Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/038181E844702D543ABCE8A0DFF3FD2BD2C44DFE.cer
File:                     038181E844702D543ABCE8A0DFF3FD2BD2C44DFE.cer (raw, json)
Hash identifier:          Th5r+SvcekoFxN9d5ZvLE3qSSOFGntPPpFI61J3ddSI=
Subject key identifier:   03:81:81:E8:44:70:2D:54:3A:BC:E8:A0:DF:F3:FD:2B:D2:C4:4D:FE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7B47E8ED227A1AC9090B2A9AECCB8C874D8216E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/038181E844702D543ABCE8A0DFF3FD2BD2C44DFE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 22 Apr 2025 13:24:33 +0000
Certificate not after:    Tue 21 Apr 2026 13:29:33 +0000
Subordinate resources:    AS: 266002
                          IP: 181.191.92.0/22
                          IP: 2804:4114::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:47:e8:ed:22:7a:1a:c9:09:0b:2a:9a:ec:cb:8c:87:4d:82:16:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 22 13:24:33 2025 GMT
            Not After : Apr 21 13:29:33 2026 GMT
        Subject: CN=038181E844702D543ABCE8A0DFF3FD2BD2C44DFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b2:66:9b:33:ae:b5:d1:cd:e1:5a:c3:28:50:
                    d4:02:e9:03:0b:c2:a7:9f:8c:c9:a9:b4:66:8b:24:
                    3c:e2:41:8d:08:8f:f3:86:bb:32:6c:15:fd:33:66:
                    df:99:5f:89:53:64:55:f8:4a:61:c9:43:39:0e:c6:
                    4c:a0:87:c3:3d:72:09:de:ac:30:89:41:a7:e2:dc:
                    60:e4:d5:01:02:b3:c1:b4:5d:10:24:cd:c0:1b:e9:
                    e4:79:d7:49:0c:0c:24:22:6b:ec:d5:17:30:58:c0:
                    52:88:fa:e8:3f:f3:ed:3e:ef:df:c5:84:3a:9e:32:
                    1e:e6:3c:43:93:fb:95:25:a6:0c:ed:a5:a4:7b:6e:
                    08:14:64:7c:4c:06:af:5d:8d:67:1f:af:e8:c1:c2:
                    67:7a:35:23:55:24:2f:76:37:ca:0e:50:02:7d:e9:
                    53:4d:b4:ea:6d:50:1c:76:40:35:b5:3b:97:7d:86:
                    5f:6a:f3:55:45:f2:cf:1f:2d:0e:02:30:1d:2a:41:
                    9f:f6:96:39:fe:e4:b6:4d:b0:a4:3d:26:62:c6:92:
                    33:0d:11:e2:0e:01:90:d0:b0:3f:0d:9b:45:9b:c7:
                    03:82:ea:e3:a5:33:89:09:5e:13:c5:80:cb:d9:76:
                    ec:62:de:e7:b2:fb:8f:1f:7c:be:b0:2d:25:ef:e5:
                    4c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:81:81:E8:44:70:2D:54:3A:BC:E8:A0:DF:F3:FD:2B:D2:C4:4D:FE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/038181E844702D543ABCE8A0DFF3FD2BD2C44DFE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.92.0/22
                IPv6:
                  2804:4114::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266002

    Signature Algorithm: sha256WithRSAEncryption
         39:88:ce:73:b0:81:8e:26:df:c9:a3:16:bc:a8:9d:3c:c4:32:
         9b:91:ba:76:39:1f:d8:c1:d3:21:90:92:61:18:a3:1f:96:87:
         e4:f4:9a:83:20:ad:1d:bd:d9:ba:73:55:3e:cb:99:6a:ea:d6:
         4f:9f:b5:13:c9:f7:26:18:bb:c6:bb:d6:c0:0c:d3:47:aa:2d:
         1e:79:2c:27:22:36:b7:57:95:30:ef:35:f8:cd:42:76:1b:34:
         c3:4d:d3:b6:fb:af:33:48:d4:8f:30:08:33:fc:70:72:f3:84:
         11:25:b4:ab:b6:15:45:00:82:1b:6e:81:e6:bf:c2:b1:84:9c:
         a8:a7:1a:0a:de:89:7f:43:79:8a:e6:e3:4f:e9:36:8d:1d:3b:
         73:7a:d9:a7:f9:b5:4b:07:85:e7:32:14:57:3a:2a:ed:1c:fe:
         8f:96:cd:a2:96:3e:e9:3e:dd:e0:59:1e:a0:b4:92:12:07:5a:
         5f:3b:15:f0:cd:a6:b8:b6:0c:13:d0:c2:0b:fc:ed:00:49:47:
         09:04:03:da:e9:6a:ef:65:48:5d:12:0b:41:c6:49:59:0b:9d:
         8b:11:c6:0b:2d:3c:94:ef:ff:cb:a8:a5:fa:60:9e:34:65:6e:
         32:4f:7c:61:c8:c8:50:4c:f3:32:c9:48:b4:be:aa:d6:ba:69:
         1d:e7:05:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:07:03 2025 by rpki-client on console.sobornost.net