Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2136E155D06409C9B152A82F24B3CCCDF3692097.cer
File:                     2136E155D06409C9B152A82F24B3CCCDF3692097.cer (raw, json)
Hash identifier:          5+XgToWHeJzc2AxdJH1ptC+3gzKHTP6mlSsrnNhTm6M=
Subject key identifier:   21:36:E1:55:D0:64:09:C9:B1:52:A8:2F:24:B3:CC:CD:F3:69:20:97
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6121A61C82FD1F7E43D5034787DCEA5C1C06C8B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/2136E155D06409C9B152A82F24B3CCCDF3692097.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 11 Apr 2025 14:53:17 +0000
Certificate not after:    Fri 10 Apr 2026 14:58:17 +0000
Subordinate resources:    AS: 267157
                          IP: 45.230.120.0/22
                          IP: 2804:48fc::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:21:a6:1c:82:fd:1f:7e:43:d5:03:47:87:dc:ea:5c:1c:06:c8:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 11 14:53:17 2025 GMT
            Not After : Apr 10 14:58:17 2026 GMT
        Subject: CN=2136E155D06409C9B152A82F24B3CCCDF3692097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cf:bb:5e:c0:a7:8b:af:ce:15:6d:ea:97:ea:
                    dd:48:24:f1:a7:37:52:04:b2:9f:d1:8f:c9:69:c1:
                    55:db:8c:2a:23:f2:95:49:c6:b4:ac:3c:58:70:2d:
                    52:dd:09:b8:0d:f8:22:bf:8a:76:3f:4e:b9:f7:b0:
                    fb:3c:14:cd:9c:90:d4:44:49:4d:09:1e:ec:3d:dd:
                    7c:cf:1c:59:9d:5e:97:46:91:3d:bd:57:2b:93:f7:
                    2d:40:cb:bd:65:ec:d3:18:b0:40:b3:d9:dc:c5:a4:
                    16:1a:2a:32:c6:df:e1:c7:9f:ae:49:23:c9:14:08:
                    70:ea:4b:83:77:15:47:3d:5b:16:94:01:64:79:7a:
                    bd:ee:34:e1:db:ec:a8:9f:40:9d:01:d6:23:0f:c1:
                    fb:86:09:2d:4d:ae:47:be:d6:33:2e:36:64:cc:09:
                    25:62:62:b9:1a:ce:4f:ba:a3:7b:df:f7:00:21:fe:
                    93:6d:1b:3d:d7:ad:18:47:d9:ef:9d:18:4e:7d:ad:
                    00:56:a3:ea:1f:10:db:c3:d7:78:e0:18:40:e3:e5:
                    66:22:30:67:28:08:dc:80:ce:81:0a:f4:8a:7a:30:
                    6f:9e:48:dc:37:b0:fd:5e:e5:5c:47:bd:ae:ad:be:
                    d7:ad:e9:2d:cf:ab:89:42:eb:c3:c9:d4:ca:05:4c:
                    c6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:36:E1:55:D0:64:09:C9:B1:52:A8:2F:24:B3:CC:CD:F3:69:20:97
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CEWXHoTiJk65JXENxpp7WJKGM4bwv1RS5mMeaSheL14W/0/2136E155D06409C9B152A82F24B3CCCDF3692097.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.120.0/22
                IPv6:
                  2804:48fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267157

    Signature Algorithm: sha256WithRSAEncryption
         64:ee:70:5f:c4:9c:3d:28:5c:4e:1a:3b:f0:53:af:40:62:12:
         11:0b:7c:f8:2b:9d:d8:36:6d:a3:4e:2f:95:4d:f7:aa:2f:37:
         62:23:3d:e2:b7:60:a0:aa:99:88:e0:17:b4:6b:fa:fe:01:e6:
         de:c4:ef:7e:b3:5b:3b:7c:3f:26:e4:70:6c:56:f9:db:61:23:
         58:fa:c0:0b:44:7b:1d:88:d6:7b:60:4d:0c:98:23:7b:62:cf:
         4c:d8:ad:dd:39:84:fe:ea:cd:7b:f7:8c:d9:a1:37:60:ae:09:
         96:35:fc:f2:28:34:09:d1:b4:4b:22:0d:06:cf:47:fb:f5:22:
         a7:b9:dd:75:2e:75:c5:a5:15:ad:cd:13:ce:bf:90:c4:2b:bf:
         30:e2:25:59:d1:47:bb:87:67:48:22:8d:53:49:25:97:88:f9:
         3a:61:7d:8b:35:fc:74:64:24:97:7c:33:48:83:b9:e3:72:d0:
         a8:bb:3a:1c:6d:82:f5:68:a1:13:58:d6:72:c4:c1:f2:72:25:
         f3:dd:79:1f:d7:6f:4a:66:c2:3c:28:a0:d2:1a:fc:3e:6d:f8:
         94:f7:c5:d6:31:33:f5:60:31:10:03:d5:28:61:66:1d:df:e4:
         9f:97:57:06:9f:a0:28:06:e5:1d:d6:b0:b6:3a:f1:c3:0d:68:
         4d:d5:c8:ea
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUYSGmHIL9H35D1QNHh9zqXBwGyLIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA0MTExNDUzMTdaFw0yNjA0MTAxNDU4MTdaMDMxMTAvBgNV
BAMTKDIxMzZFMTU1RDA2NDA5QzlCMTUyQTgyRjI0QjNDQ0NERjM2OTIwOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFz7tewKeLr84VbeqX6t1IJPGn
N1IEsp/Rj8lpwVXbjCoj8pVJxrSsPFhwLVLdCbgN+CK/inY/Trn3sPs8FM2ckNRE
SU0JHuw93XzPHFmdXpdGkT29VyuT9y1Ay71l7NMYsECz2dzFpBYaKjLG3+HHn65J
I8kUCHDqS4N3FUc9WxaUAWR5er3uNOHb7KifQJ0B1iMPwfuGCS1Nrke+1jMuNmTM
CSViYrkazk+6o3vf9wAh/pNtGz3XrRhH2e+dGE59rQBWo+ofENvD13jgGEDj5WYi
MGcoCNyAzoEK9Ip6MG+eSNw3sP1e5VxHva6tvtet6S3Pq4lC68PJ1MoFTMZPAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQhNuFV0GQJybFS
qC8ks8zN82kglzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0VX
WEhvVGlKazY1SlhFTnhwcDdXSktHTTRid3YxUlM1bU1lYVNoZUwxNFcvMDCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ0VX
WEhvVGlKazY1SlhFTnhwcDdXSktHTTRid3YxUlM1bU1lYVNoZUwxNFcvMC8yMTM2
RTE1NUQwNjQwOUM5QjE1MkE4MkYyNEIzQ0NDREYzNjkyMDk3Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAIt5ngwDQQCAAIwBwMFACgESPwwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBBOVMA0GCSqGSIb3DQEBCwUAA4IBAQBk7nBfxJw9KFxOGjvw
U69AYhIRC3z4K53YNm2jTi+VTfeqLzdiIz3it2CgqpmI4Be0a/r+AebexO9+s1s7
fD8m5HBsVvnbYSNY+sALRHsdiNZ7YE0MmCN7Ys9M2K3dOYT+6s1794zZoTdgrgmW
NfzyKDQJ0bRLIg0Gz0f79SKnud11LnXFpRWtzRPOv5DEK78w4iVZ0Ue7h2dIIo1T
SSWXiPk6YX2LNfx0ZCSXfDNIg7njctCouzocbYL1aKETWNZyxMHyciXz3Xkf129K
ZsI8KKDSGvw+bfiU98XWMTP1YDEQA9UoYWYd3+Sfl1cGn6AoBuUd1rC2OvHDDWhN
1cjq
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:07:09 2025 by rpki-client on console.sobornost.net