Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.cer
File:                     02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.cer (raw, json)
Hash identifier:          X4BWJEBkhe9z6gnXv0LEVbvJlh+WSxADKFdTVBLNv2A=
Subject key identifier:   02:AF:15:78:6C:E0:3E:FA:4A:63:F9:B5:B5:E9:50:54:9A:B9:7D:A5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       293168CCEDACE3B5F808D9DE375A9335C839CF1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 17 Apr 2025 14:18:50 +0000
Certificate not after:    Thu 16 Apr 2026 14:23:50 +0000
Subordinate resources:    AS: 273748
                          IP: 2804:8bac::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:31:68:cc:ed:ac:e3:b5:f8:08:d9:de:37:5a:93:35:c8:39:cf:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 17 14:18:50 2025 GMT
            Not After : Apr 16 14:23:50 2026 GMT
        Subject: CN=02AF15786CE03EFA4A63F9B5B5E950549AB97DA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:48:93:24:29:99:4f:92:ad:ab:6f:97:ac:a0:
                    a0:bc:6c:c2:cd:48:22:7c:e4:42:4f:93:b0:4a:6d:
                    bc:1f:bc:e7:97:89:44:fd:4f:e7:f6:dc:59:17:09:
                    48:69:9a:32:33:d0:7b:24:dc:28:11:22:b5:94:d2:
                    0d:7f:7b:af:d4:44:55:83:0a:60:47:1c:2d:20:97:
                    f5:17:d0:05:89:b3:72:26:09:14:04:7a:0a:22:11:
                    0e:51:91:57:ed:6a:10:bd:28:4b:89:0c:16:fc:f0:
                    5d:20:3b:34:6c:0f:ef:59:60:ac:bc:1f:01:b7:6b:
                    3b:a8:44:b5:fb:61:c3:83:80:e1:f2:34:d4:b1:86:
                    1e:d5:ae:b7:01:35:22:9e:b6:ba:3d:a4:e5:3f:8e:
                    a9:7d:50:e0:9b:73:94:81:e9:bb:0a:6d:ab:d6:13:
                    5c:e0:29:d8:03:55:bd:e0:f1:ee:ec:ff:d9:10:c3:
                    4c:f8:01:f7:e3:95:5c:14:51:5b:94:b6:5a:b5:4a:
                    ea:3b:90:0c:cc:84:af:5e:ba:c6:27:0c:b8:1c:42:
                    97:f5:4e:cd:60:1c:f3:2c:9f:81:53:2d:b8:51:6f:
                    2a:bc:9a:6d:83:71:97:25:e0:f8:8c:6c:2f:9b:ab:
                    e7:98:53:13:59:11:b8:ee:27:d7:30:65:f5:2a:17:
                    bc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:AF:15:78:6C:E0:3E:FA:4A:63:F9:B5:B5:E9:50:54:9A:B9:7D:A5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/02AF15786CE03EFA4A63F9B5B5E950549AB97DA5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8bac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273748

    Signature Algorithm: sha256WithRSAEncryption
         97:f8:d2:3b:3e:4f:d3:de:2a:c1:d1:dd:df:03:aa:33:3f:05:
         8d:32:43:20:bb:ee:41:e5:c4:10:41:56:f9:83:64:a3:37:52:
         2b:c5:67:62:66:9f:69:f2:23:60:97:8f:e5:9f:bb:1c:f2:0e:
         cc:16:e9:bb:3a:17:2d:9d:77:cd:46:b3:a7:b1:df:00:32:ef:
         5b:0c:ce:a3:ef:49:d8:58:15:87:c6:93:1c:a1:3e:fc:3e:d1:
         17:4b:79:a3:07:fe:02:0e:37:98:e4:b2:ad:01:c4:af:0d:8d:
         4f:6c:94:95:31:95:1a:4f:d0:07:97:5e:68:f2:9b:6c:65:84:
         ed:77:65:40:39:2d:d0:59:94:b6:2c:d0:be:d1:72:c7:23:60:
         56:b6:1a:76:e6:74:6c:83:e6:9e:e4:48:3a:b3:bc:88:a5:ce:
         a7:73:e6:46:b3:c1:cb:92:83:ea:4b:2d:3c:bc:36:48:42:b2:
         94:5c:18:57:f3:3d:2b:16:4f:1d:7b:d7:9d:cd:e2:1b:c2:58:
         99:3b:85:c9:92:dd:7a:fa:94:4e:82:d7:1c:d4:4e:de:5b:2e:
         e7:24:f3:5a:99:56:5d:73:a9:cb:34:5d:6e:24:fe:89:2d:c3:
         79:16:7f:7f:91:d8:a8:cc:12:f0:f1:6b:17:dd:25:2c:92:94:
         38:a7:c0:7d
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUKTFozO2s47X4CNneN1qTNcg5zxwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA0MTcxNDE4NTBaFw0yNjA0MTYxNDIzNTBaMDMxMTAvBgNV
BAMTKDAyQUYxNTc4NkNFMDNFRkE0QTYzRjlCNUI1RTk1MDU0OUFCOTdEQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOSJMkKZlPkq2rb5esoKC8bMLN
SCJ85EJPk7BKbbwfvOeXiUT9T+f23FkXCUhpmjIz0Hsk3CgRIrWU0g1/e6/URFWD
CmBHHC0gl/UX0AWJs3ImCRQEegoiEQ5RkVftahC9KEuJDBb88F0gOzRsD+9ZYKy8
HwG3azuoRLX7YcODgOHyNNSxhh7VrrcBNSKetro9pOU/jql9UOCbc5SB6bsKbavW
E1zgKdgDVb3g8e7s/9kQw0z4AffjlVwUUVuUtlq1Suo7kAzMhK9eusYnDLgcQpf1
Ts1gHPMsn4FTLbhRbyq8mm2DcZcl4PiMbC+bq+eYUxNZEbjuJ9cwZfUqF7yXAgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQCrxV4bOA++kpj
+bW16VBUmrl9pTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNlRO
WFZEcDJHS2NOUXZvVDEzcnlOb2dEMXV6RnM2eDNXRGVlZ0N4WTV1YWYvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZU
TlhWRHAyR0tjTlF2b1QxM3J5Tm9nRDF1ekZzNngzV0RlZWdDeFk1dWFmLzAvMDJB
RjE1Nzg2Q0UwM0VGQTRBNjNGOUI1QjVFOTUwNTQ5QUI5N0RBNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASLrDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
LVQwDQYJKoZIhvcNAQELBQADggEBAJf40js+T9PeKsHR3d8DqjM/BY0yQyC77kHl
xBBBVvmDZKM3UivFZ2Jmn2nyI2CXj+WfuxzyDswW6bs6Fy2dd81Gs6ex3wAy71sM
zqPvSdhYFYfGkxyhPvw+0RdLeaMH/gION5jksq0BxK8NjU9slJUxlRpP0AeXXmjy
m2xlhO13ZUA5LdBZlLYs0L7RcscjYFa2GnbmdGyD5p7kSDqzvIilzqdz5kazwcuS
g+pLLTy8NkhCspRcGFfzPSsWTx17153N4hvCWJk7hcmS3Xr6lE6C1xzUTt5bLuck
81qZVl1zqcs0XW4k/oktw3kWf3+R2KjMEvDxaxfdJSySlDinwH0=
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:40 2025 by rpki-client on console.sobornost.net