Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5ECF0B69B6A75645B9568189FE8781FF6203232B.cer
File:                     5ECF0B69B6A75645B9568189FE8781FF6203232B.cer (raw, json)
Hash identifier:          7YDqqfMok5gDbwo93Pg9UrIgO7CebOoJ80Cf0X0nSeg=
Subject key identifier:   5E:CF:0B:69:B6:A7:56:45:B9:56:81:89:FE:87:81:FF:62:03:23:2B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       21C4D70BCD6308AADF35F575907FC1079354E0D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/5ECF0B69B6A75645B9568189FE8781FF6203232B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 31 Mar 2025 17:47:49 +0000
Certificate not after:    Mon 30 Mar 2026 17:52:49 +0000
Subordinate resources:    AS: 268737
                          IP: 45.171.252.0/22
                          IP: 2804:59f8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c4:d7:0b:cd:63:08:aa:df:35:f5:75:90:7f:c1:07:93:54:e0:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 31 17:47:49 2025 GMT
            Not After : Mar 30 17:52:49 2026 GMT
        Subject: CN=5ECF0B69B6A75645B9568189FE8781FF6203232B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:80:49:fd:2c:9c:69:0e:b6:16:bb:44:7c:a4:
                    2c:7c:93:ee:4f:02:91:73:9f:6e:41:d1:5f:b9:49:
                    cd:ed:86:92:7b:b6:d4:c3:5f:d8:22:d9:72:a7:b2:
                    16:46:7f:12:82:6d:66:28:89:e7:1b:a1:99:06:10:
                    fc:92:b8:71:95:d3:c6:88:bf:4c:ab:dd:7d:51:dc:
                    2f:0b:31:56:5c:11:13:f5:23:fc:2f:c3:c7:7a:a6:
                    68:42:62:09:4f:f2:70:57:73:04:54:a8:e8:ac:e1:
                    15:fc:0e:8c:7e:72:54:8d:88:2b:c2:70:42:24:61:
                    86:9a:91:8e:03:5d:7c:8e:c9:01:3f:05:a7:f1:56:
                    d5:47:ff:e4:e1:e0:f2:db:2d:71:85:76:1a:db:cb:
                    89:b7:b9:c1:75:68:53:ce:02:44:a1:37:34:c2:fc:
                    0a:08:da:03:51:02:2b:c1:d1:5e:56:2f:1a:52:33:
                    dd:fa:9b:73:ed:ed:57:af:57:01:83:f9:45:b2:96:
                    77:2c:10:9c:61:89:36:cb:fd:b0:02:01:06:b3:36:
                    1c:56:68:db:0e:93:ed:41:c3:b2:7d:37:fc:b7:22:
                    4f:22:b1:2e:8a:f4:d3:16:21:06:58:7e:45:d7:aa:
                    19:66:3d:61:e1:d7:2e:a8:1d:10:66:4a:e5:14:a5:
                    53:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:CF:0B:69:B6:A7:56:45:B9:56:81:89:FE:87:81:FF:62:03:23:2B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/5ECF0B69B6A75645B9568189FE8781FF6203232B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.252.0/22
                IPv6:
                  2804:59f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268737

    Signature Algorithm: sha256WithRSAEncryption
         03:e4:89:b6:a7:17:86:07:df:76:30:16:75:7d:32:05:b8:f5:
         f3:ca:a2:0f:45:ba:00:7a:2e:be:13:29:1e:35:63:ec:42:d6:
         96:40:2a:cf:9b:2f:83:41:f2:4b:9e:5b:42:13:68:66:f5:48:
         fd:44:8d:cd:05:a5:04:ea:eb:ce:cb:a1:85:67:90:24:f4:4a:
         76:65:50:c1:18:9b:4c:33:ff:d1:c2:6e:32:31:71:3d:1a:c2:
         25:2e:8c:46:ee:05:f0:a1:a4:c6:01:f8:27:9b:47:9c:17:7b:
         f8:0e:a8:62:a6:98:26:28:83:3a:b1:e9:ca:b2:93:9a:81:b7:
         01:15:5f:29:bf:68:5f:d7:8d:fd:48:58:59:9f:45:95:03:fd:
         2e:a5:da:a2:e7:74:71:9c:cd:58:35:d1:36:ba:64:f6:1f:c1:
         6f:35:ff:75:d7:12:3f:9c:bb:81:2a:ad:4d:02:d3:54:00:4d:
         33:43:8e:41:bc:f1:6a:b6:9a:37:b2:12:9f:fc:8d:ac:77:32:
         d9:f6:57:2f:6f:1b:f6:b8:2b:2d:5b:79:17:85:84:bc:aa:db:
         b6:12:8f:d3:c4:da:9a:51:cb:82:a4:cb:f4:bb:2a:4f:6d:e6:
         86:d6:13:fc:2a:31:ec:8b:78:8b:80:bb:6b:52:df:26:7c:3f:
         cc:19:fa:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:47:02 2025 by rpki-client on console.sobornost.net