Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8C9489B5F162370B3CD6AE611F82567891AA2F79.cer
File:                     8C9489B5F162370B3CD6AE611F82567891AA2F79.cer (raw, json)
Hash identifier:          zZtnn4I14bNO8Jd9ge1c0Sj0t2GaqC7XmHSABiCCuU8=
Subject key identifier:   8C:94:89:B5:F1:62:37:0B:3C:D6:AE:61:1F:82:56:78:91:AA:2F:79
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       288C6DB642D3BB6AD74C32B497FE81955AACFD0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 23 Apr 2025 14:44:37 +0000
Certificate not after:    Wed 22 Apr 2026 14:49:37 +0000
Subordinate resources:    AS: 268528
                          IP: 45.162.216.0/22
                          IP: 2804:5298::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:8c:6d:b6:42:d3:bb:6a:d7:4c:32:b4:97:fe:81:95:5a:ac:fd:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 23 14:44:37 2025 GMT
            Not After : Apr 22 14:49:37 2026 GMT
        Subject: CN=8C9489B5F162370B3CD6AE611F82567891AA2F79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d8:91:ae:06:15:82:99:4f:a8:90:c0:60:a2:
                    1b:e5:d4:72:9f:5e:d3:1b:5b:4d:27:d7:95:b7:05:
                    97:2e:4a:aa:7a:cd:22:e6:66:b8:9a:55:88:23:cd:
                    eb:d8:f2:37:74:93:8a:6f:a8:27:5e:b8:08:fd:d6:
                    19:98:93:94:08:d7:20:f1:a9:72:4e:67:1c:a5:2d:
                    db:ea:ac:bb:57:19:36:3d:7b:f0:2d:f4:d9:0c:42:
                    91:d7:ee:b3:2a:74:da:8e:f0:74:56:53:26:7a:2f:
                    dd:01:1a:83:9f:ad:47:92:c4:23:c9:5a:b6:09:08:
                    94:a4:76:0c:0e:95:ae:c5:06:48:75:7a:44:1b:6f:
                    fe:bd:5b:03:d8:b2:ce:62:ae:b0:ba:c6:82:a0:cc:
                    e0:d4:a1:38:70:f8:45:f3:03:72:c8:93:2d:60:67:
                    43:61:02:27:5e:2a:6b:e5:b5:fb:04:4a:60:f1:cb:
                    0e:9b:1c:9a:a8:19:a5:31:e3:38:8d:bd:2b:de:82:
                    9f:41:de:1a:97:74:6b:06:39:e6:22:19:37:20:76:
                    1b:93:3d:41:36:4a:4d:50:4b:45:c8:fe:c3:37:e4:
                    0c:21:3a:10:ed:ce:a1:2d:73:56:c2:c8:63:ca:c4:
                    b3:58:c1:b6:0b:5c:ad:cf:98:c9:66:7e:ee:cb:de:
                    5a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:94:89:B5:F1:62:37:0B:3C:D6:AE:61:1F:82:56:78:91:AA:2F:79
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.216.0/22
                IPv6:
                  2804:5298::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268528

    Signature Algorithm: sha256WithRSAEncryption
         57:c0:d6:c8:47:83:4a:c4:36:df:c2:fa:55:56:1b:da:8f:44:
         fc:86:c5:93:dd:6e:25:03:d6:a0:c7:16:7c:29:0d:0a:e3:ed:
         17:7e:99:f2:69:45:e8:c4:a4:3c:8b:71:98:41:f9:d2:93:f1:
         0a:d6:a2:9c:65:c3:17:72:43:cf:e5:e6:e7:87:f0:19:41:6d:
         f3:8a:46:14:3e:9e:80:13:68:5a:5f:d1:44:53:12:68:e0:32:
         5f:e8:4b:ee:0b:bb:b1:ac:81:e7:9e:bc:11:9f:63:de:fb:9a:
         06:cf:7f:d5:aa:b3:26:0a:b0:91:5b:f3:f4:7f:1c:20:2e:f0:
         f7:0b:60:d9:c4:38:cf:49:49:68:30:0a:6f:99:57:66:8a:69:
         7e:27:f7:16:4d:5e:40:bb:e1:59:10:02:c8:fb:85:bb:ef:a1:
         4c:25:fc:b0:0a:23:9f:0b:54:cc:6a:71:e1:a0:f5:a2:36:83:
         e7:03:b0:ed:6a:74:80:25:78:f8:40:89:a8:99:ad:33:a0:69:
         88:34:43:aa:73:be:08:73:80:bd:8b:3b:0b:71:d4:e5:24:78:
         9a:d7:4e:e1:a5:32:a6:81:d6:97:63:0c:91:4c:44:e8:54:ec:
         65:cf:9d:62:d1:2f:08:28:bd:06:54:de:1d:02:6d:5e:c2:12:
         d3:46:7f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:07:31 2025 by rpki-client on console.sobornost.net