Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E533674BA5C26CC97186C54907220754478B1596.cer
File:                     E533674BA5C26CC97186C54907220754478B1596.cer (raw, json)
Hash identifier:          4brliFXV7Hk7ms1oWJvJZVXhxtH8WoOEzp7ZLLNbrBc=
Subject key identifier:   E5:33:67:4B:A5:C2:6C:C9:71:86:C5:49:07:22:07:54:47:8B:15:96
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       18DB089AC0BE349171C97DDFB60AB31C5620FF5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 Jul 2024 17:38:03 +0000
Certificate not after:    Wed 30 Jul 2025 17:43:03 +0000
Subordinate resources:    AS: 267091
                          IP: 45.229.20.0/22
                          IP: 2804:4800::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:db:08:9a:c0:be:34:91:71:c9:7d:df:b6:0a:b3:1c:56:20:ff:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 31 17:38:03 2024 GMT
            Not After : Jul 30 17:43:03 2025 GMT
        Subject: CN=E533674BA5C26CC97186C54907220754478B1596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f0:85:33:56:4f:66:46:cc:81:40:38:d6:76:
                    0e:2c:d4:35:5e:b0:f8:e9:f7:6f:96:c5:fb:d4:3a:
                    fa:cd:d8:6b:29:92:58:0a:55:88:58:ef:ec:65:70:
                    6b:e9:17:ca:6e:bd:e3:cb:a9:f0:d2:b9:11:98:3f:
                    a2:66:aa:8b:05:75:0d:d6:8a:ff:d3:51:30:c8:76:
                    82:7d:61:10:1b:f7:23:05:fd:44:43:00:b0:e7:63:
                    96:52:22:ab:ee:b1:f5:6a:3a:d2:ec:d5:b2:21:f4:
                    5f:88:38:d6:d5:4c:58:88:8c:a3:6c:13:38:8a:3f:
                    ad:e4:db:68:da:8d:6d:d1:0f:fe:a6:29:16:ba:b3:
                    58:e6:b5:8a:1b:0c:9c:2e:d9:de:44:e8:43:2d:5b:
                    fe:7c:7a:65:44:eb:61:61:af:31:86:b1:b5:07:76:
                    7e:ab:a9:e3:4d:b3:11:6e:a1:f3:46:b1:24:50:72:
                    d4:59:7f:5f:6b:96:2a:a4:2f:1f:87:5f:76:60:d5:
                    e4:c4:f3:98:d0:a8:13:d9:b6:a4:d9:e3:cc:4a:1d:
                    a0:48:51:2e:dc:0f:67:f5:13:de:a9:bd:67:e7:0e:
                    e7:19:84:3b:85:82:73:df:b1:cd:0a:aa:26:96:3c:
                    f0:b1:04:d9:4c:bf:0a:5d:a3:8e:cd:84:01:2d:8f:
                    05:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:33:67:4B:A5:C2:6C:C9:71:86:C5:49:07:22:07:54:47:8B:15:96
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/1/E533674BA5C26CC97186C54907220754478B1596.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.20.0/22
                IPv6:
                  2804:4800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267091

    Signature Algorithm: sha256WithRSAEncryption
         3f:c9:d8:b4:29:36:b3:3b:8c:4c:6c:a4:41:15:79:14:f1:7c:
         6d:b5:5f:70:d6:df:be:e6:dc:a1:21:f8:3c:e8:39:2f:b0:b8:
         c3:04:fc:eb:69:9b:87:96:be:8b:4e:3a:24:1a:35:4c:9f:2d:
         80:f1:14:d5:6d:de:ce:05:2d:a0:9c:24:a5:1e:65:1c:c8:5b:
         d1:80:5e:79:6e:34:9b:25:d0:be:39:d3:50:47:e4:88:80:f3:
         d0:b0:ed:89:a5:16:9b:9c:dc:bb:e1:27:25:ca:04:f4:81:1f:
         a2:67:74:d3:dc:03:f9:05:4e:89:11:05:cc:42:87:3e:79:92:
         83:90:5d:36:b0:f4:c4:29:3c:1e:7d:b2:e2:53:49:6b:ef:02:
         c2:a6:f0:78:91:d1:af:28:d2:c2:84:b8:01:21:de:73:ce:82:
         0c:ae:e7:64:2c:b9:fd:b3:47:ea:59:01:2b:c6:bd:9b:cb:9a:
         ac:0a:36:e2:f7:cb:be:41:57:8b:e8:84:be:93:c5:fe:52:36:
         41:ed:9a:2f:b5:19:8b:a9:a6:b6:7b:45:6a:de:9d:f8:5a:77:
         fd:7b:20:a7:6b:37:6b:ab:b2:d6:55:cf:41:14:1c:f6:3b:d0:
         38:c7:14:1b:8b:c3:b2:48:07:37:c4:9a:ee:5c:c9:a7:d2:65:
         d9:6a:71:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:19 2024 by rpki-client on console.sobornost.net