Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer
File:                     21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.cer (raw, json)
Hash identifier:          nm7YOYJu9IM6JmNELQl1CIhlNCsUhkO4lTOYWxv4nlg=
Subject key identifier:   21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       61611B8E8C4DDFA7128D847349E87754A2A4E8ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 02:17:43 +0000
Certificate not after:    Fri 06 Mar 2026 02:22:43 +0000
Subordinate resources:    AS: 270910
                          IP: 138.121.164.0/22
                          IP: 2804:735c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Apr 2025 05:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:61:1b:8e:8c:4d:df:a7:12:8d:84:73:49:e8:77:54:a2:a4:e8:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 02:17:43 2025 GMT
            Not After : Mar  6 02:22:43 2026 GMT
        Subject: CN=21B66D518F6F1EC440896EDEA1C6F9E694CC3B66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5d:08:7f:48:40:78:7b:30:6d:2b:0f:2d:e6:
                    53:31:44:1f:d0:de:c7:64:f1:fd:c5:ea:a6:2d:e6:
                    31:08:fa:6d:ae:eb:f9:44:6b:66:f1:a2:96:13:21:
                    b1:74:da:2d:86:e0:b9:85:b0:3e:1d:de:81:66:ea:
                    1d:ec:1c:44:42:2d:7e:54:7b:04:9f:8e:e2:3e:e2:
                    e2:b0:dc:be:3f:07:cd:76:23:6e:4b:5b:8b:51:1b:
                    e6:8d:1e:27:2d:a1:ca:40:08:5c:14:c0:5b:be:a0:
                    a8:c5:83:1f:09:cb:cf:e4:44:73:bd:08:2a:f3:7e:
                    f1:17:f3:c2:99:f4:40:29:c4:14:c5:b9:33:fb:c4:
                    bb:1f:df:da:50:78:2b:93:55:94:69:ec:43:b5:a1:
                    b2:b7:4c:67:fd:5c:d3:d3:1d:66:1b:45:59:f9:6e:
                    c3:5f:5b:b0:78:12:b9:65:da:34:01:f9:a2:9b:10:
                    53:68:b3:9c:b3:1b:dc:b9:60:04:eb:71:75:f5:33:
                    c3:46:dc:40:02:c4:b5:28:99:28:ce:7b:dc:eb:0c:
                    c0:5f:45:30:6d:16:b9:8e:2d:38:6d:64:ae:c0:18:
                    94:90:54:d7:46:45:2e:eb:a6:0a:f8:78:24:46:02:
                    5f:f5:58:eb:08:16:da:16:34:95:e2:30:73:9a:bc:
                    a7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:B6:6D:51:8F:6F:1E:C4:40:89:6E:DE:A1:C6:F9:E6:94:CC:3B:66
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/1/21B66D518F6F1EC440896EDEA1C6F9E694CC3B66.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.164.0/22
                IPv6:
                  2804:735c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270910

    Signature Algorithm: sha256WithRSAEncryption
         1a:05:ca:f1:45:b9:a5:0b:70:9a:df:dc:6a:ad:e8:bc:20:2c:
         ae:2c:6d:f0:7b:52:c7:be:71:83:fd:52:d0:cc:48:ac:ff:88:
         27:cb:17:bd:17:ed:4f:9b:94:86:89:ba:02:19:a6:da:9a:31:
         4e:53:8d:f2:3c:32:a2:ea:9a:a2:b9:38:0a:1b:fd:b3:b8:64:
         4d:5a:c3:70:0e:a6:19:09:87:7d:99:f3:99:01:22:d1:b3:0f:
         e7:60:b3:ec:97:e7:c3:33:13:70:8f:62:18:f6:81:64:21:38:
         b9:ca:f8:ea:03:58:f7:29:09:9d:e9:07:74:37:6a:54:2a:44:
         89:46:68:3a:92:4b:bd:25:1b:2c:04:6f:12:36:5f:5f:a0:26:
         ab:9e:ff:e0:26:ea:9f:cd:ab:30:7c:df:b5:e2:f6:8d:74:d0:
         49:29:e5:17:40:c7:b1:a5:6d:4c:ba:c4:86:21:51:02:29:78:
         ef:ec:90:6f:15:14:ef:9e:82:e8:d4:a8:e2:c4:43:60:07:ba:
         fb:02:bb:f5:1f:af:ab:2c:17:58:ea:89:34:16:9c:30:d4:8b:
         34:8a:ab:73:53:8d:ff:3f:eb:8a:10:c8:60:b2:5a:e9:6f:f4:
         d1:b5:2b:e9:66:4b:0d:a2:2a:c0:ea:fd:54:d8:ce:df:42:f5:
         96:d2:0e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:15:42 2025 by rpki-client on console.sobornost.net