Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/118E5C07438A61E8178F2D60B6311E817D88D0ED.cer
File:                     118E5C07438A61E8178F2D60B6311E817D88D0ED.cer (raw, json)
Hash identifier:          H/PSMRO0d50AtG0HhzmzOywuBf/XpcmXazmP9w5PnRM=
Subject key identifier:   11:8E:5C:07:43:8A:61:E8:17:8F:2D:60:B6:31:1E:81:7D:88:D0:ED
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       488C32254396FBC3D35C93C8E210391AC374B0C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/118E5C07438A61E8178F2D60B6311E817D88D0ED.mft
caRepository:             rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 13:12:32 +0000
Certificate not after:    Thu 05 Mar 2026 13:17:32 +0000
Subordinate resources:    AS: 264562
                          IP: 45.174.188.0/22
                          IP: 45.239.8.0/22
                          IP: 138.36.0.0/22
                          IP: 168.232.84.0/22
                          IP: 187.49.176.0/22
                          IP: 2804:2190::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:8c:32:25:43:96:fb:c3:d3:5c:93:c8:e2:10:39:1a:c3:74:b0:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 13:12:32 2025 GMT
            Not After : Mar  5 13:17:32 2026 GMT
        Subject: CN=118E5C07438A61E8178F2D60B6311E817D88D0ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b3:7d:3d:b9:b2:d4:aa:35:e1:92:46:30:6d:
                    8e:ad:6f:c2:ac:64:f2:39:30:9b:62:db:c7:80:ad:
                    4f:ee:dd:1f:63:fc:fd:93:29:19:2a:16:f6:5a:89:
                    b8:b3:e2:cf:69:93:09:30:40:08:d9:24:ff:f9:51:
                    a8:1d:46:93:e6:e3:ff:3d:c5:b8:eb:3a:58:be:16:
                    8f:4d:6d:05:b6:bc:aa:c7:6c:d7:37:0c:68:22:f9:
                    1c:61:da:89:e8:d7:3c:c1:cf:02:68:09:60:70:80:
                    d8:b9:4b:24:bb:5e:9e:4e:b1:20:9b:fa:c7:97:56:
                    9d:20:f2:fc:28:d1:80:bb:45:09:83:f7:67:25:6d:
                    ae:17:fd:b0:a8:ad:35:15:a2:ce:e6:ed:c5:ae:ce:
                    6b:d9:31:6a:da:39:60:57:f7:35:b1:d4:89:8b:24:
                    1c:70:21:a9:1a:7d:67:0f:ea:5a:9b:8b:16:6e:de:
                    7c:d5:6f:c9:51:94:c4:be:7b:9c:c4:e6:1e:5d:40:
                    8a:13:b9:68:0d:d8:97:65:b3:9b:13:d8:1a:02:e2:
                    1a:c6:3d:4b:1a:76:13:86:fc:25:c9:c4:c0:30:b6:
                    18:76:1f:15:e7:33:9a:99:f7:49:64:e4:6e:fe:69:
                    11:85:4a:f5:a9:d4:58:0a:9b:3c:a1:b8:ca:dd:11:
                    a8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:8E:5C:07:43:8A:61:E8:17:8F:2D:60:B6:31:1E:81:7D:88:D0:ED
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/118E5C07438A61E8178F2D60B6311E817D88D0ED.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.188.0/22
                  45.239.8.0/22
                  138.36.0.0/22
                  168.232.84.0/22
                  187.49.176.0/22
                IPv6:
                  2804:2190::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264562

    Signature Algorithm: sha256WithRSAEncryption
         19:c5:66:75:81:7b:1e:d1:64:ed:c1:cb:5f:95:ee:66:df:54:
         e5:36:bd:df:e4:77:cc:2e:1d:99:ff:9d:c8:71:0f:ad:4a:52:
         15:4e:ed:5a:96:6a:d5:a5:f3:d6:d1:07:90:a8:ca:2b:1f:af:
         82:56:8d:ff:5f:c8:4f:28:38:89:e9:f5:b8:c9:dc:cd:39:57:
         89:49:bc:51:63:5b:eb:d3:5d:d7:50:ee:c2:8f:df:ff:bb:b1:
         48:8a:a9:fd:b4:56:21:e2:d3:3f:27:fc:ea:4e:4b:ae:95:fa:
         d4:90:ed:fd:c0:e9:be:4c:04:42:35:2b:5a:4b:08:05:25:2f:
         25:83:1d:a3:2b:6c:bb:35:54:bd:d3:12:86:57:26:c8:c1:f0:
         06:29:99:ab:04:fc:15:e2:e4:4b:50:cb:1f:c2:f1:60:b8:21:
         94:9f:a5:62:3c:50:5a:f2:5c:cf:06:3b:1b:3c:f4:fa:64:ae:
         85:3c:01:69:45:05:cc:c9:61:4c:2e:eb:b0:0a:c5:91:4d:95:
         c9:6b:05:bf:0f:3d:9f:03:df:30:69:97:fd:06:69:a7:08:00:
         14:39:3f:38:33:60:68:ac:1b:67:c7:07:74:84:d4:16:61:b8:
         9f:70:ec:f4:1d:58:b2:32:ed:47:8d:9c:f9:b4:4e:5e:22:35:
         d5:f8:3c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:07:06 2025 by rpki-client on console.sobornost.net