Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer
File:                     DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.cer (raw, json)
Hash identifier:          z9NZOSV0m/WDUdREg408I86RDjdO/cMVZEBunwB2nm0=
Subject key identifier:   DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7EACA94F3E0841C6171B36D901D1EA6C7F27B822
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 17 Apr 2025 21:05:11 +0000
Certificate not after:    Thu 16 Apr 2026 21:10:11 +0000
Subordinate resources:    AS: 61728
                          IP: 131.72.56.0/22
                          IP: 2804:1b70::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ac:a9:4f:3e:08:41:c6:17:1b:36:d9:01:d1:ea:6c:7f:27:b8:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 17 21:05:11 2025 GMT
            Not After : Apr 16 21:10:11 2026 GMT
        Subject: CN=DA065D6ABFEB300D2C42384FE35CBF5F39D05F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e7:63:a7:e2:95:69:7b:5e:a0:3e:f6:83:c1:
                    5b:12:48:7c:9f:a4:5e:fe:f4:77:9f:b7:b9:50:f0:
                    ce:91:ca:7b:e2:89:93:fb:c4:b1:3a:da:0b:74:a8:
                    0e:f8:de:94:b1:3c:0f:d3:9d:5c:9f:64:3a:80:36:
                    33:e2:22:65:46:30:68:d3:c1:95:30:aa:b6:d5:cb:
                    4d:c2:60:ae:ac:20:a2:23:7e:6c:f6:b9:df:4d:31:
                    dc:97:31:5f:12:eb:75:11:94:8e:ee:f5:54:65:a6:
                    67:c4:7c:ac:45:46:35:da:3d:bc:b8:63:e6:a2:39:
                    03:5a:de:06:97:b9:32:4f:85:10:f3:14:5f:3b:15:
                    73:4c:1c:a9:37:5c:a3:ad:3a:9f:33:c3:91:fb:f2:
                    81:72:54:f4:ca:f1:1f:42:72:96:27:10:72:43:89:
                    32:12:e4:46:ce:63:c0:82:07:0f:ff:a2:c6:4c:18:
                    b4:8a:fd:2a:43:82:d2:eb:57:9e:6a:bf:a7:1c:10:
                    48:c2:73:6b:23:d7:f9:e5:11:e2:63:e7:e5:6e:08:
                    8a:b3:f7:a8:dd:a6:d4:20:19:0a:f7:ca:cb:ff:b1:
                    2a:87:cb:d3:08:6c:46:17:e1:8f:2d:bb:0b:3d:85:
                    e1:41:c3:dc:bc:b7:b0:35:10:52:21:9c:1c:b7:ab:
                    4a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:06:5D:6A:BF:EB:30:0D:2C:42:38:4F:E3:5C:BF:5F:39:D0:5F:13
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ddn6kSfJZHu4zBbxsQBLB2d8Bf7qLzppcG9A3dRYwo1A/0/DA065D6ABFEB300D2C42384FE35CBF5F39D05F13.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.56.0/22
                IPv6:
                  2804:1b70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61728

    Signature Algorithm: sha256WithRSAEncryption
         56:b7:52:f6:80:77:c2:ea:9a:6b:77:44:3f:25:4b:2d:33:f7:
         4d:44:f1:be:6d:58:20:72:70:a9:af:5f:ed:30:4b:bf:1e:55:
         b9:b9:12:91:31:4a:af:5f:cc:79:1b:f0:34:67:91:4c:73:f3:
         5c:4f:6e:16:80:f9:d7:2c:e4:fa:0b:3b:46:d4:d7:a1:c9:6b:
         5f:48:93:a4:cf:16:3f:4f:c7:63:bc:99:75:d4:c5:1c:9d:4c:
         66:22:60:c0:ef:c4:73:9e:74:29:13:f7:67:fb:d1:28:3b:9f:
         47:be:58:63:02:d5:b3:9f:58:15:61:6b:eb:9d:6d:86:97:4f:
         92:8b:dd:72:78:64:46:a7:91:71:5a:c4:8b:18:5b:7a:db:8e:
         cf:c4:2d:b1:d5:8c:6c:70:78:85:0a:95:b6:ad:e2:65:e2:3c:
         f3:fe:b0:d6:94:93:7b:7c:1c:a9:5c:2e:55:d0:71:d1:c3:4f:
         ca:62:72:e8:be:7d:78:69:d9:98:95:11:79:a0:6c:3f:d4:76:
         08:1d:36:86:b0:03:85:ae:f7:14:3b:25:21:91:13:c6:8f:0b:
         b6:f0:ad:32:28:d5:a8:58:3e:68:75:57:43:35:c4:10:f6:d0:
         93:50:64:d5:6a:06:d5:e6:e2:c9:91:b7:37:10:23:6d:bd:99:
         23:44:a7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:47:25 2025 by rpki-client on console.sobornost.net