Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0EF4682A03CDAED2446D8B1E698DC0A68412A7B3.cer
File:                     0EF4682A03CDAED2446D8B1E698DC0A68412A7B3.cer (raw, json)
Hash identifier:          nwflnO0/pzaSc15b/rjte3v/QAGYbHzRMnd0LRkp7qc=
Subject key identifier:   0E:F4:68:2A:03:CD:AE:D2:44:6D:8B:1E:69:8D:C0:A6:84:12:A7:B3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3C9D196BA348640FED0EFB45E986FFCC56A64393
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HQarzMPCynhhNQvkDGZzf6WXTHRaxJ8AVV2xd8v9qBUL/0/0EF4682A03CDAED2446D8B1E698DC0A68412A7B3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HQarzMPCynhhNQvkDGZzf6WXTHRaxJ8AVV2xd8v9qBUL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 10 Apr 2025 18:23:21 +0000
Certificate not after:    Thu 09 Apr 2026 18:28:21 +0000
Subordinate resources:    AS: 269278
                          IP: 45.183.160.0/22
                          IP: 2804:6224::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 13:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9d:19:6b:a3:48:64:0f:ed:0e:fb:45:e9:86:ff:cc:56:a6:43:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 10 18:23:21 2025 GMT
            Not After : Apr  9 18:28:21 2026 GMT
        Subject: CN=0EF4682A03CDAED2446D8B1E698DC0A68412A7B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:90:49:46:cb:ce:b0:36:d7:f0:06:d7:e4:6e:
                    01:30:2e:1f:e3:8e:fd:da:46:8d:ed:41:a4:62:9f:
                    18:d5:36:67:85:62:c1:21:d5:68:41:07:9f:76:8f:
                    5f:02:11:77:af:5f:dd:6d:0a:5e:b8:81:3f:4d:b5:
                    68:ec:12:8d:c0:90:db:ff:f3:3b:63:be:3a:63:f6:
                    80:e1:49:70:55:f0:88:99:67:a9:c6:19:91:b7:48:
                    43:3b:2e:e6:e2:e0:4d:ea:68:3e:41:43:ff:d2:1d:
                    64:6a:b5:cb:c2:36:8d:b9:71:7b:d3:47:9a:3f:73:
                    fb:c9:09:b0:cc:30:97:ce:56:05:85:fe:9d:0a:f5:
                    7e:e6:fd:c8:e2:41:23:83:8a:cc:e1:a6:e9:7c:a7:
                    c3:e0:fe:45:05:90:0b:bc:9c:e4:5d:55:58:68:9a:
                    b4:61:a9:be:a7:cb:f3:73:07:66:0b:24:be:b4:e7:
                    34:85:92:54:3c:ac:fd:2b:45:4e:fc:46:02:95:d8:
                    51:c1:78:15:e1:6e:2b:d2:cc:38:c6:c2:9f:d2:1b:
                    00:cf:2b:14:db:82:4e:93:19:dc:ff:e0:fd:98:99:
                    ed:7f:e6:74:27:62:9e:9e:e7:e1:cd:81:02:63:60:
                    1d:92:76:60:6c:1a:cf:06:49:78:1a:27:88:78:40:
                    90:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:F4:68:2A:03:CD:AE:D2:44:6D:8B:1E:69:8D:C0:A6:84:12:A7:B3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HQarzMPCynhhNQvkDGZzf6WXTHRaxJ8AVV2xd8v9qBUL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HQarzMPCynhhNQvkDGZzf6WXTHRaxJ8AVV2xd8v9qBUL/0/0EF4682A03CDAED2446D8B1E698DC0A68412A7B3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.160.0/22
                IPv6:
                  2804:6224::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269278

    Signature Algorithm: sha256WithRSAEncryption
         aa:f4:0b:46:df:bf:25:f5:b6:26:d3:59:e8:9c:cc:7e:d1:df:
         cb:4e:c0:68:da:45:60:15:f1:6e:7c:d5:64:23:e0:58:46:2c:
         0f:84:f9:9a:b0:11:5e:9a:06:58:1d:9e:8d:94:ca:4d:fb:4c:
         2b:9f:37:06:d7:d1:9a:97:3b:2d:41:18:10:7e:e3:87:59:e0:
         d6:95:5d:33:ab:9a:4f:0d:2c:52:10:4e:f4:0a:34:e7:e4:8a:
         ec:d2:ba:c6:71:b0:5d:8f:a1:b7:d5:13:e2:0a:82:83:73:c5:
         87:7b:17:43:d8:46:17:1e:7a:9a:07:e5:0f:5e:1f:c3:0f:ba:
         ae:32:d7:f8:cd:bc:cf:11:d9:db:c1:31:92:9d:12:67:e0:c6:
         3e:b7:e3:51:47:c9:d6:ee:4a:75:33:c3:23:41:b4:3a:60:ac:
         39:07:a1:31:3c:8e:23:fd:23:a9:2d:19:4c:34:4b:4a:6d:3b:
         d9:4b:ad:2a:72:33:6a:71:20:a6:99:a6:a6:bd:ba:e6:7b:b7:
         38:da:0d:ef:8e:b7:bd:96:6d:48:96:5c:58:1e:27:f9:13:26:
         49:b0:f4:23:ff:d1:77:b6:ed:68:ea:f5:55:be:dd:0c:ea:61:
         27:28:a7:46:e2:42:b4:c5:e7:6b:2b:9a:11:3f:46:c2:e7:bd:
         31:b5:8e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:50:57 2025 by rpki-client on console.sobornost.net