Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/70BE7503F48CCC14271EE75026EB08184789273F.cer
File:                     70BE7503F48CCC14271EE75026EB08184789273F.cer (raw, json)
Hash identifier:          H1SeeRnOGKUfpIXe3RvRHq3voweviIvQV3gwuhZdFBU=
Subject key identifier:   70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5DC2136DD4F91C78AFDFB16166B55542FE47208A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 15 Apr 2025 22:07:17 +0000
Certificate not after:    Tue 14 Apr 2026 22:12:17 +0000
Subordinate resources:    AS: 53181
                          IP: 45.164.112.0/22
                          IP: 138.204.64.0/22
                          IP: 191.241.64.0/20
                          IP: 201.33.160.0/20
                          IP: 2804:113c::/32
                          IP: 2804:53e4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 13:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:c2:13:6d:d4:f9:1c:78:af:df:b1:61:66:b5:55:42:fe:47:20:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 15 22:07:17 2025 GMT
            Not After : Apr 14 22:12:17 2026 GMT
        Subject: CN=70BE7503F48CCC14271EE75026EB08184789273F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:32:65:21:27:82:9d:a2:0b:c3:56:14:28:39:
                    5c:83:b6:b0:8a:4a:f9:32:9b:4b:13:c3:33:e3:9e:
                    58:9d:55:0b:a1:eb:48:9c:50:06:2f:28:1b:48:74:
                    f7:1b:8c:61:19:47:01:3f:05:0e:96:6e:52:70:5f:
                    a0:ee:2a:ab:12:06:65:56:92:ed:ea:1c:ff:00:5f:
                    33:ea:18:5e:7a:ee:98:66:45:20:b9:a1:31:1f:30:
                    01:6a:46:e1:eb:91:d7:79:af:87:b4:eb:34:e6:c0:
                    bf:5e:ca:e9:55:ed:43:76:77:d3:7d:ee:d9:f9:73:
                    ae:82:e8:fb:3f:e4:ff:a6:df:2c:35:51:9a:7d:84:
                    b9:50:c2:41:70:01:c0:0e:3c:d9:91:28:83:bd:88:
                    36:16:5d:20:24:7b:6f:94:ce:dd:a8:7e:56:6e:75:
                    2a:a6:32:63:d0:9d:be:6c:0e:ca:0a:a9:6a:50:2c:
                    12:51:70:6d:3b:d5:39:98:c3:86:52:b3:c3:63:81:
                    22:de:d7:bb:82:cf:8c:57:71:f6:b4:b7:e3:af:5c:
                    00:c0:2d:cb:ac:c1:bc:85:fe:a5:19:31:e9:57:f7:
                    21:0d:a3:e0:74:19:b5:ea:c1:d9:9f:a2:2f:6b:0c:
                    94:af:06:8b:25:46:48:7b:53:94:cc:b0:f4:29:ea:
                    ad:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                70:BE:75:03:F4:8C:CC:14:27:1E:E7:50:26:EB:08:18:47:89:27:3F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/0/70BE7503F48CCC14271EE75026EB08184789273F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.112.0/22
                  138.204.64.0/22
                  191.241.64.0/20
                  201.33.160.0/20
                IPv6:
                  2804:113c::/32
                  2804:53e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53181

    Signature Algorithm: sha256WithRSAEncryption
         91:c0:16:5f:5a:38:bf:ca:03:04:9e:76:c5:86:35:fb:c4:8b:
         a1:b6:fd:f6:a7:75:37:68:8b:a1:86:81:3c:9a:59:37:b7:a2:
         eb:52:dd:d3:7b:df:b6:48:e0:75:4e:f3:b7:14:a7:78:12:00:
         88:8c:70:e9:1b:cf:ff:2d:f2:e6:2a:1c:a0:ed:6c:97:b7:2a:
         a2:13:ce:12:18:b9:f1:9d:6f:20:22:75:f4:b3:b4:61:d7:f1:
         f8:e6:ec:75:0a:fa:e1:ae:d0:38:f1:59:fb:a0:38:0c:62:0e:
         1b:ab:68:9a:79:b0:0b:12:8e:ff:24:92:99:58:ae:1b:a5:6f:
         b6:00:0b:1f:8d:6c:df:88:f5:8d:f7:de:b7:e6:2d:f9:69:ad:
         1d:6c:09:49:6e:cc:8c:93:9c:e5:c8:48:90:97:5a:15:88:84:
         67:7f:a7:cb:9a:9d:f5:6d:f7:47:f9:6f:f5:17:30:48:c2:02:
         b1:b1:c9:ea:1c:a2:7b:f3:08:b5:20:26:32:d5:1c:44:30:e8:
         f2:98:a7:98:99:ff:5e:06:f3:48:c6:20:1f:bd:e2:3c:2a:b5:
         d9:16:1e:cc:b7:9a:99:69:13:d0:af:10:b1:3d:72:8f:33:3f:
         12:50:c4:46:9b:38:6c:35:95:50:51:dd:d9:0a:24:d8:6f:ac:
         53:f0:60:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:54:56 2025 by rpki-client on console.sobornost.net