Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.cer
File:                     ED09475052657B74A139F63C8A27BCD9B26B6B19.cer (raw, json)
Hash identifier:          9yQIuM5mjM+6KFzjJqKrwByYeIXpfJQgDOEkte5QDUY=
Subject key identifier:   ED:09:47:50:52:65:7B:74:A1:39:F6:3C:8A:27:BC:D9:B2:6B:6B:19
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3E953F39863DFD3A53C26DC6EF4063B7F6FFE04C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 21:54:09 +0000
Certificate not after:    Thu 03 Apr 2025 21:59:09 +0000
Subordinate resources:    AS: 267579
                          IP: 45.70.52.0/22
                          IP: 2804:439c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:95:3f:39:86:3d:fd:3a:53:c2:6d:c6:ef:40:63:b7:f6:ff:e0:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 21:54:09 2024 GMT
            Not After : Apr  3 21:59:09 2025 GMT
        Subject: CN=ED09475052657B74A139F63C8A27BCD9B26B6B19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ec:d6:02:a7:46:77:f3:6a:fd:7b:6c:17:e4:
                    e7:84:fe:b0:8a:d2:98:d3:7e:8f:c8:2d:5a:3c:c3:
                    fc:ab:d3:bb:fb:b3:ab:68:40:f4:5f:0e:b7:ef:a1:
                    16:d4:6a:11:7e:6c:f7:50:2d:96:88:fd:a1:46:a0:
                    26:6c:c6:e0:c3:2b:45:53:43:d3:99:e3:c7:cb:82:
                    d2:d8:cc:80:1f:53:b8:00:91:90:02:fe:42:61:b7:
                    2e:cb:1d:59:b0:20:60:6f:1a:fb:72:85:6d:c6:a8:
                    f1:aa:55:f7:f8:f5:b2:28:14:0a:ab:89:4f:ba:3a:
                    8d:4e:fe:d6:42:5b:0d:a4:e1:21:a6:a3:cc:23:69:
                    0a:17:df:e0:2f:68:1d:b5:96:0f:24:92:0e:bd:83:
                    a9:27:62:04:48:0c:6c:8e:5b:12:46:9d:81:1a:59:
                    07:f1:1d:e8:69:e7:81:e4:c8:86:b5:ac:b5:ca:74:
                    a1:7b:3c:6a:a2:fd:96:af:af:57:84:da:81:0b:fe:
                    6d:76:14:84:8a:be:44:32:bd:94:a6:99:94:29:46:
                    aa:78:37:e8:b4:53:40:c1:79:9b:fc:5d:ab:4c:08:
                    15:eb:43:69:1b:82:2f:7d:8b:50:d7:26:18:82:92:
                    40:3b:2e:34:82:8c:ad:95:6b:74:cf:c7:e3:c0:69:
                    10:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:09:47:50:52:65:7B:74:A1:39:F6:3C:8A:27:BC:D9:B2:6B:6B:19
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/1/ED09475052657B74A139F63C8A27BCD9B26B6B19.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.52.0/22
                IPv6:
                  2804:439c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267579

    Signature Algorithm: sha256WithRSAEncryption
         b8:6b:ce:70:50:4d:7b:b2:3a:e9:0e:7b:c3:26:2a:a1:bd:7c:
         07:6a:aa:85:30:9c:41:00:be:54:42:83:23:0d:80:39:b7:b8:
         88:4c:d8:44:fb:69:be:1b:6b:89:d4:d1:ad:d8:d5:03:4c:75:
         30:8b:cd:8a:36:a0:10:5a:90:a3:f7:3a:a4:1d:c9:3f:64:9e:
         e4:0f:88:be:b0:70:6f:c2:e9:eb:72:db:33:57:f8:41:08:5a:
         fc:6e:71:7d:5d:9b:c0:79:62:2d:8b:aa:a6:2f:ee:6a:c2:79:
         4f:9a:33:0b:0d:98:01:d4:cc:a2:cd:8f:16:8a:f4:72:74:a9:
         20:01:b8:37:01:1c:04:48:57:ec:9e:a1:32:bd:08:72:35:8e:
         d6:55:dd:c4:00:91:89:3c:93:8e:db:7e:ef:51:28:b7:dc:67:
         79:61:95:db:1b:4d:3a:a5:24:55:5b:7a:11:b5:53:dd:e6:d7:
         8e:35:fe:00:d5:bb:e1:80:7f:0a:d4:53:a2:58:74:d7:da:e7:
         8b:83:8c:50:29:24:95:8f:13:92:5f:03:54:2c:76:b4:2e:3c:
         53:8e:65:25:e9:e8:71:0d:61:d7:d4:1e:2e:3c:b4:c9:1b:f8:
         8d:7a:0c:30:4f:bc:d0:c6:23:71:73:87:de:31:69:99:d7:31:
         32:8d:2c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:21 2024 by rpki-client on console.sobornost.net