Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1A706BB72455093A32D1C60201116349B90D2EC7.cer
File:                     1A706BB72455093A32D1C60201116349B90D2EC7.cer (raw, json)
Hash identifier:          iJVlx8KA1MGla8eHfnCCPG5ty2dhdtQfD/U9t666Vlk=
Subject key identifier:   1A:70:6B:B7:24:55:09:3A:32:D1:C6:02:01:11:63:49:B9:0D:2E:C7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0B91316241D6C9D1F215C9B61BADD3242B149BC5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 23 Apr 2025 19:52:37 +0000
Certificate not after:    Wed 22 Apr 2026 19:57:37 +0000
Subordinate resources:    AS: 266444
                          IP: 170.82.172.0/22
                          IP: 2804:37ec::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:91:31:62:41:d6:c9:d1:f2:15:c9:b6:1b:ad:d3:24:2b:14:9b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 23 19:52:37 2025 GMT
            Not After : Apr 22 19:57:37 2026 GMT
        Subject: CN=1A706BB72455093A32D1C60201116349B90D2EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:83:7c:7a:0b:c2:04:02:13:3b:87:0c:36:ab:
                    0d:82:c6:e8:dc:8b:ba:be:ef:46:7f:92:9a:5c:44:
                    11:c6:f2:a3:3f:c5:fb:1a:14:4a:47:03:fe:0f:68:
                    76:0c:3d:b6:9d:6f:47:17:e6:7c:5f:ed:a5:a7:a4:
                    62:26:16:38:e5:cd:0c:a4:4a:0b:cb:37:f9:6d:db:
                    73:24:d3:ee:cc:58:6b:ac:95:36:40:99:bf:55:db:
                    1f:7e:54:1e:01:a8:12:6b:14:f8:c4:ee:a2:94:8e:
                    27:bf:76:c0:71:57:9a:ca:2d:64:1a:7e:b6:3e:a4:
                    d7:b4:0e:86:a0:e9:37:6b:76:33:f9:ab:eb:59:fa:
                    80:3d:ba:07:63:82:82:99:7d:6f:40:32:fb:aa:3c:
                    8b:cf:7d:c2:d3:75:49:bd:65:ba:3e:68:82:95:a1:
                    92:00:b4:bf:2b:a1:96:7c:83:ba:0d:98:dc:d1:77:
                    d6:24:07:7f:7c:1a:6f:7c:d7:fb:16:8d:99:9c:30:
                    f5:79:6a:e8:ef:35:f4:6d:2a:61:3e:c4:3d:9f:57:
                    04:43:08:5d:0f:ad:45:75:df:76:42:17:68:31:1d:
                    79:a0:87:ff:87:16:e8:13:01:e4:43:3b:33:d2:35:
                    3f:b1:32:96:c8:e2:c9:5f:2e:4d:46:56:97:f1:cb:
                    1a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1A:70:6B:B7:24:55:09:3A:32:D1:C6:02:01:11:63:49:B9:0D:2E:C7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AiMM63C6aQUSVMwdZF33Y7Nq35M2FkvvktV6iCVQNhPA/0/1A706BB72455093A32D1C60201116349B90D2EC7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.172.0/22
                IPv6:
                  2804:37ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266444

    Signature Algorithm: sha256WithRSAEncryption
         5d:1f:b7:2a:cf:42:91:a3:5b:64:e0:e4:01:56:2c:a8:81:49:
         b1:b0:5c:94:b6:33:1d:26:74:03:9a:91:0c:e6:0f:e2:21:a7:
         d7:23:da:74:20:9b:9e:0c:47:59:71:ce:5d:b9:92:f2:cd:3c:
         70:3f:a3:53:6c:71:c5:8a:35:42:d9:5b:da:c7:ef:ce:52:47:
         80:fe:48:d5:1e:a8:8b:54:e3:c0:dd:c1:09:3f:04:0e:1c:a5:
         95:8a:ae:71:81:9b:3f:c6:06:e7:d9:16:2b:99:18:80:42:5b:
         a0:81:5e:89:0a:f4:26:11:15:fa:d4:52:99:25:cf:eb:aa:cc:
         d1:56:b9:61:73:64:30:bd:6b:27:d1:b2:07:a8:b0:41:8e:9b:
         ff:34:2a:d8:0d:f5:7b:b7:49:72:fa:ea:c7:ce:1e:ac:09:eb:
         05:db:b2:59:8c:73:b5:6e:ed:b5:e8:7d:d0:39:df:82:c9:ed:
         4b:d8:34:c0:d0:de:42:78:61:20:07:06:ab:4a:37:a9:ce:8f:
         86:ae:45:02:14:6a:13:7c:ea:d1:e4:ed:81:b2:2b:4f:f8:90:
         bb:99:82:22:e2:b2:66:29:8a:ea:1b:52:28:fd:11:10:02:e9:
         ef:dc:9d:42:bd:d6:94:e7:d2:4e:d9:3b:54:ba:26:10:52:6d:
         d9:e3:69:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:46 2025 by rpki-client on console.sobornost.net