Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E42FCDE18156017AB0DA4B3C8D82FB56DDB11E53.cer
File:                     E42FCDE18156017AB0DA4B3C8D82FB56DDB11E53.cer (raw, json)
Hash identifier:          n5FhLQJ6QeEM8cspPi9BDppgnyqT+6ogY6pFCz18+Ts=
Subject key identifier:   E4:2F:CD:E1:81:56:01:7A:B0:DA:4B:3C:8D:82:FB:56:DD:B1:1E:53
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       566B55C7B502D90496A6E6E3DA8FEE75448407D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/E42FCDE18156017AB0DA4B3C8D82FB56DDB11E53.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 01 Oct 2024 12:33:13 +0000
Certificate not after:    Tue 30 Sep 2025 12:38:13 +0000
Subordinate resources:    AS: 265487
                          IP: 168.197.144.0/22
                          IP: 2804:34e8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:6b:55:c7:b5:02:d9:04:96:a6:e6:e3:da:8f:ee:75:44:84:07:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  1 12:33:13 2024 GMT
            Not After : Sep 30 12:38:13 2025 GMT
        Subject: CN=E42FCDE18156017AB0DA4B3C8D82FB56DDB11E53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:85:53:1a:bb:a1:19:ac:54:b7:18:7c:cb:40:
                    f1:cd:a5:47:32:e1:7f:cc:ef:e6:59:1f:a6:74:2c:
                    f0:68:d1:6c:01:4b:9a:3f:f0:e3:37:d8:72:0d:bf:
                    fb:bd:30:f4:05:21:50:9f:38:6d:d0:4f:8c:0c:46:
                    7b:c6:35:cd:bd:39:5e:c2:d2:4c:db:1b:d1:74:cc:
                    e8:99:83:53:54:29:85:7f:7b:a7:0f:32:86:32:93:
                    1a:f2:ea:9b:1c:f1:27:46:66:7e:82:f6:a1:9d:e8:
                    71:a6:de:23:95:7e:b9:39:c3:5e:1b:13:37:eb:ac:
                    c7:01:f2:83:b2:67:30:ac:92:93:d1:2a:de:3a:5d:
                    37:1b:4f:74:f8:c8:da:fd:b3:4d:74:0d:9e:1a:03:
                    65:8f:19:c0:73:fe:17:1d:d9:4a:85:3f:8e:51:58:
                    4e:72:18:a4:1d:ee:a0:29:86:72:b5:e9:53:fa:94:
                    0b:73:b3:20:0e:71:d9:ac:39:cf:71:5e:91:7e:f7:
                    cf:0f:06:50:c8:24:0c:d0:ee:e0:11:e7:e2:f3:f0:
                    d2:1f:2e:f9:71:85:83:c6:f3:cd:5d:f5:2f:7d:5e:
                    fc:f1:58:1c:bd:50:74:b0:6a:0e:f6:35:42:4c:97:
                    fe:3a:36:64:4a:56:8e:eb:18:26:87:dc:d7:ea:a2:
                    b4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E4:2F:CD:E1:81:56:01:7A:B0:DA:4B:3C:8D:82:FB:56:DD:B1:1E:53
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/E42FCDE18156017AB0DA4B3C8D82FB56DDB11E53.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.144.0/22
                IPv6:
                  2804:34e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265487

    Signature Algorithm: sha256WithRSAEncryption
         2d:80:d1:6f:41:0d:ed:8e:b4:15:02:b3:41:ef:13:1f:40:12:
         34:21:13:0e:0e:73:6a:a9:21:6d:b1:f2:34:15:fd:e6:0a:fd:
         b0:7a:e1:e7:8e:bc:0a:46:3e:56:37:0e:56:94:51:5e:d9:5c:
         5d:4d:8b:8c:46:67:b3:c6:c9:fd:0b:b0:f8:40:04:52:f8:f6:
         3e:b6:6e:ec:17:70:76:40:71:64:3a:c3:8c:85:ca:50:20:69:
         6e:d9:bc:fa:2d:4d:2e:12:45:8e:dc:aa:c3:2d:f6:71:9a:ed:
         17:3c:a5:2f:d4:b6:7a:47:a0:cc:ae:9a:20:8e:a3:9f:76:17:
         88:f3:42:27:40:51:68:03:32:68:9e:ae:a5:0e:e3:33:fc:d7:
         4b:de:cc:c7:3d:55:4e:a3:3f:8f:94:1c:53:bd:5d:7f:c3:60:
         a4:b1:ca:fc:d5:c9:3b:e2:ed:6c:18:ba:d2:bf:d9:5d:42:9c:
         ac:e5:10:81:5c:94:0f:02:a9:4b:68:6f:00:d7:5e:b5:3f:12:
         28:54:ee:99:d6:5e:84:d5:25:7f:8a:07:e0:ef:50:a1:83:38:
         be:79:1d:31:9c:0a:67:87:6e:d9:da:15:ab:03:de:5a:d4:9f:
         a7:df:a2:cb:ec:f7:ef:28:31:e2:44:5a:cf:f8:9f:42:4e:d4:
         7d:ee:32:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:19 2024 by rpki-client on console.sobornost.net