Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.cer
File:                     3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.cer (raw, json)
Hash identifier:          LL85QSXPki6GEK7jgnZZB3vIdi4/FWKa/ADH/AiQ7GM=
Subject key identifier:   3F:0E:E5:1E:CF:C0:D1:D8:4B:14:A1:FD:0B:1E:17:78:46:F2:F8:5A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1370C21258B662C889C43FC8DEF6260921CB0B9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 22 Apr 2025 01:06:58 +0000
Certificate not after:    Tue 21 Apr 2026 01:11:58 +0000
Subordinate resources:    AS: 271487
                          IP: 201.94.144.0/22
                          IP: 2804:7c4c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:70:c2:12:58:b6:62:c8:89:c4:3f:c8:de:f6:26:09:21:cb:0b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 22 01:06:58 2025 GMT
            Not After : Apr 21 01:11:58 2026 GMT
        Subject: CN=3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b1:02:df:b5:bd:8a:a7:e9:23:fb:86:ac:20:
                    69:ff:c8:c1:e5:66:51:68:a3:be:17:42:e1:a1:6c:
                    9e:0f:19:8e:a8:67:2f:39:2e:9f:55:92:1f:5e:b6:
                    0b:5c:f9:85:45:c4:7b:dd:9c:74:7c:60:ee:c5:72:
                    d7:dc:e2:df:28:39:54:ad:fb:32:5d:df:91:47:12:
                    42:70:2d:32:55:68:ee:f2:63:33:df:72:0b:71:17:
                    a2:8b:e4:29:b6:eb:5e:fc:98:6d:92:e7:9b:3a:bd:
                    1e:cd:1a:63:9c:7b:f8:e4:af:29:d7:b8:03:2e:7e:
                    c5:54:9c:9b:5b:aa:13:d5:e6:d1:68:e9:23:ae:d2:
                    ef:79:44:99:66:41:21:5b:c2:45:cf:35:e6:ea:47:
                    86:9f:dc:7e:70:76:16:df:be:df:09:12:f4:d1:c4:
                    58:1c:f6:29:b0:52:d7:8e:c8:4a:66:58:09:d6:04:
                    e7:95:22:f3:14:34:3d:3b:be:46:c0:ce:79:f3:39:
                    9a:d0:d9:0c:ac:a3:4a:f9:af:f5:a0:86:d6:df:9d:
                    62:8a:28:0d:ca:0f:df:2b:cb:80:f2:d1:18:1f:4a:
                    c3:dc:e3:72:5e:09:b3:d4:bc:4d:53:cd:ec:90:0f:
                    d0:a9:47:e2:50:a9:de:22:32:5f:c5:a0:7b:2d:63:
                    a6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:0E:E5:1E:CF:C0:D1:D8:4B:14:A1:FD:0B:1E:17:78:46:F2:F8:5A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CLTdUtP4APeHXzpHp2sYWo6ur8WSkqHZiL651G5ttoVD/1/3F0EE51ECFC0D1D84B14A1FD0B1E177846F2F85A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.94.144.0/22
                IPv6:
                  2804:7c4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271487

    Signature Algorithm: sha256WithRSAEncryption
         82:a1:d3:aa:39:ee:89:e9:b4:0e:6d:08:fd:01:e8:a9:c0:8e:
         29:f5:ef:82:21:e5:92:9e:c6:fe:62:53:5b:52:6e:cc:3e:23:
         dc:23:5a:9a:d2:f5:01:48:ad:21:e7:ee:85:b0:9d:1a:31:8d:
         a6:17:0a:be:44:39:de:91:34:cb:10:48:2d:9a:90:e4:9c:4f:
         bb:cd:b0:43:62:42:26:3f:e7:01:1d:ef:8f:06:20:9a:92:ef:
         6f:2e:b7:a1:5b:85:3f:47:ff:c6:e9:ef:6a:41:f5:a1:18:67:
         3e:ee:c5:a5:82:8c:6b:86:7d:c5:e0:43:51:cf:81:14:c0:e0:
         81:a9:46:ad:11:56:24:c6:d6:17:57:49:ad:70:3c:82:dd:b6:
         8f:e3:b4:fc:d8:b9:60:74:89:29:e6:54:25:1d:02:6d:ea:04:
         50:3b:60:3c:06:88:55:3a:49:be:92:38:d2:2d:cb:6b:d8:81:
         b2:98:de:41:4e:74:92:58:30:91:b1:d8:fc:57:47:a0:0a:15:
         63:96:f5:73:8b:22:3f:3c:67:7c:16:e9:24:37:33:fb:8f:0b:
         b7:ae:a7:f2:ba:b1:a0:d5:53:3a:0c:63:35:f5:b3:71:b1:04:
         5f:ce:c7:2f:0a:bc:d2:dd:0b:8c:c4:ab:1b:35:35:70:7b:e6:
         27:0c:55:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:46:55 2025 by rpki-client on console.sobornost.net