +0000
Certificate not after:    Mon 28 Jul 2025 13:43:32 +0000
Subordinate resources:    AS: 269572
                          IP: 45.189.68.0/22
                          IP: 2804:66a0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:43:65:ac:e8:ac:59:6f:00:75:b2:0d:bf:4f:f7:d0:b1:04:26:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 29 13:38:32 2024 GMT
            Not After : Jul 28 13:43:32 2025 GMT
        Subject: CN=D54D28DD1135EB4EA68416B42CFD19DF502929D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0c:02:80:14:17:e5:0c:a0:de:04:91:43:64:
                    e0:61:84:ef:80:d5:13:e2:b9:8d:10:95:2a:38:79:
                    8c:9d:fb:1a:ec:54:de:59:52:18:cc:e8:69:f7:3f:
                    35:1b:1a:7c:17:d5:0d:5c:bd:bd:c0:c8:ed:42:94:
                    38:91:86:02:fc:11:7e:be:1b:6d:8e:87:7c:f5:81:
                    5b:8a:d3:69:be:2c:65:f9:0a:26:4e:01:bb:7a:22:
                    06:d1:d9:87:ad:32:5b:73:5d:76:7c:6c:ad:68:f3:
                    0a:65:13:f0:4f:d7:30:5d:6d:31:e8:2f:84:ab:11:
                    57:1d:d4:9c:d7:44:32:04:38:09:da:c0:11:99:38:
                    4a:cd:2e:48:c3:06:78:7c:85:91:89:bb:2e:e8:2b:
                    8e:1d:9b:c3:59:48:58:9d:64:9d:24:22:15:fd:bf:
                    ee:1d:08:64:6b:c7:4f:2b:2e:bf:ca:c7:d9:70:44:
                    eb:ba:55:2a:aa:96:4c:09:c8:02:9c:73:d2:5c:9b:
                    e6:96:55:b8:06:16:59:fe:8b:4c:34:e2:27:e1:82:
                    2d:ba:a0:f9:d1:5f:3d:33:7b:54:7e:23:31:06:b9:
                    6a:4d:b7:51:02:6f:0a:98:a4:59:25:68:e5:2a:0c:
                    53:28:cc:95:70:80:c5:55:56:de:fb:92:9e:e0:cc:
                    a9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:4D:28:DD:11:35:EB:4E:A6:84:16:B4:2C:FD:19:DF:50:29:29:D2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/cb7hGxcc7AjZPAjEMwbcTW2ZV1GhsrLbv6inWCp2JSn/0/D54D28DD1135EB4EA68416B42CFD19DF502929D2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.68.0/22
                IPv6:
                  2804:66a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269572

    Signature Algorithm: sha256WithRSAEncryption
         8f:11:84:4d:8e:b7:b7:9b:2e:84:cc:36:2d:e2:1c:38:80:fe:
         da:5f:92:5f:8c:da:2b:09:f3:d2:dc:0a:be:7c:c0:6d:8e:ac:
         2c:ec:47:d2:27:7d:98:29:bc:94:16:a7:23:25:bd:e2:ed:8a:
         13:5a:16:09:37:1e:6d:92:da:2b:e8:00:1c:9a:c1:0e:f7:32:
         b6:0f:be:d6:58:1a:16:24:6f:56:24:b4:65:75:75:96:de:cd:
         a4:a2:73:e1:95:13:60:af:46:ac:67:3c:c5:58:1f:4c:ec:b7:
         d3:13:e2:bc:4c:86:7e:3f:b0:80:78:3c:7b:c4:5f:f6:2e:8f:
         70:d3:d7:e7:89:92:10:64:a4:84:ee:a7:ba:77:1c:e6:52:01:
         bd:52:14:b2:b0:85:27:34:3d:1a:da:af:ed:19:8c:75:a1:3e:
         23:7e:24:47:75:6c:04:d7:b9:07:4d:bd:dc:f8:d1:32:fc:d7:
         ff:f6:93:58:f8:f1:0c:ad:b5:e9:5d:ea:cb:ac:26:77:70:ac:
         6b:3e:e1:5e:7e:3e:62:da:ca:3e:60:8e:72:3f:86:67:cb:83:
         ee:39:f9:17:a5:df:7e:00:39:fd:79:ef:8b:c9:7a:20:6f:74:
         32:bd:dd:c0:83:8c:69:1c:86:d3:0e:ee:5a:d6:8c:45:8f:c0:
         2e:3a:74:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:16 2024 by rpki-client on console.sobornost.net