Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.cer
File:                     AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.cer (raw, json)
Hash identifier:          e0op5dUXVWdM/MjS7GxreQwWKXcZPilS2ThQBBN5Dr0=
Subject key identifier:   AB:14:C8:86:4A:01:BE:3A:A6:1E:37:DC:A3:3A:5F:66:EF:83:14:3B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       498C2F0878FF5597F18CF433A498B9689AEB5C97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Eu2CEGAWLbHEC6wuTncqgjMVuQetsbAz45GypmwirttR/0/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Eu2CEGAWLbHEC6wuTncqgjMVuQetsbAz45GypmwirttR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 17 Apr 2025 02:56:25 +0000
Certificate not after:    Thu 16 Apr 2026 03:01:25 +0000
Subordinate resources:    AS: 267478
                          IP: 181.191.164.0/22
                          IP: 2804:421c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Apr 2025 20:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:8c:2f:08:78:ff:55:97:f1:8c:f4:33:a4:98:b9:68:9a:eb:5c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 17 02:56:25 2025 GMT
            Not After : Apr 16 03:01:25 2026 GMT
        Subject: CN=AB14C8864A01BE3AA61E37DCA33A5F66EF83143B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:84:28:4e:15:33:ac:c4:cd:1a:56:c1:bb:8b:
                    a4:2a:94:3e:c4:f3:8a:a0:7d:f9:73:44:0b:30:2f:
                    5d:ee:5b:a1:a5:4e:45:8b:8c:49:9b:b3:6d:27:51:
                    f5:ee:c3:9d:6d:a0:77:51:11:da:2f:86:0b:f3:e5:
                    0d:3d:2a:d4:10:87:2a:c4:d1:fb:30:2c:94:db:64:
                    22:23:05:0d:ad:23:b3:b5:a3:cf:a2:54:c1:23:51:
                    03:c7:3b:d8:1f:f6:62:ad:25:8c:19:a1:30:48:f6:
                    5b:71:f6:d0:03:b9:14:2e:30:f7:67:06:d0:32:73:
                    fc:c2:ae:b3:d2:18:76:f5:f9:8f:f5:e0:8e:5e:07:
                    23:70:a9:57:a0:9e:82:89:a2:ac:48:01:8d:87:d2:
                    4b:0f:77:e2:9b:91:fe:1e:1c:37:2c:75:b3:6b:a0:
                    b3:fb:e8:e0:69:a4:93:9b:e2:8d:74:a4:7b:af:68:
                    57:4b:55:22:3a:06:d9:ba:13:1b:65:90:c4:a8:89:
                    1b:8c:a7:de:50:e4:a0:c8:fb:b9:23:26:a5:28:48:
                    6b:96:58:86:8c:02:05:90:d6:d8:ff:d6:da:68:db:
                    0d:11:8d:2e:65:a2:50:01:ca:f2:92:c5:b0:d9:e5:
                    e0:8e:a8:84:e8:6c:84:fe:d0:95:61:bf:4e:cb:f7:
                    33:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AB:14:C8:86:4A:01:BE:3A:A6:1E:37:DC:A3:3A:5F:66:EF:83:14:3B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Eu2CEGAWLbHEC6wuTncqgjMVuQetsbAz45GypmwirttR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Eu2CEGAWLbHEC6wuTncqgjMVuQetsbAz45GypmwirttR/0/AB14C8864A01BE3AA61E37DCA33A5F66EF83143B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.164.0/22
                IPv6:
                  2804:421c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267478

    Signature Algorithm: sha256WithRSAEncryption
         2e:38:b5:ff:69:86:e3:a8:db:d8:1e:39:b0:02:85:cf:ab:9d:
         92:2e:11:e4:f4:93:b2:74:95:48:a9:a3:16:63:00:f7:9c:16:
         45:a6:6f:ef:9a:a6:8d:6c:4f:a5:d7:99:86:d9:00:e9:66:8d:
         44:4e:b8:dd:94:bd:68:45:27:a1:d8:de:aa:77:3f:09:a1:24:
         24:24:e2:c8:da:42:0e:5f:86:d4:4e:1b:49:a5:8a:cf:8d:6f:
         df:c7:ed:97:3a:41:ca:02:a8:9c:57:85:27:32:9f:c8:8a:42:
         69:76:4b:e8:45:48:9e:cc:a7:e5:b0:99:1f:9f:6a:51:40:f3:
         59:15:1f:f9:68:e7:b9:02:9b:cc:0c:57:0b:f9:86:27:af:8d:
         67:e8:33:a4:8a:c5:7a:6b:1b:db:a3:2a:0c:a1:f1:14:57:ce:
         4c:33:b7:db:df:ad:79:26:a2:4a:bf:6f:c2:16:58:e5:46:83:
         b1:10:aa:47:56:96:3d:66:36:bb:e7:49:83:d1:69:99:62:24:
         60:63:65:96:ec:34:40:b7:cf:a8:7a:32:97:10:bb:30:03:a4:
         0f:2c:9c:4f:92:c9:ad:70:c8:98:16:bf:4e:43:e5:b8:36:81:
         ec:f0:fe:e1:94:1e:c9:e4:28:ff:a5:ac:8c:75:e1:16:e8:56:
         b5:2b:c8:7e
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUSYwvCHj/VZfxjPQzpJi5aJrrXJcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA0MTcwMjU2MjVaFw0yNjA0MTYwMzAxMjVaMDMxMTAvBgNV
BAMTKEFCMTRDODg2NEEwMUJFM0FBNjFFMzdEQ0EzM0E1RjY2RUY4MzE0M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzhChOFTOsxM0aVsG7i6QqlD7E
84qgfflzRAswL13uW6GlTkWLjEmbs20nUfXuw51toHdREdovhgvz5Q09KtQQhyrE
0fswLJTbZCIjBQ2tI7O1o8+iVMEjUQPHO9gf9mKtJYwZoTBI9ltx9tADuRQuMPdn
BtAyc/zCrrPSGHb1+Y/14I5eByNwqVegnoKJoqxIAY2H0ksPd+Kbkf4eHDcsdbNr
oLP76OBppJOb4o10pHuvaFdLVSI6Btm6ExtlkMSoiRuMp95Q5KDI+7kjJqUoSGuW
WIaMAgWQ1tj/1tpo2w0RjS5lolAByvKSxbDZ5eCOqITobIT+0JVhv07L9zN5AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSrFMiGSgG+OqYe
N9yjOl9m74MUOzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRXUy
Q0VHQVdMYkhFQzZ3dVRuY3Fnak1WdVFldHNiQXo0NUd5cG13aXJ0dFIvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0V1
MkNFR0FXTGJIRUM2d3VUbmNxZ2pNVnVRZXRzYkF6NDVHeXBtd2lydHRSLzAvQUIx
NEM4ODY0QTAxQkUzQUE2MUUzN0RDQTMzQTVGNjZFRjgzMTQzQi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCtb+kMA0EAgACMAcDBQAoBEIcMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQU1jANBgkqhkiG9w0BAQsFAAOCAQEALji1/2mG46jb2B45
sAKFz6udki4R5PSTsnSVSKmjFmMA95wWRaZv75qmjWxPpdeZhtkA6WaNRE643ZS9
aEUnodjeqnc/CaEkJCTiyNpCDl+G1E4bSaWKz41v38ftlzpBygKonFeFJzKfyIpC
aXZL6EVInsyn5bCZH59qUUDzWRUf+WjnuQKbzAxXC/mGJ6+NZ+gzpIrFemsb26Mq
DKHxFFfOTDO329+teSaiSr9vwhZY5UaDsRCqR1aWPWY2u+dJg9FpmWIkYGNlluw0
QLfPqHoylxC7MAOkDyycT5LJrXDImBa/TkPluDaB7PD+4ZQeyeQo/6WsjHXhFuhW
tSvIfg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:55 2025 by rpki-client on console.sobornost.net