Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.cer
File:                     8CA6945320EBC94436672D14C02A85C8DD0ACCB1.cer (raw, json)
Hash identifier:          8GG7mGgirxzeNdsFNWUFxWzkTaOFCTFJI4VDIgogA7o=
Subject key identifier:   8C:A6:94:53:20:EB:C9:44:36:67:2D:14:C0:2A:85:C8:DD:0A:CC:B1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       149501C2FB799B1FA61EC85E9D7D605D125EF4A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 09 Apr 2025 03:55:19 +0000
Certificate not after:    Wed 08 Apr 2026 04:00:19 +0000
Subordinate resources:    AS: 271677
                          IP: 170.231.224.0/22
                          IP: 2804:7f44::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:95:01:c2:fb:79:9b:1f:a6:1e:c8:5e:9d:7d:60:5d:12:5e:f4:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  9 03:55:19 2025 GMT
            Not After : Apr  8 04:00:19 2026 GMT
        Subject: CN=8CA6945320EBC94436672D14C02A85C8DD0ACCB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e9:d8:48:90:16:0b:cb:83:05:26:9f:d6:22:
                    22:01:7c:93:75:5d:dc:1b:bb:59:be:69:68:07:e5:
                    d7:89:3a:8d:6e:b7:bc:1f:45:b6:e9:30:0e:59:66:
                    4c:53:27:01:04:8a:b7:94:bc:a9:4b:06:6d:5d:19:
                    79:a1:64:44:e6:11:6c:ca:9c:42:fe:32:6e:4a:0d:
                    3c:6e:77:43:ad:99:70:8c:24:f8:76:fc:fa:9c:6b:
                    38:c3:d4:89:4b:28:b5:86:eb:06:cd:fe:00:2e:34:
                    58:75:8b:13:81:5d:f0:4f:59:63:31:d8:29:4d:15:
                    1b:3d:0b:62:b5:25:71:7e:2f:55:76:b0:01:db:0f:
                    dd:21:93:d6:34:00:f1:fd:ca:62:a3:f5:59:99:d6:
                    14:d3:49:1f:7f:6b:4a:a2:28:f2:18:9e:72:7a:72:
                    5b:ca:b2:c5:06:00:73:1c:95:64:d3:8b:00:cc:44:
                    cf:cf:ea:c2:f2:33:32:53:4e:2d:44:2d:95:d4:05:
                    e9:40:2c:51:2d:5c:99:f2:fb:ec:d7:7b:92:91:1d:
                    3e:70:ea:4b:62:2c:a4:3e:fe:fb:65:2e:1c:96:37:
                    2b:ae:06:0f:b6:29:66:cb:11:a2:7a:04:f7:ed:31:
                    8e:9b:3f:d1:43:8d:9d:b2:ff:04:00:4e:d9:f9:6d:
                    bc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:A6:94:53:20:EB:C9:44:36:67:2D:14:C0:2A:85:C8:DD:0A:CC:B1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2GgekmyPqF3YsQwrNkuTfN6xCX8eyVD5X5vMMr7TURHC/0/8CA6945320EBC94436672D14C02A85C8DD0ACCB1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.224.0/22
                IPv6:
                  2804:7f44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271677

    Signature Algorithm: sha256WithRSAEncryption
         64:26:41:81:dc:7f:0a:69:2e:8e:95:9d:8a:33:7e:42:8d:8b:
         62:88:c7:b5:55:6c:43:88:44:00:2e:27:4c:ba:6d:b3:81:60:
         99:cb:c6:cc:3b:4d:70:c5:b7:1e:5d:64:0c:fe:b2:85:8b:3b:
         de:5f:6d:79:01:3a:52:8d:26:33:b7:76:5f:24:49:7b:dd:2e:
         6a:08:4f:5b:29:90:f0:55:04:9e:5b:44:a4:8a:e1:6b:5c:c2:
         ec:13:df:1c:78:0a:47:c0:99:1f:34:08:fb:83:68:ed:75:1d:
         62:33:98:4a:f2:76:bd:7e:cf:9b:13:54:fc:56:a6:b0:f3:44:
         60:53:7e:f6:4a:54:f5:50:05:dd:9a:f0:4b:65:9d:ac:8b:6c:
         ab:2d:a7:b0:99:e5:10:71:b6:fd:45:35:5c:71:fd:81:89:49:
         6a:e1:a8:34:b4:ab:50:c3:1b:8f:98:45:f0:ec:da:ff:17:d6:
         dd:cf:7f:80:63:e8:f7:75:02:41:5d:8f:17:eb:24:41:dc:b0:
         f6:4f:f0:47:23:20:e6:17:18:70:6d:46:5e:ec:d5:ae:4c:5b:
         1b:8e:58:c3:6b:c9:c8:d6:53:3b:5d:48:bc:4d:b4:f6:3c:de:
         52:63:71:e8:67:54:b1:ef:a7:c6:ea:3c:26:32:1c:2e:0b:1f:
         fd:e2:a5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:38:17 2025 by rpki-client on console.sobornost.net