Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.cer
File:                     1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.cer (raw, json)
Hash identifier:          Vi6pCaEBYckZ2s8QjtH6OmxfVztJqDOWNY5OcJDR9O0=
Subject key identifier:   10:33:FD:76:52:BC:4E:50:27:EF:F9:C0:EA:46:34:A9:7B:32:A7:CA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       03D30ADCF679FB75349CEA5EE08A71E375E9CFC2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 09 Apr 2025 15:49:16 +0000
Certificate not after:    Wed 08 Apr 2026 15:54:16 +0000
Subordinate resources:    AS: 273408
                          IP: 2804:8e2c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d3:0a:dc:f6:79:fb:75:34:9c:ea:5e:e0:8a:71:e3:75:e9:cf:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  9 15:49:16 2025 GMT
            Not After : Apr  8 15:54:16 2026 GMT
        Subject: CN=1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:fb:c4:e8:21:b9:0f:90:46:7d:e0:ea:2a:04:
                    64:d6:44:6f:40:d8:24:ca:98:24:64:3c:54:18:15:
                    95:b4:51:8e:3c:34:95:89:51:96:cc:e2:3c:73:5f:
                    09:12:2e:91:26:4a:4c:0c:6f:ad:f3:41:34:31:e3:
                    a0:0a:14:4d:26:9a:8c:0e:68:f8:a4:27:b6:65:fc:
                    2c:ab:8b:d2:53:13:0b:50:cb:3a:ee:54:da:52:32:
                    45:1d:18:d0:8c:55:44:fd:3a:55:a5:a8:3e:63:38:
                    64:38:c4:a8:b8:17:65:ab:ef:ce:fa:95:3c:87:33:
                    06:1c:26:bc:a7:85:a3:18:6a:22:cc:81:2e:fa:fc:
                    37:f0:45:d6:3f:79:c9:1a:e3:a6:7a:a7:58:02:23:
                    29:40:d6:3a:19:49:81:de:c9:22:d0:81:b2:6c:7f:
                    88:b1:37:19:8f:4a:e8:1a:9f:4e:22:b7:d3:c6:bd:
                    c1:26:d6:9a:b6:b0:a2:44:92:ab:30:2d:ba:54:6a:
                    59:33:9b:a4:0c:43:bf:0c:15:29:b7:bd:88:55:80:
                    b6:c1:9d:3c:a4:7b:e0:3e:48:1f:02:c2:e3:51:fe:
                    fa:99:b1:dc:58:79:e4:9e:bc:70:5b:5c:75:6a:8b:
                    bb:a4:02:1d:a7:34:a2:ae:60:43:61:90:fb:47:2d:
                    03:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:33:FD:76:52:BC:4E:50:27:EF:F9:C0:EA:46:34:A9:7B:32:A7:CA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273408

    Signature Algorithm: sha256WithRSAEncryption
         43:03:7c:ca:9c:c3:21:06:3d:5c:6b:73:b0:47:6b:74:42:b9:
         02:39:ec:22:a5:51:88:85:ed:c9:8c:ef:11:61:06:33:3c:d5:
         ef:94:45:ee:cd:80:1e:4f:e2:de:e6:5f:db:d1:63:f3:ba:7c:
         bc:b8:e3:38:3c:87:ba:24:0f:69:7d:40:5e:7f:b1:bb:26:8e:
         7e:83:62:ac:77:80:c9:f7:27:74:98:b4:6f:88:c1:54:ae:3d:
         0a:ba:5d:87:f3:a2:5e:39:11:68:c7:1b:97:79:5f:72:77:52:
         0f:81:d2:fd:88:14:ba:84:6d:44:ac:97:f6:97:3a:a6:c3:d8:
         8c:ac:68:7e:22:9b:76:68:50:48:4e:a4:6e:0b:6a:c8:be:db:
         3d:55:e9:96:e0:66:36:06:74:0a:fd:4c:c7:33:a6:05:9c:40:
         19:01:13:c0:16:47:b0:c2:7e:d9:59:d0:50:4e:16:16:cd:7a:
         19:e3:aa:7d:a0:2d:e9:ce:77:87:f3:d2:19:5b:5a:1f:74:11:
         49:97:63:7a:b0:c6:0f:ef:24:4f:f8:0e:09:c2:84:e0:32:45:
         5c:b6:34:7e:40:8e:b6:d6:38:40:4a:cb:d5:8d:1a:ce:1f:af:
         a7:58:d3:8b:12:42:03:fd:59:b7:46:3e:f7:3f:36:9d:04:f9:
         86:d0:11:de
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUA9MK3PZ5+3U0nOpe4Ipx43Xpz8IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA0MDkxNTQ5MTZaFw0yNjA0MDgxNTU0MTZaMDMxMTAvBgNV
BAMTKDEwMzNGRDc2NTJCQzRFNTAyN0VGRjlDMEVBNDYzNEE5N0IzMkE3Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp+8ToIbkPkEZ94OoqBGTWRG9A
2CTKmCRkPFQYFZW0UY48NJWJUZbM4jxzXwkSLpEmSkwMb63zQTQx46AKFE0mmowO
aPikJ7Zl/Cyri9JTEwtQyzruVNpSMkUdGNCMVUT9OlWlqD5jOGQ4xKi4F2Wr7876
lTyHMwYcJrynhaMYaiLMgS76/DfwRdY/ecka46Z6p1gCIylA1joZSYHeySLQgbJs
f4ixNxmPSugan04it9PGvcEm1pq2sKJEkqswLbpUalkzm6QMQ78MFSm3vYhVgLbB
nTyke+A+SB8CwuNR/vqZsdxYeeSevHBbXHVqi7ukAh2nNKKuYENhkPtHLQO/AgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQQM/12UrxOUCfv
+cDqRjSpezKnyjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1RS
dlNaUFRweTNmaGVXcG1jUG15VUZhYkNuZldvZ1JNZnBWTGhZY2h0SlovMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NU
UnZTWlBUcHkzZmhlV3BtY1BteVVGYWJDbmZXb2dSTWZwVkxoWWNodEpaLzAvMTAz
M0ZENzY1MkJDNEU1MDI3RUZGOUMwRUE0NjM0QTk3QjMyQTdDQS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASOLDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
LAAwDQYJKoZIhvcNAQELBQADggEBAEMDfMqcwyEGPVxrc7BHa3RCuQI57CKlUYiF
7cmM7xFhBjM81e+URe7NgB5P4t7mX9vRY/O6fLy44zg8h7okD2l9QF5/sbsmjn6D
Yqx3gMn3J3SYtG+IwVSuPQq6XYfzol45EWjHG5d5X3J3Ug+B0v2IFLqEbUSsl/aX
OqbD2IysaH4im3ZoUEhOpG4Lasi+2z1V6ZbgZjYGdAr9TMczpgWcQBkBE8AWR7DC
ftlZ0FBOFhbNehnjqn2gLenOd4fz0hlbWh90EUmXY3qwxg/vJE/4DgnChOAyRVy2
NH5AjrbWOEBKy9WNGs4fr6dY04sSQgP9WbdGPvc/Np0E+YbQEd4=
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:50 2025 by rpki-client on console.sobornost.net