Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58.cer
File:                     1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58.cer (raw, json)
Hash identifier:          s0fdQnQtYEymy3X0qZs/zIQRKnDCj3gTU454iuAMsPI=
Subject key identifier:   1B:7D:DF:CB:5C:86:59:96:08:DE:38:E4:CA:DB:27:3B:D3:EB:EC:58
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       37B683E7281ED64D61E8DF6C24A7EDF9E27E3EC7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 16 Apr 2025 12:48:11 +0000
Certificate not after:    Wed 15 Apr 2026 12:53:11 +0000
Subordinate resources:    AS: 268130
                          IP: 45.169.208.0/22
                          IP: 2804:5888::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b6:83:e7:28:1e:d6:4d:61:e8:df:6c:24:a7:ed:f9:e2:7e:3e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 16 12:48:11 2025 GMT
            Not After : Apr 15 12:53:11 2026 GMT
        Subject: CN=1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ab:89:ef:c4:41:64:63:b2:d6:58:7e:06:eb:
                    e8:52:48:14:79:24:cf:51:4a:77:5b:fd:7e:a5:d7:
                    ec:bd:81:5a:a9:64:7c:89:ad:3d:96:29:de:b1:9b:
                    be:ee:1e:58:ac:66:c3:d8:47:9f:e6:fd:ee:7a:e0:
                    b8:06:37:85:66:62:11:2b:45:46:dd:3d:5b:f1:73:
                    f8:df:13:f8:fa:f9:cd:de:a5:39:fd:b8:d8:e8:4f:
                    6a:52:b0:4c:76:6e:fc:82:69:09:65:9b:08:f8:40:
                    73:1e:51:34:5f:4c:74:0c:7e:5c:01:08:c5:fd:fe:
                    e5:c0:a5:9e:e4:05:e4:99:8c:19:58:93:ea:58:8b:
                    db:5d:f4:2f:04:d8:b7:d7:99:eb:c3:dd:72:b5:3f:
                    76:b4:ed:9e:70:37:bc:c2:11:92:28:33:04:50:83:
                    6f:e5:91:62:ba:db:a0:0c:29:30:f2:b9:93:63:de:
                    e1:7d:3f:64:27:f6:d4:e4:e7:0f:ea:d6:39:11:08:
                    0c:1d:bd:f1:04:6e:09:7b:6c:33:7c:c7:b8:e0:fa:
                    10:45:cf:95:dd:79:85:89:a7:d3:9a:86:b7:04:3b:
                    8a:c9:f5:12:52:6f:da:e1:29:44:3d:92:e9:05:fc:
                    60:f0:66:2d:1c:92:ef:67:ba:80:c2:13:d9:11:3b:
                    cd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:7D:DF:CB:5C:86:59:96:08:DE:38:E4:CA:DB:27:3B:D3:EB:EC:58
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5T3thFF2xH21QKA7skKqFf66ZKKbAS4YXN9cnKpmgG97/0/1B7DDFCB5C86599608DE38E4CADB273BD3EBEC58.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.208.0/22
                IPv6:
                  2804:5888::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268130

    Signature Algorithm: sha256WithRSAEncryption
         13:06:5a:5b:d0:5f:3c:09:dc:93:0c:4c:bd:1e:71:5d:7b:8f:
         b2:e2:d9:06:dc:fb:20:28:ab:9a:04:d8:db:a6:84:dc:37:43:
         36:a0:e7:9a:53:e1:29:86:5d:10:28:d2:11:d3:f9:92:cc:c2:
         41:5a:a7:2a:db:d3:e6:84:53:37:df:08:a2:69:cc:c1:9e:1e:
         98:b0:47:b7:b6:57:e0:b6:f3:26:de:7c:8f:ea:a7:e6:e1:cb:
         0d:63:a9:e8:be:3b:45:06:89:20:ec:55:bd:b5:4e:b5:dd:2a:
         e6:ef:c2:af:c3:b4:c0:aa:cb:44:79:4f:59:71:92:6f:03:1d:
         ff:4b:6c:43:32:ea:4d:60:74:bc:51:94:3b:48:42:a3:d2:95:
         61:55:66:1c:3e:8d:03:4f:5a:0b:b9:1c:4b:92:2c:e9:84:5d:
         d5:62:cd:24:88:ea:f6:51:74:e1:14:da:46:68:b4:57:da:a6:
         87:3f:58:db:32:f1:5f:a4:9e:94:e8:b9:ff:0e:40:9a:83:16:
         26:31:3c:11:69:29:2c:4c:d8:23:f6:1e:c3:19:a8:e3:8c:f4:
         44:85:e3:1e:f7:48:32:0a:e6:fc:dc:f9:f1:bd:d8:cd:0f:f9:
         a7:01:9e:07:2d:d1:38:d1:2d:8b:9d:95:33:0b:17:ae:a9:ac:
         44:66:e0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:53 2025 by rpki-client on console.sobornost.net