Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.cer
File:                     D95F78E630398477E9BAE976B3EAEDB0059994DB.cer (raw, json)
Hash identifier:          1Qdim65L4yWFBgWmIk7poZArFv2Rh6Sbagkyn+6fNdQ=
Subject key identifier:   D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1509FA94EE384768F93A8414271C6224FD831099
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 08:12:31 +0000
Certificate not after:    Thu 03 Apr 2025 08:17:31 +0000
Subordinate resources:    AS: 269647
                          IP: 45.190.136.0/22
                          IP: 2804:67bc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:09:fa:94:ee:38:47:68:f9:3a:84:14:27:1c:62:24:fd:83:10:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 08:12:31 2024 GMT
            Not After : Apr  3 08:17:31 2025 GMT
        Subject: CN=D95F78E630398477E9BAE976B3EAEDB0059994DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:87:45:7e:30:f5:9c:26:b6:45:1b:33:42:ce:
                    19:7f:6d:67:a8:40:36:68:00:d5:7d:bf:36:70:8a:
                    36:e5:42:35:30:e4:e5:1d:cd:17:44:d2:c5:9f:0d:
                    8d:59:0b:f2:ad:a7:da:52:b0:c3:0e:2d:d0:f0:2a:
                    ef:cd:4e:59:2c:b2:58:88:2f:7a:92:65:9e:52:2f:
                    b4:63:0e:14:e4:23:0d:55:aa:fa:a0:01:ee:07:de:
                    9a:5f:06:e2:82:3a:62:d9:a9:a9:90:c9:52:d4:44:
                    74:42:20:da:23:82:55:fa:ac:1f:bd:83:f5:fd:13:
                    89:cc:9d:7b:ac:5a:a4:c3:18:8f:da:9e:bf:d9:1a:
                    d6:d7:20:08:55:51:82:47:fe:24:f0:64:53:e6:f0:
                    8f:f4:dc:95:d2:05:81:fa:b3:15:15:e7:ad:30:f1:
                    7f:b4:de:7f:b9:20:2b:4d:fa:b4:50:e3:25:78:fb:
                    62:39:6d:81:f5:75:48:9e:40:e2:29:31:ab:96:c5:
                    74:44:5a:95:e7:ed:73:18:69:93:89:85:9e:84:cc:
                    35:76:9d:85:2a:87:4e:b3:72:c0:97:fe:1d:15:54:
                    73:4b:b6:25:5d:4a:b4:94:b1:2a:78:ed:2c:8e:8f:
                    1b:2b:e1:5f:7f:03:5f:a7:0c:4f:46:5b:8a:2d:69:
                    bd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:5F:78:E6:30:39:84:77:E9:BA:E9:76:B3:EA:ED:B0:05:99:94:DB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/1/D95F78E630398477E9BAE976B3EAEDB0059994DB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.136.0/22
                IPv6:
                  2804:67bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269647

    Signature Algorithm: sha256WithRSAEncryption
         b2:30:c3:a4:97:66:e5:8a:21:52:2a:9f:64:e0:71:c9:b8:7f:
         fa:60:fc:97:46:b4:d6:76:4b:64:1e:fe:e7:d6:a2:d1:92:a9:
         b7:82:2d:cf:2e:cd:df:3b:ec:cf:51:3e:cd:fb:24:2b:b1:a2:
         f1:a0:48:61:20:c3:26:2f:af:4d:d3:e5:72:d6:a4:d9:50:8e:
         6f:63:e7:65:ec:79:dd:2a:f8:79:d1:50:02:59:83:58:98:53:
         80:dd:1b:79:11:3e:72:26:f7:c4:43:35:15:d1:3c:60:9c:80:
         97:20:b6:00:bf:ca:ac:d7:c6:44:95:f9:f8:43:49:2c:c6:1f:
         32:1e:cc:ac:fd:73:b2:c5:c6:d0:52:26:ba:ab:a1:c6:67:4f:
         90:91:81:e1:46:19:6b:fb:cf:7d:6d:39:74:a9:d1:fb:89:38:
         f8:37:73:df:fb:7b:7b:e5:ad:d7:3d:51:45:77:40:d1:9c:6e:
         fe:e7:2f:14:47:91:99:62:d3:b1:db:a0:16:74:85:e9:dd:74:
         27:41:38:d7:25:f5:38:4c:4f:24:3e:06:df:32:46:4b:62:41:
         01:0f:4f:5f:e4:06:f0:84:92:de:b2:6a:ef:9c:e8:19:ca:98:
         c2:3e:c5:19:d4:53:aa:1e:ac:31:20:ab:16:6f:d6:3f:6b:8a:
         9c:80:84:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:17 2024 by rpki-client on console.sobornost.net