Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0688357ED433C0A60770FB474BDB2C72796B78BD.cer
File:                     0688357ED433C0A60770FB474BDB2C72796B78BD.cer (raw, json)
Hash identifier:          aabY++DV8SoY/xU4tf27J7NJUOF/5+NK2KjrBUWT+Yg=
Subject key identifier:   06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3105373D26BF6393C2F72C5D9273E8CABB9E9961
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 16 Apr 2025 10:15:55 +0000
Certificate not after:    Wed 15 Apr 2026 10:20:55 +0000
Subordinate resources:    AS: 61696
                          IP: 138.36.232.0/22
                          IP: 201.140.248.0/22
                          IP: 2804:1ae0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:05:37:3d:26:bf:63:93:c2:f7:2c:5d:92:73:e8:ca:bb:9e:99:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 16 10:15:55 2025 GMT
            Not After : Apr 15 10:20:55 2026 GMT
        Subject: CN=0688357ED433C0A60770FB474BDB2C72796B78BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:18:97:37:d1:f7:19:37:9d:14:70:f7:3b:ac:
                    22:7a:55:30:ea:1e:37:54:6f:31:d7:bc:17:f6:23:
                    07:c1:f6:83:3b:56:2e:69:44:04:c4:fd:8b:f8:32:
                    80:3b:7e:76:95:3f:80:4e:e3:50:2f:94:3b:26:e9:
                    48:1a:f6:eb:6b:45:aa:ca:c7:a6:db:81:3e:8d:a1:
                    76:61:2e:dc:7b:8c:d6:c0:a3:3e:6b:36:10:0b:a2:
                    d5:c5:07:4b:69:bc:89:c9:d3:5a:7f:e8:5f:23:b8:
                    c2:ee:44:cc:f2:c6:b5:7e:f9:92:ef:f3:2c:6a:0a:
                    78:ea:4c:62:fd:43:92:0a:59:7b:c0:87:37:90:d2:
                    b1:1f:64:71:2a:a4:4e:25:c6:57:ce:7f:84:12:cc:
                    0a:53:7e:e2:92:7a:5b:ab:1e:95:a9:ba:f3:68:00:
                    d6:ed:91:70:59:02:22:e2:e7:e7:7c:34:2a:39:29:
                    8c:cb:94:3a:35:af:7e:3a:95:d1:13:e5:ab:00:28:
                    b0:5e:19:dc:9d:c8:b7:3f:83:b4:39:c4:01:e2:1a:
                    90:cf:d3:2a:0d:c1:96:81:f9:7c:ab:7b:d2:74:47:
                    1d:72:04:26:27:29:5c:22:1a:0a:5c:2e:27:6d:7c:
                    e0:b0:47:10:ef:13:b3:38:42:46:2e:45:eb:33:62:
                    fb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:88:35:7E:D4:33:C0:A6:07:70:FB:47:4B:DB:2C:72:79:6B:78:BD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2XEiRJNUeUwvecXb6MhzMDiMJUoYaer87j3qycjTcWsx/0/0688357ED433C0A60770FB474BDB2C72796B78BD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.232.0/22
                  201.140.248.0/22
                IPv6:
                  2804:1ae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61696

    Signature Algorithm: sha256WithRSAEncryption
         a5:0d:2e:2e:22:93:5f:1e:da:7d:b0:67:56:3e:ba:a5:84:d6:
         9c:19:fc:bf:ed:1c:34:b9:11:5d:12:fc:af:0f:af:f7:f5:e9:
         1c:03:cf:28:e6:04:3c:82:db:65:e7:16:fb:0a:4b:df:1d:34:
         60:f0:89:57:e2:c6:c8:9f:78:53:8f:f3:bd:c3:5f:76:05:97:
         93:ad:67:d4:3c:44:95:88:7b:85:37:8d:5f:68:e0:34:f9:3e:
         ea:3c:a5:52:5f:bc:72:37:ca:fa:d9:61:40:34:61:38:d5:49:
         65:d2:0a:24:c8:e2:4b:f8:60:94:ef:da:75:ca:76:08:79:9b:
         72:4f:8e:23:d0:5d:87:95:8f:bf:93:38:1c:82:d9:1e:90:dd:
         46:34:5f:d4:ac:46:67:7c:83:d5:ee:41:29:71:08:a0:67:96:
         bc:4d:ff:3d:05:34:b7:f1:b5:77:66:4d:42:88:be:a0:13:e5:
         ed:25:0f:9e:c0:72:f4:28:20:a2:ce:7c:5f:a4:36:3c:5b:cd:
         2b:c5:6b:40:94:be:c8:b2:07:40:0e:eb:b8:0d:13:7a:da:a9:
         59:70:d8:37:cc:f0:d9:7b:a6:5f:2f:5f:c8:28:d2:4b:14:f5:
         df:1b:fe:de:f0:6f:d1:7d:78:8e:c4:62:2a:84:6e:12:6f:07:
         5d:42:84:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:41 2025 by rpki-client on console.sobornost.net