Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C.cer
File:                     F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C.cer (raw, json)
Hash identifier:          RsA6PMslS2rjuTtHSj3+RaIimowFvO2fpDX2Xfg9YNU=
Subject key identifier:   F4:5F:A9:6D:0B:0E:0D:7B:DB:9C:2E:64:F4:83:4C:23:43:48:A1:6C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       19E1493D8B064434BD7816913DB8359E479600A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/1/F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 19:08:58 +0000
Certificate not after:    Wed 02 Apr 2025 19:13:58 +0000
Subordinate resources:    AS: 269663
                          IP: 45.190.156.0/22
                          IP: 2804:67fc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e1:49:3d:8b:06:44:34:bd:78:16:91:3d:b8:35:9e:47:96:00:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 19:08:58 2024 GMT
            Not After : Apr  2 19:13:58 2025 GMT
        Subject: CN=F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a2:c8:97:ee:3f:e2:29:b5:93:7f:fb:ca:37:
                    69:96:1f:21:08:ce:9a:37:a9:f7:90:93:dc:a2:11:
                    a7:25:aa:c7:71:d7:35:71:d4:45:9a:5f:8f:fa:56:
                    bc:05:31:73:aa:a6:5d:45:fa:c0:4c:95:7f:a2:64:
                    11:35:e0:6e:cb:69:db:bf:41:cd:3d:d3:cf:82:af:
                    d8:98:39:ee:e8:68:8b:2c:28:d1:f7:88:46:1e:4a:
                    2a:d2:e7:3c:30:9f:01:4a:4b:75:82:1c:d5:ee:6f:
                    96:87:47:42:96:46:10:a0:8b:38:85:1f:78:0e:d4:
                    11:16:56:e3:9f:ac:3e:3b:2e:eb:d8:90:e4:77:1f:
                    1e:7a:c9:bb:10:ec:e5:dd:b3:3a:5a:78:a9:5d:7d:
                    fe:08:44:4a:8b:22:bb:8b:e2:fb:a0:7a:37:1d:85:
                    63:05:fd:cd:44:10:14:ac:87:f8:c5:97:52:60:0a:
                    ac:b4:72:5a:d9:7a:9f:76:5d:de:eb:90:92:b4:e7:
                    05:97:c3:21:35:67:2d:e3:22:98:a0:73:3c:4c:a4:
                    5a:3f:c2:c7:32:42:9e:d5:1f:10:24:0a:60:10:ef:
                    b6:e5:85:c2:48:2b:92:c7:5a:fb:a0:63:04:c8:fc:
                    50:79:e9:4a:cc:2d:a8:cc:1f:b6:50:79:7c:63:71:
                    a2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:5F:A9:6D:0B:0E:0D:7B:DB:9C:2E:64:F4:83:4C:23:43:48:A1:6C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ALnzPiBEWdycb8GTYYxvMBYBLzRbRoodWNnwJrfTaqqS/1/F45FA96D0B0E0D7BDB9C2E64F4834C234348A16C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.156.0/22
                IPv6:
                  2804:67fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269663

    Signature Algorithm: sha256WithRSAEncryption
         15:3c:58:7a:06:4f:88:f2:de:6c:0a:2a:da:be:f3:65:d7:aa:
         e8:b6:10:8c:26:08:33:30:bc:b2:b0:2e:85:be:51:dc:eb:e1:
         cd:b3:65:f9:38:8b:61:fe:7c:8e:f3:6c:3d:8c:10:e7:54:9a:
         60:f0:d2:25:96:5c:5b:ad:01:17:a8:63:5e:34:3c:5e:c9:17:
         ae:4a:d7:bc:7a:a1:89:c6:56:7b:bd:5f:46:b6:12:09:10:37:
         9a:f4:6e:6a:4c:50:d1:a1:aa:26:5c:fc:43:52:9f:54:ad:d6:
         b2:eb:fe:24:48:5d:53:43:97:ec:2d:4c:5f:1a:54:cc:a5:66:
         78:3b:92:a8:d1:25:c3:c2:40:3d:31:ae:e1:68:56:d1:67:f6:
         0f:24:af:af:d9:78:ad:60:e0:c6:73:ea:e4:3c:32:83:9f:66:
         8f:bf:6b:32:34:59:1d:14:d6:e4:99:d9:e1:f3:69:1b:02:f5:
         f9:cd:2c:b2:d7:28:d0:fb:ee:a9:39:03:40:92:aa:7d:67:36:
         7e:83:92:41:98:6c:04:ec:11:a0:fe:72:f6:cd:78:5a:41:f8:
         30:1b:79:7d:43:ca:ff:34:3f:79:0c:d7:17:3e:66:23:f0:55:
         63:15:08:7b:5b:9f:d9:87:3d:17:36:9f:02:66:c1:fb:94:0e:
         fd:dd:26:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:22 2024 by rpki-client on console.sobornost.net