Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/129EEDE439F72016FF6D587AF04D37689F26C2E4.cer
File:                     129EEDE439F72016FF6D587AF04D37689F26C2E4.cer (raw, json)
Hash identifier:          2pSgVUULDtTwY6sXGuxNh0aH7WzUUE8HfMH5IrdstLw=
Subject key identifier:   12:9E:ED:E4:39:F7:20:16:FF:6D:58:7A:F0:4D:37:68:9F:26:C2:E4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       72F1E0A02F8C747E4B867BC97F393EDDF309F32B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GcTS8nxoGdHE23A4FX9hNCdVdnmx6L5SK2kCdetqfX6T/0/129EEDE439F72016FF6D587AF04D37689F26C2E4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GcTS8nxoGdHE23A4FX9hNCdVdnmx6L5SK2kCdetqfX6T/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 23 Apr 2025 15:27:25 +0000
Certificate not after:    Wed 22 Apr 2026 15:32:25 +0000
Subordinate resources:    AS: 61879
                          IP: 131.0.152.0/22
                          IP: 2801:80:c00::/48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f1:e0:a0:2f:8c:74:7e:4b:86:7b:c9:7f:39:3e:dd:f3:09:f3:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 23 15:27:25 2025 GMT
            Not After : Apr 22 15:32:25 2026 GMT
        Subject: CN=129EEDE439F72016FF6D587AF04D37689F26C2E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:df:50:2d:36:fc:5d:c4:16:3e:07:48:c5:e2:
                    5e:5e:d8:99:92:2f:5f:fc:53:72:2f:ea:16:93:95:
                    a9:48:63:e0:c0:c2:39:e4:dd:d3:54:8e:e3:85:53:
                    8e:d2:39:da:dc:ce:b2:3a:da:7c:9e:68:c7:55:3d:
                    e1:df:d9:36:33:d1:7f:23:1a:77:99:8a:a8:68:a5:
                    6a:ae:fd:b6:14:72:2e:c8:38:8b:d5:56:4d:2d:5f:
                    d0:f1:d8:cd:70:ed:1e:e7:0f:eb:b5:55:a0:9c:86:
                    29:5d:3a:df:6e:f4:60:15:f4:70:3b:ff:e8:72:52:
                    f4:3a:08:55:67:12:c4:d8:e3:0e:09:64:c8:da:c5:
                    63:4a:58:1a:a1:ba:57:4b:5c:83:2f:2c:4f:ee:cb:
                    f2:da:f6:54:31:0f:01:78:6a:e6:17:48:ed:dd:3e:
                    48:8b:c3:e5:3f:52:76:60:b3:98:1a:2d:14:32:da:
                    d2:b0:37:57:c6:5c:5c:1a:fb:05:52:f2:7e:15:27:
                    fc:df:5e:85:5f:eb:87:e3:bb:4a:e7:61:92:8a:29:
                    c2:38:1d:c5:a6:37:b3:26:f9:77:7e:86:5b:06:6e:
                    6e:e7:86:d8:a7:29:7b:e0:8c:e7:44:b1:f3:f4:ee:
                    75:26:f5:52:d9:1a:d9:ce:4d:a0:07:d9:2c:36:64:
                    8e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:9E:ED:E4:39:F7:20:16:FF:6D:58:7A:F0:4D:37:68:9F:26:C2:E4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GcTS8nxoGdHE23A4FX9hNCdVdnmx6L5SK2kCdetqfX6T/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GcTS8nxoGdHE23A4FX9hNCdVdnmx6L5SK2kCdetqfX6T/0/129EEDE439F72016FF6D587AF04D37689F26C2E4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.152.0/22
                IPv6:
                  2801:80:c00::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61879

    Signature Algorithm: sha256WithRSAEncryption
         52:6d:c8:52:a5:96:05:8e:bc:b0:71:f2:b5:0c:4b:22:d6:44:
         ac:ca:ac:b4:82:b4:5a:cd:a2:07:db:03:f7:47:2d:23:65:ef:
         66:a8:d2:46:1a:ca:87:c9:3d:56:2d:2a:90:33:13:b3:cc:80:
         82:72:a4:5f:15:b4:b2:38:8f:8d:9a:04:62:7e:72:12:cd:2b:
         a5:30:ca:14:d9:0e:fe:79:b2:25:11:80:38:e7:49:d9:53:d2:
         7d:86:81:a6:2c:86:d4:9c:c6:89:2f:26:88:45:97:fe:c3:70:
         51:d1:af:ed:90:d3:b7:0b:54:e7:c4:56:72:a6:a6:f2:01:d1:
         a1:60:e7:5b:4b:04:17:2a:46:1b:e9:0d:c3:ee:a5:c0:e6:31:
         3f:6b:f0:48:f1:cc:e6:4a:a6:ad:dd:41:15:de:f7:ac:d8:15:
         99:0f:1c:9b:4a:1a:e6:5d:1a:e9:01:18:4d:e4:37:a1:a6:b3:
         52:3a:ee:32:45:6f:63:45:9b:d1:07:0e:ca:e5:8c:f5:13:1d:
         a7:a8:27:03:0a:dd:ed:5f:ec:77:ae:a8:9f:6d:4d:3d:30:ac:
         e6:31:6a:c8:07:df:7f:7c:70:8e:a3:7b:05:84:58:62:f2:c4:
         4e:ab:38:11:fa:97:eb:f5:88:70:bf:18:36:99:cc:2a:54:2b:
         54:ce:35:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:44 2025 by rpki-client on console.sobornost.net