Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer
File:                     3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.cer (raw, json)
Hash identifier:          RV1eMr+gWjNwr2Vu1kZlQzoHT0UHoKQa9EMWuX/xBRI=
Subject key identifier:   3A:3B:9A:F6:03:B3:E2:66:EC:51:78:C1:58:92:CB:B3:7D:8C:CD:41
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0D88D0A191CB47E6B40AF41BB9A58C9711F2FE64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 02 Apr 2025 13:11:08 +0000
Certificate not after:    Wed 01 Apr 2026 13:16:08 +0000
Subordinate resources:    AS: 272453
                          IP: 2804:816c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:88:d0:a1:91:cb:47:e6:b4:0a:f4:1b:b9:a5:8c:97:11:f2:fe:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  2 13:11:08 2025 GMT
            Not After : Apr  1 13:16:08 2026 GMT
        Subject: CN=3A3B9AF603B3E266EC5178C15892CBB37D8CCD41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7a:cb:4c:51:d0:f4:fe:1d:63:d6:94:83:f2:
                    60:f6:5e:e8:4b:4b:c2:a9:b6:68:25:3f:1b:89:20:
                    a5:98:29:dd:4a:9f:b7:59:67:4d:db:f2:24:8e:e1:
                    56:06:a7:5b:e4:47:17:df:a1:0d:1b:cf:a3:be:aa:
                    44:42:78:e5:9f:ad:dd:8f:f3:a8:e1:e8:08:08:74:
                    a3:88:da:1d:19:d6:c4:4e:38:ab:b8:33:ef:28:c8:
                    f9:04:87:78:a9:e0:73:47:da:a2:33:34:d9:d9:a5:
                    aa:c9:8c:54:f8:5e:0f:ae:9a:49:24:09:8f:f7:33:
                    a7:6b:2d:45:14:5e:fa:89:54:e0:84:9d:6c:69:bb:
                    4c:d3:06:61:eb:b7:c3:ac:cf:fe:e3:5d:0e:9b:04:
                    57:c5:ec:e2:91:64:3f:b3:07:3f:73:fc:6d:d0:cb:
                    e6:b3:a4:b4:70:a1:07:7a:a1:a2:99:07:00:f5:0b:
                    fb:46:b2:47:40:fa:49:74:f6:27:4e:f5:c7:b1:ef:
                    e7:08:19:15:57:a4:d8:95:6e:3d:93:16:dc:ff:4e:
                    0b:66:7f:5c:7f:7f:43:09:cb:53:3c:cc:55:da:2b:
                    e2:ff:15:e4:ad:6b:f2:0a:f3:1e:ae:7e:50:ce:d2:
                    f6:38:62:4d:c7:4c:00:45:22:f7:0b:bd:21:d6:41:
                    de:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3A:3B:9A:F6:03:B3:E2:66:EC:51:78:C1:58:92:CB:B3:7D:8C:CD:41
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/0/3A3B9AF603B3E266EC5178C15892CBB37D8CCD41.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:816c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272453

    Signature Algorithm: sha256WithRSAEncryption
         cc:47:ad:64:3a:57:9d:f4:fa:37:5b:ef:fb:c9:4a:27:25:77:
         5d:a9:f2:16:42:d0:b9:fe:92:cd:c4:5c:e6:f6:d4:d2:e2:91:
         58:af:6f:16:03:6e:e5:92:cf:d9:8c:99:57:86:fe:fa:79:1d:
         2f:67:81:d6:d2:d6:fc:a9:c5:a1:c9:71:d3:1d:b1:9b:67:57:
         6a:8a:91:05:dc:29:80:65:28:e4:d1:b4:5e:9f:86:53:c5:a2:
         90:c2:2a:ed:3d:a0:40:86:9b:cd:d9:c3:78:fb:0a:5b:ff:ea:
         0c:00:b4:2b:24:63:b9:ea:c3:62:96:b9:d7:46:dc:6f:49:83:
         98:c9:ad:0c:26:1c:53:ea:ae:47:bb:9d:5c:2a:42:32:db:bd:
         a8:a9:8b:71:fb:9d:7c:66:ae:6e:6b:02:14:49:e2:4d:c3:b2:
         06:d7:ca:ca:0f:e4:f8:dc:99:d7:16:d3:3e:04:0b:b5:8c:1d:
         ec:88:ab:f2:ad:7a:e5:20:42:95:ec:6a:2b:07:1f:3d:ab:97:
         b5:24:93:20:f7:34:e3:1a:01:cb:7e:c7:f3:38:ab:da:fa:00:
         9e:07:64:d1:2e:91:3c:e4:ae:fc:18:5e:cc:c2:9b:30:e1:41:
         3a:40:99:45:08:b4:ee:28:67:39:f4:f5:5b:5a:bf:65:7e:46:
         7a:38:46:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:54 2025 by rpki-client on console.sobornost.net