Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/72FF2C75A3494405E4B503689E7DDD15482E3D3E.cer
File:                     72FF2C75A3494405E4B503689E7DDD15482E3D3E.cer (raw, json)
Hash identifier:          mOq5/VHlnjHQHXIooGdqcZ9dvRKzvs4+xTrJSEhczcE=
Subject key identifier:   72:FF:2C:75:A3:49:44:05:E4:B5:03:68:9E:7D:DD:15:48:2E:3D:3E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       63E8B2A4C484C7A2522E0714086D9B021515A032
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/72FF2C75A3494405E4B503689E7DDD15482E3D3E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 25 Apr 2025 20:36:49 +0000
Certificate not after:    Fri 24 Apr 2026 20:41:49 +0000
Subordinate resources:    AS: 269372
                          IP: 45.185.96.0/22
                          IP: 2804:639c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 22:25:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e8:b2:a4:c4:84:c7:a2:52:2e:07:14:08:6d:9b:02:15:15:a0:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 25 20:36:49 2025 GMT
            Not After : Apr 24 20:41:49 2026 GMT
        Subject: CN=72FF2C75A3494405E4B503689E7DDD15482E3D3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:88:c3:2b:53:07:76:38:ca:5a:16:5c:64:76:
                    4f:4a:be:06:4f:59:87:90:cf:fc:cf:e8:3e:ec:1d:
                    19:31:e0:f4:46:62:49:7c:cc:2e:69:b5:10:e0:01:
                    87:7b:77:e1:98:11:f1:59:f0:89:5a:91:51:cf:3e:
                    84:fe:a1:89:1b:8c:1c:9f:c5:e8:de:df:a8:99:8c:
                    bd:74:5c:b9:a3:1e:96:d9:fa:7a:2b:e2:dc:29:b9:
                    d1:d7:75:d6:f3:55:aa:ff:1a:5c:8e:b8:14:63:51:
                    78:f2:d1:ac:a0:17:97:be:15:81:f4:b2:1f:33:e0:
                    23:38:39:76:69:68:ff:67:ac:b0:13:7d:1d:00:78:
                    9c:8c:46:0b:74:09:0d:10:cc:3c:d2:20:23:a1:10:
                    cb:1d:3b:35:1c:d1:67:cf:9b:63:e1:ea:22:5c:9c:
                    6b:6c:ae:c3:ee:e6:53:f3:01:b2:8d:47:b7:f9:63:
                    f3:05:81:7c:e2:4b:02:8d:45:17:f1:f3:7d:03:c1:
                    1a:22:55:50:33:d3:c4:1b:17:78:9e:53:2c:eb:3a:
                    1c:2b:71:3e:de:e3:81:bd:0e:53:2d:69:84:aa:06:
                    45:29:5e:5f:12:09:c0:e0:63:0f:1b:24:4c:93:4c:
                    d7:d9:96:5a:8d:f6:8e:ea:72:13:9f:4c:0b:9c:f9:
                    1f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:FF:2C:75:A3:49:44:05:E4:B5:03:68:9E:7D:DD:15:48:2E:3D:3E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/0/72FF2C75A3494405E4B503689E7DDD15482E3D3E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.96.0/22
                IPv6:
                  2804:639c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269372

    Signature Algorithm: sha256WithRSAEncryption
         12:da:9e:12:f5:86:da:b7:1c:10:87:fe:1e:5b:54:95:45:fc:
         14:4f:8e:27:7c:f6:02:2e:2b:f0:b6:02:c6:4a:d1:6b:7f:d0:
         17:97:af:7b:44:da:d7:c0:82:6b:55:36:39:fe:5d:69:62:43:
         49:26:c2:0e:9d:b3:d9:59:0f:3a:e5:99:dd:35:a4:dd:a6:7e:
         f0:85:ae:f2:41:6d:9c:8f:40:2b:ef:2e:13:3f:b2:30:98:ea:
         6d:92:7d:a7:8d:23:34:4b:3a:71:c0:ff:94:6d:18:ba:e7:a0:
         74:39:e2:09:03:f2:ec:85:68:4c:f5:74:11:17:01:e0:db:c6:
         50:c4:ad:55:84:a9:e1:27:60:44:72:8e:9a:67:b4:ac:08:c4:
         20:f0:c6:cb:88:bb:65:68:96:b1:c2:21:c3:5d:10:7b:f1:ae:
         a8:ce:6d:c1:ed:25:06:ad:97:40:fe:88:5b:19:83:ee:2e:a1:
         52:06:a9:b0:ce:9a:c9:ec:36:53:4a:25:69:a3:7b:74:0f:20:
         74:77:9d:64:3c:1b:8e:57:18:de:f6:1c:7c:5e:54:b1:49:05:
         dc:de:56:25:c5:b1:ed:e8:9c:d7:a5:b0:bb:75:9f:7a:ea:6e:
         b8:61:1a:43:f8:f7:71:53:11:b7:79:d9:82:e2:0f:bd:53:a0:
         fc:8d:20:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:49:20 2025 by rpki-client on console.sobornost.net