Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer
File:                     F0DB15D3F66BA725DE7E70733346C03C0E4D1408.cer (raw, json)
Hash identifier:          YBPvYFdnz43i1DnIQArtcANg/WFwNg0LSvZAMHDU7tc=
Subject key identifier:   F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6D71B90511ED013876C04322F3531CBD5486F0C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 Sep 2024 13:22:15 +0000
Certificate not after:    Mon 29 Sep 2025 13:27:15 +0000
Subordinate resources:    AS: 263907
                          IP: 138.204.184.0/22
                          IP: 2804:2788::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:71:b9:05:11:ed:01:38:76:c0:43:22:f3:53:1c:bd:54:86:f0:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 30 13:22:15 2024 GMT
            Not After : Sep 29 13:27:15 2025 GMT
        Subject: CN=F0DB15D3F66BA725DE7E70733346C03C0E4D1408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ed:8d:d1:dc:15:a2:99:d5:fc:17:17:52:8a:
                    ee:ae:d8:0e:3c:ff:00:e9:a5:7e:c0:5b:f1:72:c8:
                    23:56:f9:f1:1a:23:a2:2b:8e:df:ea:d0:e3:43:4c:
                    b0:c4:f0:42:07:0d:03:36:f1:75:22:dd:bc:f8:00:
                    0c:46:83:a6:2b:29:eb:f3:f9:ca:a2:42:1a:c8:c6:
                    65:6b:a4:77:d6:70:db:db:87:74:85:f8:92:9b:01:
                    67:66:a0:bf:5e:0e:c0:17:84:97:b3:28:8c:74:82:
                    ba:6e:d2:09:c8:d9:53:76:d8:ca:ff:b4:11:96:12:
                    46:d0:f0:0c:31:c7:d5:fb:1b:42:99:aa:48:e6:d8:
                    d0:7b:25:19:f9:42:e6:1e:d2:ed:51:83:22:9a:57:
                    3d:49:73:c8:4e:a5:a9:10:5b:aa:52:65:73:3a:ec:
                    42:34:80:0b:c9:e9:d0:c8:3c:31:d2:b9:18:90:be:
                    9d:e3:8e:21:d5:79:37:3a:88:4b:be:2f:93:f8:54:
                    2d:3d:92:2e:fd:03:ef:32:d9:12:df:b1:94:32:b7:
                    c5:b0:73:ae:9f:28:68:21:00:06:6d:67:29:1e:5c:
                    18:b6:be:03:fc:da:a8:fa:d9:a7:84:1a:00:87:8b:
                    19:12:d2:e3:bb:f1:d7:de:b9:e2:a4:38:f4:03:0a:
                    0d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F0:DB:15:D3:F6:6B:A7:25:DE:7E:70:73:33:46:C0:3C:0E:4D:14:08
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/F0DB15D3F66BA725DE7E70733346C03C0E4D1408.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.184.0/22
                IPv6:
                  2804:2788::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263907

    Signature Algorithm: sha256WithRSAEncryption
         d0:0a:ef:36:88:06:c5:59:9e:16:86:cc:ef:32:ac:65:f7:73:
         5f:ff:5d:74:1e:68:28:65:d4:30:ca:b1:fe:67:4e:9f:01:a0:
         b3:2f:dd:4d:f8:53:0c:04:f8:ab:3f:02:d1:c7:a8:10:24:4c:
         7f:07:0c:5c:97:6e:7f:7c:4b:7e:ba:53:27:13:9d:1f:05:9a:
         af:50:cd:c6:02:ef:c0:0e:4f:e5:1d:11:b8:2b:d5:56:e0:cc:
         fb:7e:07:b6:d3:b8:fc:29:e9:26:bf:1c:e7:52:d3:89:00:f2:
         a2:45:5f:ff:e0:d2:38:77:e2:ef:12:66:02:64:46:ac:00:5b:
         6e:3c:62:e6:2b:0c:18:6f:74:1d:d0:48:cf:bc:4e:5e:ed:c3:
         f9:d6:f2:6d:1d:81:09:74:7f:1c:83:29:b5:ad:2d:5a:d9:f7:
         0f:a4:00:55:ba:37:23:07:0b:f5:6f:ef:8a:41:f6:1e:93:d9:
         dd:5c:b6:37:38:38:33:bb:ac:3d:89:4e:a3:19:d3:88:ff:77:
         a1:23:58:a4:f7:bc:a5:0f:d6:20:de:e0:56:6b:b3:9e:12:88:
         db:24:7a:3d:b5:68:05:6b:28:50:9c:3a:41:2f:dd:61:76:ac:
         22:01:3f:85:c9:62:84:16:c7:e1:db:06:3c:78:d4:d8:0a:11:
         9a:c1:03:22
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUbXG5BRHtATh2wEMi81McvVSG8MkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA5MzAxMzIyMTVaFw0yNTA5MjkxMzI3MTVaMDMxMTAvBgNV
BAMTKEYwREIxNUQzRjY2QkE3MjVERTdFNzA3MzMzNDZDMDNDMEU0RDE0MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz7Y3R3BWimdX8FxdSiu6u2A48
/wDppX7AW/FyyCNW+fEaI6Irjt/q0ONDTLDE8EIHDQM28XUi3bz4AAxGg6YrKevz
+cqiQhrIxmVrpHfWcNvbh3SF+JKbAWdmoL9eDsAXhJezKIx0grpu0gnI2VN22Mr/
tBGWEkbQ8Awxx9X7G0KZqkjm2NB7JRn5QuYe0u1RgyKaVz1Jc8hOpakQW6pSZXM6
7EI0gAvJ6dDIPDHSuRiQvp3jjiHVeTc6iEu+L5P4VC09ki79A+8y2RLfsZQyt8Ww
c66fKGghAAZtZykeXBi2vgP82qj62aeEGgCHixkS0uO78dfeueKkOPQDCg29AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTw2xXT9munJd5+
cHMzRsA8Dk0UCDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmt2
eGR5eTNhalJCc3Z5em1TYlRzWjlBVTZLYkF3OVNWellnUUxQYXdSekovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zr
dnhkeXkzYWpSQnN2eXptU2JUc1o5QVU2S2JBdzlTVnpZZ1FMUGF3UnpKLzAvRjBE
QjE1RDNGNjZCQTcyNURFN0U3MDczMzM0NkMwM0MwRTREMTQwOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCisy4MA0EAgACMAcDBQAoBCeIMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQG4zANBgkqhkiG9w0BAQsFAAOCAQEA0ArvNogGxVmeFobM
7zKsZfdzX/9ddB5oKGXUMMqx/mdOnwGgsy/dTfhTDAT4qz8C0ceoECRMfwcMXJdu
f3xLfrpTJxOdHwWar1DNxgLvwA5P5R0RuCvVVuDM+34HttO4/CnpJr8c51LTiQDy
okVf/+DSOHfi7xJmAmRGrABbbjxi5isMGG90HdBIz7xOXu3D+dbybR2BCXR/HIMp
ta0tWtn3D6QAVbo3IwcL9W/vikH2HpPZ3Vy2Nzg4M7usPYlOoxnTiP93oSNYpPe8
pQ/WIN7gVmuznhKI2yR6PbVoBWsoUJw6QS/dYXasIgE/hclihBbH4dsGPHjU2AoR
msEDIg==
-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:21 2024 by rpki-client on console.sobornost.net