Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/01AC8DA5ED5081878802B288269F263B6EA0F002.cer
File:                     01AC8DA5ED5081878802B288269F263B6EA0F002.cer (raw, json)
Hash identifier:          dPE+XNdVywsnW9bGhl8u9MksTjXqjWS9ZhLNaI0ji0Q=
Subject key identifier:   01:AC:8D:A5:ED:50:81:87:88:02:B2:88:26:9F:26:3B:6E:A0:F0:02
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7BDC0E753BD2B4F09DA8D4228592CF09A085E26F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 07 Apr 2025 13:55:52 +0000
Certificate not after:    Mon 06 Apr 2026 14:00:52 +0000
Subordinate resources:    AS: 52596
                          IP: 179.191.48.0/21
                          IP: 2804:d14::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:dc:0e:75:3b:d2:b4:f0:9d:a8:d4:22:85:92:cf:09:a0:85:e2:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  7 13:55:52 2025 GMT
            Not After : Apr  6 14:00:52 2026 GMT
        Subject: CN=01AC8DA5ED5081878802B288269F263B6EA0F002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:31:d7:cd:fc:8f:ec:b0:a3:43:ce:1c:84:b8:
                    d6:78:b3:27:b2:81:78:29:4b:cd:8d:32:40:2b:9b:
                    bb:a9:67:ed:bd:37:0e:b2:bf:b4:eb:cd:84:f5:05:
                    b8:35:0b:62:78:ce:04:c5:1e:db:2b:5f:db:6a:ee:
                    56:a9:f9:80:95:c8:a8:2c:b5:ae:23:08:59:9c:05:
                    65:c7:aa:9c:d0:0e:45:0f:98:38:85:2e:92:7d:33:
                    2c:1a:cc:d3:de:25:0e:64:35:d4:4a:d2:a8:ee:ef:
                    7c:83:6c:c0:61:75:29:26:d4:01:1c:cf:95:31:f1:
                    84:0d:55:60:84:6d:4e:50:fe:6e:84:cd:53:59:5c:
                    7f:f6:bf:07:1e:0b:2c:35:e3:98:ed:83:ce:3d:c1:
                    a9:b5:cf:20:79:e7:c0:21:e6:0c:84:97:03:68:2c:
                    9d:d8:e3:73:f4:c2:fb:6f:92:b4:e0:3b:a8:65:de:
                    ca:b6:4a:fa:4a:f7:9a:fc:02:4c:db:c5:93:45:89:
                    3b:ab:6f:f4:de:86:df:c7:b3:f5:94:95:42:fc:0e:
                    c8:d1:57:c0:e2:9b:4e:e6:ef:67:df:03:12:75:fc:
                    0a:48:9f:f9:21:38:6f:5e:c9:24:75:9f:d2:2a:fe:
                    fb:c6:be:e9:9d:79:dc:ae:a0:45:c8:5d:20:81:d7:
                    63:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:AC:8D:A5:ED:50:81:87:88:02:B2:88:26:9F:26:3B:6E:A0:F0:02
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FibNYZsSgMq2wzExhyesQTBthEaHNHJa48meoFpUbfWx/0/01AC8DA5ED5081878802B288269F263B6EA0F002.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.48.0/21
                IPv6:
                  2804:d14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52596

    Signature Algorithm: sha256WithRSAEncryption
         76:1d:c7:bf:fb:bb:fa:4e:f7:66:78:af:51:1b:9d:79:0d:1f:
         5d:2d:c7:4d:47:dc:31:2f:0e:95:4a:80:45:21:84:aa:a0:0a:
         5d:ed:4a:b4:4d:fe:84:07:01:42:0f:2c:8e:21:12:0a:b0:d2:
         51:bc:71:ab:75:28:d4:a3:cb:71:7e:25:95:9d:79:19:ee:33:
         04:6b:c4:d8:84:b9:75:df:04:5d:0a:93:46:52:60:16:ed:98:
         a7:c5:07:27:15:99:f2:b3:b3:54:27:48:ac:a8:14:00:ac:66:
         06:67:9b:16:89:df:50:3c:ed:3d:57:5b:a9:f3:72:8f:36:25:
         3a:33:3c:2f:bd:09:15:bb:50:eb:a8:0f:29:fb:1b:5e:28:fe:
         d0:31:23:13:20:ce:95:65:72:6e:1f:fa:09:3d:f9:c6:bb:0f:
         62:7c:b9:c0:61:23:72:d4:95:cd:98:5b:58:fe:55:a6:45:7a:
         a8:3e:b6:8f:5b:c6:70:14:5e:d1:47:1c:6c:f4:d8:0d:f4:a4:
         f5:a4:8c:01:2c:b5:ac:14:53:8e:60:58:57:43:91:0a:a1:1b:
         01:4a:2d:8d:12:ca:5f:53:be:a4:10:0e:b3:e0:a1:e6:a9:f2:
         50:c3:b5:2c:a9:9e:e3:77:33:f2:d5:cd:ec:c1:23:3f:27:8a:
         7e:a9:38:2f
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUe9wOdTvStPCdqNQihZLPCaCF4m8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA0MDcxMzU1NTJaFw0yNjA0MDYxNDAwNTJaMDMxMTAvBgNV
BAMTKDAxQUM4REE1RUQ1MDgxODc4ODAyQjI4ODI2OUYyNjNCNkVBMEYwMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkMdfN/I/ssKNDzhyEuNZ4syey
gXgpS82NMkArm7upZ+29Nw6yv7TrzYT1Bbg1C2J4zgTFHtsrX9tq7lap+YCVyKgs
ta4jCFmcBWXHqpzQDkUPmDiFLpJ9MywazNPeJQ5kNdRK0qju73yDbMBhdSkm1AEc
z5Ux8YQNVWCEbU5Q/m6EzVNZXH/2vwceCyw145jtg849wam1zyB558Ah5gyElwNo
LJ3Y43P0wvtvkrTgO6hl3sq2SvpK95r8AkzbxZNFiTurb/Teht/Hs/WUlUL8DsjR
V8Dim07m72ffAxJ1/ApIn/khOG9eySR1n9Iq/vvGvumdedyuoEXIXSCB12N1AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQBrI2l7VCBh4gC
sogmnyY7bqDwAjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmli
Tllac1NnTXEyd3pFeGh5ZXNRVEJ0aEVhSE5ISmE0OG1lb0ZwVWJmV3gvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zp
Yk5ZWnNTZ01xMnd6RXhoeWVzUVRCdGhFYUhOSEphNDhtZW9GcFViZld4LzAvMDFB
QzhEQTVFRDUwODE4Nzg4MDJCMjg4MjY5RjI2M0I2RUEwRjAwMi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQDs78wMA0EAgACMAcDBQAoBA0UMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwDNdDANBgkqhkiG9w0BAQsFAAOCAQEAdh3Hv/u7+k73Zniv
URudeQ0fXS3HTUfcMS8OlUqARSGEqqAKXe1KtE3+hAcBQg8sjiESCrDSUbxxq3Uo
1KPLcX4llZ15Ge4zBGvE2IS5dd8EXQqTRlJgFu2Yp8UHJxWZ8rOzVCdIrKgUAKxm
BmebFonfUDztPVdbqfNyjzYlOjM8L70JFbtQ66gPKfsbXij+0DEjEyDOlWVybh/6
CT35xrsPYny5wGEjctSVzZhbWP5VpkV6qD62j1vGcBRe0UccbPTYDfSk9aSMASy1
rBRTjmBYV0ORCqEbAUotjRLKX1O+pBAOs+Ch5qnyUMO1LKme43cz8tXN7MEjPyeK
fqk4Lw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:47 2025 by rpki-client on console.sobornost.net