Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer
File:                     CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.cer (raw, json)
Hash identifier:          OssgKYojMPalsA9XFEfW2hJw7Q6IHEEWAj60QSg+SNA=
Subject key identifier:   CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1203BACFB3D0DB000E3D4ABECCA72C29B601CE2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 16 Apr 2025 13:50:28 +0000
Certificate not after:    Wed 15 Apr 2026 13:55:28 +0000
Subordinate resources:    AS: 262316
                          IP: 131.221.200.0/22
                          IP: 138.117.192.0/22
                          IP: 167.250.152.0/22
                          IP: 177.74.64.0/20
                          IP: 177.124.48.0/22
                          IP: 2804:7c0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:03:ba:cf:b3:d0:db:00:0e:3d:4a:be:cc:a7:2c:29:b6:01:ce:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 16 13:50:28 2025 GMT
            Not After : Apr 15 13:55:28 2026 GMT
        Subject: CN=CB9260C7ABCD7C89119B0F61C609E31389DEB1DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f3:20:fb:33:a0:39:72:9d:25:fc:65:f3:b5:
                    84:4a:d9:d6:3a:28:18:a3:f6:e2:e1:2b:d8:2e:f7:
                    c8:79:ac:21:93:46:78:d2:af:c7:31:73:bc:ea:5d:
                    6f:f3:e4:dc:8e:50:5a:4c:e9:1a:46:59:07:cf:24:
                    ea:86:24:52:8f:db:37:fa:bb:6c:34:71:0c:16:75:
                    9d:27:99:f0:c2:07:61:a7:92:9c:0e:60:5f:5e:d7:
                    71:a5:bf:ac:74:df:ca:48:d5:ae:f6:26:9a:73:62:
                    2b:b5:3c:e6:f2:de:ab:16:db:6d:d3:16:f1:5e:28:
                    5e:2a:76:70:ce:bc:9b:d8:86:5c:77:d9:00:da:7d:
                    4e:b2:7b:c2:60:bc:cb:a5:20:76:13:cc:2a:32:bd:
                    71:d5:ee:22:cc:f8:05:2b:23:e4:23:5c:0e:7b:0e:
                    ed:37:4e:e8:d7:37:fb:89:bc:29:7a:37:7b:b5:8a:
                    5b:57:65:49:23:c9:4a:61:9b:92:b5:7a:90:47:ed:
                    f5:c6:8d:64:cf:d6:f1:7d:4e:a0:44:19:d6:5e:42:
                    51:ca:a8:b6:4f:f1:94:d0:7b:f4:d4:d5:3a:47:55:
                    35:4d:08:60:f4:76:bf:ee:e1:38:e6:c4:f1:e4:61:
                    8a:ef:cf:e5:ad:42:2f:cb:73:63:50:6b:a1:49:4a:
                    9b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:92:60:C7:AB:CD:7C:89:11:9B:0F:61:C6:09:E3:13:89:DE:B1:DE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CB9260C7ABCD7C89119B0F61C609E31389DEB1DE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.200.0/22
                  138.117.192.0/22
                  167.250.152.0/22
                  177.74.64.0/20
                  177.124.48.0/22
                IPv6:
                  2804:7c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262316

    Signature Algorithm: sha256WithRSAEncryption
         69:48:ae:52:56:92:1a:3c:36:73:05:4d:ac:a4:7a:13:c2:3d:
         bc:8c:62:bf:40:2a:6e:5d:c6:16:e6:88:4b:f1:e8:7e:ec:b9:
         4f:43:31:a5:4c:91:7b:a7:56:da:6b:b8:eb:46:5d:8b:6a:22:
         f4:a9:4c:f1:8c:48:84:72:0a:fc:19:2b:1b:53:02:83:ad:ab:
         a2:17:a0:15:a3:21:36:13:1e:0c:35:51:7d:f4:fc:b0:07:97:
         10:03:ef:44:b0:82:15:a9:c9:62:7e:d6:3f:ec:8c:a6:24:34:
         e3:b0:71:26:de:3f:cd:d0:f2:e2:b6:45:d1:16:fd:db:a0:b0:
         56:74:ae:99:6d:61:31:c2:de:f0:f9:21:5c:37:b0:7d:eb:46:
         3c:c3:a6:48:90:0c:2c:05:d4:86:eb:be:c8:2d:0e:79:9f:1b:
         ca:2a:53:f8:38:0e:6b:3b:20:e1:c3:3d:35:1a:65:b1:01:64:
         66:8f:70:b1:b5:1d:6b:3b:19:30:12:e0:9c:5a:55:48:dd:94:
         fe:49:01:5d:a4:30:15:61:25:71:33:1f:fe:f7:73:ce:38:2f:
         f9:71:95:f6:49:66:8e:98:42:85:d6:42:ff:71:a5:51:9c:3a:
         11:cd:80:c5:a5:10:4e:e9:a3:c1:ee:97:09:2c:ba:a2:9d:ad:
         0b:6d:ea:16
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUEgO6z7PQ2wAOPUq+zKcsKbYBziowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA0MTYxMzUwMjhaFw0yNjA0MTUxMzU1MjhaMDMxMTAvBgNV
BAMTKENCOTI2MEM3QUJDRDdDODkxMTlCMEY2MUM2MDlFMzEzODlERUIxREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY8yD7M6A5cp0l/GXztYRK2dY6
KBij9uLhK9gu98h5rCGTRnjSr8cxc7zqXW/z5NyOUFpM6RpGWQfPJOqGJFKP2zf6
u2w0cQwWdZ0nmfDCB2GnkpwOYF9e13Glv6x038pI1a72JppzYiu1POby3qsW223T
FvFeKF4qdnDOvJvYhlx32QDafU6ye8JgvMulIHYTzCoyvXHV7iLM+AUrI+QjXA57
Du03TujXN/uJvCl6N3u1iltXZUkjyUphm5K1epBH7fXGjWTP1vF9TqBEGdZeQlHK
qLZP8ZTQe/TU1TpHVTVNCGD0dr/u4TjmxPHkYYrvz+WtQi/Lc2NQa6FJSpsrAgMB
AAGjggNSMIIDTjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTLkmDHq818iRGb
D2HGCeMTid6x3jAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vODhT
cjZrNWc1bnkxdndkaXdoOHlmTURTMkVlclc0NXBaZERob1h1VXQyS2EvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzg4
U3I2azVnNW55MXZ3ZGl3aDh5Zk1EUzJFZXJXNDVwWmREaG9YdVV0MkthLzAvQ0I5
MjYwQzdBQkNEN0M4OTExOUIwRjYxQzYwOUUzMTM4OURFQjFERS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEH
AQH/BDcwNTAkBAIAATAeAwQCg93IAwQCinXAAwQCp/qYAwQEsUpAAwQCsXwwMA0E
AgACMAcDBQAoBAfAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQArDANBgkqhkiG
9w0BAQsFAAOCAQEAaUiuUlaSGjw2cwVNrKR6E8I9vIxiv0Aqbl3GFuaIS/Hofuy5
T0MxpUyRe6dW2mu460Zdi2oi9KlM8YxIhHIK/BkrG1MCg62rohegFaMhNhMeDDVR
ffT8sAeXEAPvRLCCFanJYn7WP+yMpiQ047BxJt4/zdDy4rZF0Rb926CwVnSumW1h
McLe8PkhXDewfetGPMOmSJAMLAXUhuu+yC0OeZ8byipT+DgOazsg4cM9NRplsQFk
Zo9wsbUdazsZMBLgnFpVSN2U/kkBXaQwFWElcTMf/vdzzjgv+XGV9klmjphChdZC
/3GlUZw6Ec2AxaUQTumjwe6XCSy6op2tC23qFg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:07:45 2025 by rpki-client on console.sobornost.net