Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/91EB13B95B705981B3BCB0592522AFFA9B29460E.cer
File:                     91EB13B95B705981B3BCB0592522AFFA9B29460E.cer (raw, json)
Hash identifier:          cuR5j52+Y7NEvanwOp0h7Lsj9j2ZWh+FvYPkdLvjPh4=
Subject key identifier:   91:EB:13:B9:5B:70:59:81:B3:BC:B0:59:25:22:AF:FA:9B:29:46:0E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4D7DD843914D092B0BCEFFF9E369F3CF191D50F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/91EB13B95B705981B3BCB0592522AFFA9B29460E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 31 Mar 2025 19:18:30 +0000
Certificate not after:    Mon 30 Mar 2026 19:23:30 +0000
Subordinate resources:    AS: 264323
                          IP: 138.121.244.0/22
                          IP: 2804:2620::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7d:d8:43:91:4d:09:2b:0b:ce:ff:f9:e3:69:f3:cf:19:1d:50:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 31 19:18:30 2025 GMT
            Not After : Mar 30 19:23:30 2026 GMT
        Subject: CN=91EB13B95B705981B3BCB0592522AFFA9B29460E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a2:32:1d:70:e0:c6:99:fd:bf:32:2d:eb:c0:
                    ea:53:d9:62:99:5f:50:82:a0:53:39:8e:05:d6:4d:
                    a9:4d:b3:29:0c:39:bf:1a:a1:7a:89:f6:ec:3e:eb:
                    e5:2e:a5:c7:f8:41:9a:74:e3:37:d7:9a:8d:d8:43:
                    92:ad:2e:96:63:ef:04:ba:13:ab:aa:ae:f5:ce:27:
                    4c:e8:af:b5:8a:9e:a5:22:0e:d0:ab:12:67:45:60:
                    30:79:9c:fc:9a:bc:4d:15:fb:5c:af:dc:0c:e4:22:
                    8c:99:49:d2:b7:68:07:fe:00:5d:5d:10:47:28:51:
                    5b:45:ed:da:a7:4e:2a:ef:ad:79:a4:c3:f3:85:f4:
                    2d:90:e2:ea:d5:89:f2:04:d9:f6:48:67:8c:04:c9:
                    5b:8c:6c:df:74:0c:93:85:7d:16:12:f9:b7:52:1a:
                    81:46:b3:58:c0:34:09:46:7a:7e:5b:b9:63:04:98:
                    34:c2:2d:98:eb:a0:ae:11:67:89:b6:bf:7b:4f:91:
                    42:ce:70:ac:f4:d3:69:f6:78:2b:d2:4c:d8:52:01:
                    2c:0b:ff:a6:d7:a1:34:f2:52:f5:11:5f:84:e7:f4:
                    04:27:87:e5:1c:0a:6a:e2:ae:73:0f:14:ff:0e:de:
                    70:6a:37:d5:2b:2e:c9:5b:7a:5e:ef:2a:99:5a:0f:
                    d4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:EB:13:B9:5B:70:59:81:B3:BC:B0:59:25:22:AF:FA:9B:29:46:0E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5VKqUMsremMjLQYeDhKrhSjc92m3YnnkfzXBnzkgAzBN/0/91EB13B95B705981B3BCB0592522AFFA9B29460E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.244.0/22
                IPv6:
                  2804:2620::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264323

    Signature Algorithm: sha256WithRSAEncryption
         b5:7a:2e:90:c0:40:e0:8c:c3:3e:4a:cd:c8:e2:81:33:cd:44:
         3a:c3:21:7e:57:0b:64:29:7a:86:05:8e:c6:fb:c7:1b:69:76:
         b1:3e:90:1b:c4:fc:12:98:7a:43:ac:3d:9e:d6:ae:8f:ca:a8:
         29:ae:7e:9e:fe:92:66:4a:2c:8c:04:b8:53:b8:73:66:39:13:
         0f:81:64:01:c7:c6:5f:93:9a:87:2f:ae:cc:20:62:4f:49:cd:
         20:39:51:dd:57:48:b9:07:e8:f0:c3:df:f0:ce:6d:11:e9:dd:
         89:7e:6c:f2:b1:a0:76:8e:47:f7:7a:50:3b:f7:88:d4:ca:0a:
         b9:29:1c:a9:68:ca:72:42:a1:b8:72:fb:77:0e:ed:ed:5b:34:
         aa:c8:20:cb:78:40:8b:8e:f5:d7:ef:b0:8c:0e:c2:5e:29:0a:
         75:93:e5:8f:75:48:8e:e6:46:85:8f:84:4b:12:48:89:b0:2d:
         e0:ae:b8:a8:9b:5b:4e:6d:83:3b:fe:f7:d7:61:70:95:94:e4:
         3a:aa:26:6c:60:10:9e:bc:84:c6:db:50:52:6f:d1:97:01:d2:
         de:46:1d:62:9d:4b:6b:e8:d3:e8:13:05:2e:45:03:d1:44:46:
         c2:97:d7:be:e2:7a:dc:a1:a0:24:b5:8d:31:e4:c4:10:53:fa:
         38:e4:c2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:07:32 2025 by rpki-client on console.sobornost.net