Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.cer
File:                     EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.cer (raw, json)
Hash identifier:          SvqGjfzIvgJpiduSCnckopkEQOsJjm9T457f083O54U=
Subject key identifier:   EF:21:25:E5:4F:B1:A3:8B:58:02:EE:2C:F4:8F:C3:EA:E1:E0:36:5C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       33AC61CDB3E0F6F2349AC7A4C24E80A7CE405B3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Aug 2024 13:22:13 +0000
Certificate not after:    Thu 14 Aug 2025 13:27:13 +0000
Subordinate resources:    AS: 268920
                          IP: 45.175.196.0/22
                          IP: 2804:5ca0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ac:61:cd:b3:e0:f6:f2:34:9a:c7:a4:c2:4e:80:a7:ce:40:5b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 15 13:22:13 2024 GMT
            Not After : Aug 14 13:27:13 2025 GMT
        Subject: CN=EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:0c:75:29:cf:20:86:ad:d2:9c:da:ec:91:
                    96:ac:7c:1f:3c:45:f8:14:d4:a1:e3:17:b2:4c:86:
                    77:71:96:94:d1:cd:d1:c9:95:92:46:c5:cc:bf:46:
                    4b:7e:11:0e:fc:0e:34:aa:45:ea:26:4f:fd:69:93:
                    a2:74:4b:19:24:7b:16:87:1d:0d:bb:7a:14:89:68:
                    5e:0d:51:8d:d9:07:dd:1a:fd:59:9b:5e:a9:a8:ac:
                    cd:87:53:7b:7f:5f:8e:57:1e:db:fb:d3:69:7c:ae:
                    83:b9:3b:dc:97:12:2a:8c:fd:6a:b4:a1:a3:f4:48:
                    68:e1:50:27:45:02:36:8d:37:8d:d6:71:b5:37:f0:
                    13:d6:1e:df:59:09:b4:24:cb:18:c1:e1:64:63:d7:
                    e7:5f:7f:71:83:85:4c:bb:7b:24:d4:a3:44:00:48:
                    53:76:e4:57:82:6e:0f:84:78:03:90:a4:35:2e:49:
                    18:c9:87:66:e0:fa:d8:cf:04:37:e3:66:d0:72:26:
                    42:ae:77:95:9d:06:36:f4:35:a9:3e:64:72:67:14:
                    39:c5:bd:e9:fb:b2:8e:e6:ce:5b:dc:66:a4:07:3d:
                    14:75:a4:2d:e5:f9:da:f5:81:29:80:51:93:a6:cc:
                    2e:81:d4:70:80:7f:0a:72:45:fe:1f:13:60:7c:16:
                    ed:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EF:21:25:E5:4F:B1:A3:8B:58:02:EE:2C:F4:8F:C3:EA:E1:E0:36:5C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HUkVQ9Sd9hRFVJiZE5jPGPER95rqUeMD3sZCoXpVznQJ/0/EF2125E54FB1A38B5802EE2CF48FC3EAE1E0365C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.196.0/22
                IPv6:
                  2804:5ca0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268920

    Signature Algorithm: sha256WithRSAEncryption
         d9:bf:00:e4:69:73:42:a2:47:06:d3:e2:0c:b7:b4:07:07:9a:
         bf:ca:de:99:6f:69:e4:0a:02:6e:58:6e:63:41:d6:ee:d0:c0:
         b2:fd:9b:8d:43:33:31:bc:24:a9:51:6a:96:18:9f:f7:bc:0a:
         4c:2f:96:35:ae:ee:0e:60:ed:f7:a7:06:19:46:79:b9:56:94:
         d6:54:dc:cd:76:38:e8:47:58:1f:0b:85:3a:33:73:64:25:d4:
         21:c4:ba:ca:cf:29:58:fa:47:c3:b1:67:f9:c1:92:21:cc:f0:
         3b:c1:27:1a:fc:55:4b:e7:1f:61:be:68:92:f1:fe:78:fc:4f:
         ff:88:58:63:b6:02:89:a8:83:de:68:6b:c8:83:76:64:89:4d:
         8c:b8:51:e3:ae:81:82:34:fb:97:d5:28:bb:a9:be:39:a2:15:
         65:c2:83:9b:71:7a:66:59:38:52:70:6e:92:e2:44:0f:7c:d2:
         fb:cb:3c:4c:44:8a:7a:97:ad:be:45:38:aa:fd:25:9d:6e:d5:
         be:0c:70:75:1b:ad:99:48:ab:40:a4:c5:07:d4:31:fe:27:7f:
         5f:64:cc:cb:66:3b:17:5c:e0:78:32:4e:57:60:48:dd:9f:79:
         94:69:9d:2d:40:f4:c7:ef:7b:12:32:0d:eb:53:cb:15:c7:4f:
         6f:65:d3:8a
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUM6xhzbPg9vI0msekwk6Ap85AWz8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA4MTUxMzIyMTNaFw0yNTA4MTQxMzI3MTNaMDMxMTAvBgNV
BAMTKEVGMjEyNUU1NEZCMUEzOEI1ODAyRUUyQ0Y0OEZDM0VBRTFFMDM2NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Awx1Kc8ghq3SnNrskZasfB88
RfgU1KHjF7JMhndxlpTRzdHJlZJGxcy/Rkt+EQ78DjSqReomT/1pk6J0SxkkexaH
HQ27ehSJaF4NUY3ZB90a/VmbXqmorM2HU3t/X45XHtv702l8roO5O9yXEiqM/Wq0
oaP0SGjhUCdFAjaNN43WcbU38BPWHt9ZCbQkyxjB4WRj1+dff3GDhUy7eyTUo0QA
SFN25FeCbg+EeAOQpDUuSRjJh2bg+tjPBDfjZtByJkKud5WdBjb0Nak+ZHJnFDnF
ven7so7mzlvcZqQHPRR1pC3l+dr1gSmAUZOmzC6B1HCAfwpyRf4fE2B8Fu29AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTvISXlT7Gji1gC
7iz0j8Pq4eA2XDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSFVr
VlE5U2Q5aFJGVkppWkU1alBHUEVSOTVycVVlTUQzc1pDb1hwVnpuUUovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hV
a1ZROVNkOWhSRlZKaVpFNWpQR1BFUjk1cnFVZU1EM3NaQ29YcFZ6blFKLzAvRUYy
MTI1RTU0RkIxQTM4QjU4MDJFRTJDRjQ4RkMzRUFFMUUwMzY1Qy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLa/EMA0EAgACMAcDBQAoBFygMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQaeDANBgkqhkiG9w0BAQsFAAOCAQEA2b8A5GlzQqJHBtPi
DLe0Bweav8remW9p5AoCblhuY0HW7tDAsv2bjUMzMbwkqVFqlhif97wKTC+WNa7u
DmDt96cGGUZ5uVaU1lTczXY46EdYHwuFOjNzZCXUIcS6ys8pWPpHw7Fn+cGSIczw
O8EnGvxVS+cfYb5okvH+ePxP/4hYY7YCiaiD3mhryIN2ZIlNjLhR466BgjT7l9Uo
u6m+OaIVZcKDm3F6Zlk4UnBukuJED3zS+8s8TESKepetvkU4qv0lnW7VvgxwdRut
mUirQKTFB9Qx/id/X2TMy2Y7F1zgeDJOV2BI3Z95lGmdLUD0x+97EjIN61PLFcdP
b2XTig==
-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:21 2024 by rpki-client on console.sobornost.net