Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3073B425FD21597EA2229B04AED47720BF469CE6.cer
File:                     3073B425FD21597EA2229B04AED47720BF469CE6.cer (raw, json)
Hash identifier:          jAPYaTE/8jBXFWAdiyHvWCvs37r8f8c8BVWLCGJbUrM=
Subject key identifier:   30:73:B4:25:FD:21:59:7E:A2:22:9B:04:AE:D4:77:20:BF:46:9C:E6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       428B64C3CDC1CAABC0CFA193F5826FFF2D1ED822
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/3073B425FD21597EA2229B04AED47720BF469CE6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 09 Apr 2025 14:16:37 +0000
Certificate not after:    Wed 08 Apr 2026 14:21:37 +0000
Subordinate resources:    AS: 262899
                          IP: 45.165.128.0/22
                          IP: 2804:554c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:8b:64:c3:cd:c1:ca:ab:c0:cf:a1:93:f5:82:6f:ff:2d:1e:d8:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  9 14:16:37 2025 GMT
            Not After : Apr  8 14:21:37 2026 GMT
        Subject: CN=3073B425FD21597EA2229B04AED47720BF469CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c8:d8:fa:40:11:bf:bd:85:81:0b:05:df:a4:
                    e8:c1:0c:dc:59:be:5b:78:3d:f9:ae:ee:a6:21:2d:
                    15:bc:62:fd:10:bd:6d:70:e6:81:0e:15:b2:06:8b:
                    78:17:10:ee:42:a4:34:2e:78:64:b0:25:b4:e5:aa:
                    a3:6f:83:4e:94:a1:e2:36:64:48:37:89:2e:a4:99:
                    6f:74:56:49:27:01:20:1a:d7:bf:44:c3:8a:7f:cf:
                    64:52:ff:d2:70:35:2f:72:71:0d:19:ff:b1:c5:b2:
                    47:23:5f:42:2e:36:e7:42:73:54:91:27:0e:39:5c:
                    8a:79:28:29:90:1e:15:72:be:27:3b:0b:ea:0a:c3:
                    5d:0f:b0:c2:6d:18:e9:2a:df:cd:99:e6:7a:e0:68:
                    c1:16:d1:88:b9:93:8f:5a:36:ca:15:ae:c1:34:80:
                    c2:fd:48:19:c4:2e:8a:b0:ef:e5:25:a0:c9:d6:7c:
                    33:8d:5a:33:95:79:cc:1c:ac:b9:01:86:c1:8c:e9:
                    84:7e:d1:9f:ea:aa:e4:ae:7f:75:72:a7:98:5c:e1:
                    5e:ef:26:f6:cc:96:6a:fb:99:e5:19:75:f8:eb:a3:
                    f4:1a:f2:20:b2:0f:05:13:0f:83:1c:0e:db:64:00:
                    02:37:40:77:ad:57:ea:24:95:e8:c3:14:d7:8c:cb:
                    c9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:73:B4:25:FD:21:59:7E:A2:22:9B:04:AE:D4:77:20:BF:46:9C:E6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/3073B425FD21597EA2229B04AED47720BF469CE6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.128.0/22
                IPv6:
                  2804:554c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262899

    Signature Algorithm: sha256WithRSAEncryption
         24:0b:5f:75:96:66:be:ed:e5:6a:1e:72:80:60:42:30:b8:5f:
         c4:f7:e0:71:9b:a9:15:0a:1d:4d:68:81:a9:0f:bd:7f:a7:4f:
         a2:37:79:0d:20:af:4c:3a:38:13:0d:14:84:8a:03:20:c3:5c:
         4c:0d:b3:0f:76:af:c8:5e:c7:63:c9:70:db:e2:06:84:39:35:
         af:34:14:cf:02:7e:79:95:f0:36:21:3b:74:65:c2:2b:e5:dc:
         3e:18:db:e8:cd:5c:37:9a:b6:bc:61:52:22:ec:38:a5:7c:f8:
         de:16:ad:1a:e3:67:bb:19:58:74:e6:66:b0:df:56:26:71:8d:
         04:42:94:c7:af:e4:01:56:2e:87:2c:57:68:75:53:c2:68:10:
         6b:ed:84:9a:e0:07:40:02:7d:23:91:1c:27:32:dc:ef:8b:80:
         b5:7b:b2:dd:50:d4:eb:e7:5d:82:24:cf:0f:4d:a6:7a:af:f2:
         a9:ef:95:fa:c6:e1:00:2b:bd:73:f2:21:0b:da:5c:42:af:e4:
         5a:5e:1f:68:54:58:9c:0d:df:9f:1b:fb:1f:f2:ec:d3:dd:a7:
         d1:09:72:c5:e8:ee:66:87:2d:b5:37:7a:e4:e1:91:6b:9d:3c:
         22:02:86:13:3a:9c:b9:d5:a0:b8:09:64:6c:4e:55:bb:86:14:
         d7:27:00:59
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUQotkw83ByqvAz6GT9YJv/y0e2CIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA0MDkxNDE2MzdaFw0yNjA0MDgxNDIxMzdaMDMxMTAvBgNV
BAMTKDMwNzNCNDI1RkQyMTU5N0VBMjIyOUIwNEFFRDQ3NzIwQkY0NjlDRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCyNj6QBG/vYWBCwXfpOjBDNxZ
vlt4Pfmu7qYhLRW8Yv0QvW1w5oEOFbIGi3gXEO5CpDQueGSwJbTlqqNvg06UoeI2
ZEg3iS6kmW90VkknASAa179Ew4p/z2RS/9JwNS9ycQ0Z/7HFskcjX0IuNudCc1SR
Jw45XIp5KCmQHhVyvic7C+oKw10PsMJtGOkq382Z5nrgaMEW0Yi5k49aNsoVrsE0
gML9SBnELoqw7+UloMnWfDONWjOVecwcrLkBhsGM6YR+0Z/qquSuf3Vyp5hc4V7v
JvbMlmr7meUZdfjro/Qa8iCyDwUTD4McDttkAAI3QHetV+oklejDFNeMy8kVAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQwc7Ql/SFZfqIi
mwSu1Hcgv0ac5jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGd6
ejVUS0tOcG4zNTU0R29nNlVhbWthYllMcmc4UEFwVFc5dWNLaW5kOFgvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhn
eno1VEtLTnBuMzU1NEdvZzZVYW1rYWJZTHJnOFBBcFRXOXVjS2luZDhYLzAvMzA3
M0I0MjVGRDIxNTk3RUEyMjI5QjA0QUVENDc3MjBCRjQ2OUNFNi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLaWAMA0EAgACMAcDBQAoBFVMMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQC8zANBgkqhkiG9w0BAQsFAAOCAQEAJAtfdZZmvu3lah5y
gGBCMLhfxPfgcZupFQodTWiBqQ+9f6dPojd5DSCvTDo4Ew0UhIoDIMNcTA2zD3av
yF7HY8lw2+IGhDk1rzQUzwJ+eZXwNiE7dGXCK+XcPhjb6M1cN5q2vGFSIuw4pXz4
3hatGuNnuxlYdOZmsN9WJnGNBEKUx6/kAVYuhyxXaHVTwmgQa+2EmuAHQAJ9I5Ec
JzLc74uAtXuy3VDU6+ddgiTPD02meq/yqe+V+sbhACu9c/IhC9pcQq/kWl4faFRY
nA3fnxv7H/Ls092n0QlyxejuZocttTd65OGRa508IgKGEzqcudWguAlkbE5Vu4YU
1ycAWQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:07:13 2025 by rpki-client on console.sobornost.net