Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer
File:                     2A46B4AB9FEBC73AFDF13505BECE16D741779B03.cer (raw, json)
Hash identifier:          9GWxNYT2mMvwijICXB6h4xuCfdqtXqkVqDaLs0FCOeM=
Subject key identifier:   2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2C4149288C8105B6732029BB124859F8F3E9B685
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 09 Apr 2025 13:48:27 +0000
Certificate not after:    Wed 08 Apr 2026 13:53:27 +0000
Subordinate resources:    AS: 273309
                          IP: 45.227.84.0/22
                          IP: 45.233.220.0/22
                          IP: 131.0.208.0/22
                          IP: 131.161.32.0/22
                          IP: 138.122.16.0/22
                          IP: 138.219.48.0/22
                          IP: 168.228.24.0/22
                          IP: 177.124.184.0/22
                          IP: 177.152.112.0/21
                          IP: 177.222.208.0/21
                          IP: 186.226.220.0/22
                          IP: 191.37.216.0/21
                          IP: 2804:8c7c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:41:49:28:8c:81:05:b6:73:20:29:bb:12:48:59:f8:f3:e9:b6:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  9 13:48:27 2025 GMT
            Not After : Apr  8 13:53:27 2026 GMT
        Subject: CN=2A46B4AB9FEBC73AFDF13505BECE16D741779B03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ca:5a:f0:08:32:2d:b6:d4:53:85:fe:1a:ee:
                    64:69:7a:7e:ea:62:6e:c3:57:fc:71:e5:8f:17:fb:
                    f4:e6:0d:21:19:5d:ef:85:70:24:6d:9a:ee:22:f8:
                    63:8e:87:20:3e:3e:ee:93:b0:dd:28:21:b1:8a:40:
                    6f:ff:74:3b:92:fd:a2:1f:0a:70:fe:c2:b1:50:fe:
                    23:11:b3:f9:1a:20:4e:f4:02:61:28:28:f6:b8:95:
                    12:9f:9f:33:6d:ea:67:d4:40:ca:bb:3f:37:b0:83:
                    14:f5:e2:73:d2:eb:e8:82:47:10:ba:ac:1e:5a:c4:
                    6f:13:45:f9:c7:40:40:86:91:7d:7d:15:4a:13:14:
                    80:da:93:20:e3:d8:33:92:91:73:ac:62:75:00:44:
                    a2:d4:ab:43:18:6b:22:58:a7:f0:46:93:65:a9:15:
                    53:34:66:4c:ad:8a:83:5b:0b:0e:12:b3:d7:47:58:
                    d5:c1:fb:bb:f0:df:16:cf:01:12:16:bb:d9:05:69:
                    79:92:f6:40:48:3d:79:78:19:a3:ac:b2:48:1e:29:
                    bd:e2:7b:8c:5f:96:31:5c:82:47:72:61:3a:44:ab:
                    cd:cd:10:dc:78:e6:ef:cd:60:97:0e:be:e3:ba:3f:
                    96:a0:fd:8b:e1:32:b4:6b:e8:9e:1d:01:cf:09:f7:
                    e6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:46:B4:AB:9F:EB:C7:3A:FD:F1:35:05:BE:CE:16:D7:41:77:9B:03
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DSijPWYF5ucADh65ivNsY8eykeUY7Pvt3xFVc1dCLZGC/0/2A46B4AB9FEBC73AFDF13505BECE16D741779B03.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.84.0/22
                  45.233.220.0/22
                  131.0.208.0/22
                  131.161.32.0/22
                  138.122.16.0/22
                  138.219.48.0/22
                  168.228.24.0/22
                  177.124.184.0/22
                  177.152.112.0/21
                  177.222.208.0/21
                  186.226.220.0/22
                  191.37.216.0/21
                IPv6:
                  2804:8c7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273309

    Signature Algorithm: sha256WithRSAEncryption
         a6:f8:7e:1f:36:47:fd:5d:70:6e:4b:23:7a:9e:25:7e:68:8c:
         45:23:a5:7d:2e:d2:7a:b2:d9:e9:8e:55:1d:3b:1d:77:6a:7a:
         07:a6:61:2e:8a:09:ce:ff:9c:46:5b:e8:cf:87:70:5d:58:25:
         1e:32:78:37:83:4d:b1:be:c1:48:a8:50:d5:f4:01:42:07:19:
         12:eb:c6:ea:3a:56:00:62:ff:d4:83:3c:08:24:74:a4:7a:69:
         34:47:ee:23:76:b2:c6:4a:b2:63:05:0e:8e:a9:bd:16:a2:e3:
         05:81:65:8d:7d:cf:b4:94:81:21:87:3e:e9:cf:7a:43:a8:86:
         51:cc:18:0f:2f:c7:f5:5d:2d:de:81:98:48:f2:50:61:82:eb:
         f9:a8:0e:88:b7:30:cf:5e:cc:ed:f9:da:b3:d3:1a:d7:f9:f5:
         f5:ae:f6:a2:d2:b4:45:c6:d3:c2:86:b6:c9:6d:3c:58:4c:51:
         0b:6d:0f:53:08:39:27:d9:cb:aa:9d:72:ad:f6:cf:58:44:1a:
         cd:e4:b9:2a:f3:cd:d6:5b:82:b1:4c:44:3f:9c:91:f1:fe:51:
         7d:73:ee:59:e2:e0:b8:7b:6d:c8:17:28:9c:7a:9e:84:65:44:
         f1:fc:37:2a:93:74:0d:f7:9a:bf:ca:60:b4:3a:eb:63:6c:44:
         bb:24:ee:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:56 2025 by rpki-client on console.sobornost.net