Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7D4CD8E640887949B1B638A43A974ACAD59DB913.cer
File:                     7D4CD8E640887949B1B638A43A974ACAD59DB913.cer (raw, json)
Hash identifier:          3TzjlXXi3XI9QAOpdQq87D+twtTJj1RJ4+DcuUVlFVc=
Subject key identifier:   7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       192FC1F6DB1D5BAF5787B6095D349F1C0269A3E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Apr 2025 16:36:33 +0000
Certificate not after:    Mon 20 Apr 2026 16:41:33 +0000
Subordinate resources:    AS: 264422
                          IP: 131.221.172.0/22
                          IP: 2804:1e58::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 20:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:2f:c1:f6:db:1d:5b:af:57:87:b6:09:5d:34:9f:1c:02:69:a3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 21 16:36:33 2025 GMT
            Not After : Apr 20 16:41:33 2026 GMT
        Subject: CN=7D4CD8E640887949B1B638A43A974ACAD59DB913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5d:8f:84:1e:af:27:3e:7d:99:26:72:9f:f9:
                    58:98:4f:fa:4b:be:90:19:a2:f5:61:11:9e:2a:82:
                    70:ae:4e:32:3e:5b:41:ee:12:e0:46:9d:de:fe:e7:
                    28:1c:5b:ff:ef:db:dc:cd:0b:47:d4:10:3a:0a:ed:
                    53:5a:a8:8b:dd:e1:1a:86:b1:88:46:9a:57:98:1c:
                    b0:33:26:3b:91:2b:cd:a6:f0:38:cc:0f:08:9a:9a:
                    0c:e2:1f:bc:e0:b9:b8:5d:af:12:7c:35:bc:45:6a:
                    19:b4:60:ba:cc:fd:96:71:82:4c:86:c3:d9:75:93:
                    ad:31:fc:f6:99:92:8f:8c:88:bf:52:4f:58:17:24:
                    26:5d:2f:12:35:d3:54:df:eb:42:fc:88:92:5e:19:
                    9c:8f:b5:f1:40:68:8d:ce:c5:bd:d8:94:d7:b7:68:
                    8d:e1:9e:50:57:bf:77:0e:1b:c1:3a:77:93:df:06:
                    51:ce:1a:9d:c8:3c:d6:64:7d:50:96:99:b4:7e:ce:
                    45:20:03:66:6f:47:71:b9:98:39:99:d6:94:e5:86:
                    f6:5d:ed:95:5c:cc:0a:41:45:13:c5:6a:15:d8:e0:
                    f1:9f:19:d8:26:38:45:24:f3:e8:56:41:10:6f:13:
                    b3:11:5e:05:6d:c5:89:dc:19:51:6e:e6:a5:48:3f:
                    87:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:4C:D8:E6:40:88:79:49:B1:B6:38:A4:3A:97:4A:CA:D5:9D:B9:13
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/7D4CD8E640887949B1B638A43A974ACAD59DB913.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.172.0/22
                IPv6:
                  2804:1e58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264422

    Signature Algorithm: sha256WithRSAEncryption
         3c:1b:8b:cc:2d:fe:e9:f5:18:2d:59:72:02:c2:75:0c:0d:23:
         d5:07:c2:8c:d2:2c:53:b6:8c:d6:3e:1a:e6:0f:51:97:55:83:
         b6:17:d3:6f:fa:bf:02:98:2a:95:26:94:b9:95:48:9a:7b:bd:
         bb:ec:9c:99:9c:00:86:d7:01:34:0a:d7:c2:6b:93:a3:3a:a2:
         a2:b6:6b:e8:b3:15:54:7c:d7:7e:b4:08:a9:37:4f:eb:00:44:
         5b:69:5f:5a:96:93:5b:ec:36:ce:d3:88:21:bf:bd:25:69:04:
         4f:c8:e7:6a:97:66:a5:f9:a6:d6:83:d2:63:6c:f7:86:49:40:
         53:cd:b0:ae:6f:aa:b5:da:73:a6:ce:34:3a:7d:12:43:38:2a:
         c4:9b:ea:ef:8b:95:3e:10:41:3e:c6:14:ad:83:78:5b:7c:c1:
         82:90:d6:1e:73:74:e1:37:d5:eb:bf:8d:0f:03:65:7a:f2:6e:
         fe:25:02:5f:9e:ec:1f:98:53:47:97:77:df:89:a4:8e:46:9f:
         05:a5:70:76:bf:6c:83:7e:e6:08:08:cd:f6:fe:1c:9e:25:4f:
         66:b4:60:12:fc:6a:bf:44:0e:d7:b5:d8:5c:58:35:13:77:3f:
         88:99:06:d9:36:9b:08:79:26:81:fd:ea:2e:a8:8e:ea:81:b8:
         2e:9a:a0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:46 2025 by rpki-client on console.sobornost.net