Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EA345BA603ECE3DC78BD25C614FE3BB450F4C4C4.cer
File:                     EA345BA603ECE3DC78BD25C614FE3BB450F4C4C4.cer (raw, json)
Hash identifier:          x1fROyX4GmY8KNlvlet6E/848VLU4Wzv5lwU1AKo2Tk=
Subject key identifier:   EA:34:5B:A6:03:EC:E3:DC:78:BD:25:C6:14:FE:3B:B4:50:F4:C4:C4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0FC0872BFA23FB9A576EC38D532F7D718862C1F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/EA345BA603ECE3DC78BD25C614FE3BB450F4C4C4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 11 Apr 2025 18:59:45 +0000
Certificate not after:    Fri 10 Apr 2026 19:04:45 +0000
Subordinate resources:    AS: 270443
                          IP: 200.26.248.0/22
                          IP: 2804:6c10::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 09:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c0:87:2b:fa:23:fb:9a:57:6e:c3:8d:53:2f:7d:71:88:62:c1:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 11 18:59:45 2025 GMT
            Not After : Apr 10 19:04:45 2026 GMT
        Subject: CN=EA345BA603ECE3DC78BD25C614FE3BB450F4C4C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:15:8d:bf:65:81:71:eb:3e:db:79:63:3d:a9:
                    f1:2a:31:8d:01:03:8c:40:45:d9:8d:11:e4:c0:fc:
                    1f:37:5e:e8:24:ef:d6:ee:52:e6:4d:41:99:3d:7c:
                    aa:4a:db:d9:11:e8:13:33:d9:e9:70:a5:de:ec:49:
                    57:fb:76:8a:ca:7c:ba:0c:7e:b6:bb:4e:b5:d3:d4:
                    ed:69:42:ee:67:ba:3b:d1:ab:8d:6c:3f:0c:1e:a8:
                    21:df:2e:6d:e0:36:a8:55:fc:0b:34:dc:61:8b:41:
                    46:be:b8:0e:3c:f1:b7:4c:fa:ec:1c:1a:9f:2d:f2:
                    7b:22:f5:77:df:59:d0:ad:26:ab:3a:71:64:ed:32:
                    6d:94:0e:18:7b:6b:3b:3b:31:c6:b6:a9:ac:43:cc:
                    22:59:78:39:f6:35:f0:14:a3:2b:ea:26:68:3f:de:
                    ab:9e:8f:9d:b8:b5:92:a8:e0:d0:f7:51:29:7d:ab:
                    7a:ea:ec:8e:a2:4b:da:2d:08:56:5a:ee:30:7e:19:
                    ec:5e:38:6d:4d:38:21:d5:39:ce:32:7b:a8:02:2b:
                    40:d3:4e:ed:2c:79:2e:13:1e:1f:5c:e3:5a:a0:eb:
                    01:93:dd:c9:8b:c4:22:8b:2a:f5:f2:46:cf:4a:19:
                    f2:77:10:9e:e8:64:4c:ea:a2:9a:95:cc:de:7e:5b:
                    e0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:34:5B:A6:03:EC:E3:DC:78:BD:25:C6:14:FE:3B:B4:50:F4:C4:C4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BaCJ7joF74gUTmVwPLrK4jpGGtvaNyKgPTNVZy7GEui6/0/EA345BA603ECE3DC78BD25C614FE3BB450F4C4C4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.248.0/22
                IPv6:
                  2804:6c10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270443

    Signature Algorithm: sha256WithRSAEncryption
         0b:cf:b2:26:7c:91:4b:25:1c:57:58:ac:b1:31:81:2e:5e:d5:
         9c:eb:a6:56:13:82:a4:0e:4d:fa:d9:56:71:5a:f0:75:f5:2c:
         1a:b0:f4:8a:cd:be:7e:76:66:0d:de:1d:1b:84:7e:cc:c9:77:
         95:ef:47:bd:99:d7:c8:e8:10:aa:ee:22:86:a7:a3:c6:03:c5:
         2e:ce:b8:d2:79:de:62:d2:3c:9f:ec:56:51:f4:e4:cb:60:e1:
         a0:cd:8c:1e:3a:4e:66:90:67:44:05:03:89:1b:8f:63:d1:05:
         ab:d1:27:a7:f8:56:a2:ea:26:09:de:ff:c7:42:00:b0:a6:59:
         f2:3a:7b:8a:04:7b:4e:5b:53:e4:db:f0:cf:95:16:bd:64:4d:
         b5:22:e3:8e:23:db:c4:14:f8:67:b6:f2:35:8c:30:00:7f:cf:
         20:e3:b2:28:55:94:d2:f1:f9:1c:8d:0a:a3:83:d4:c4:fd:1d:
         9e:0b:9f:93:67:dc:25:eb:b9:1c:19:35:d2:94:74:39:2b:95:
         38:d4:93:e0:4e:30:9f:1a:94:d2:c3:0a:3a:b4:5e:04:6d:9d:
         f2:fc:e4:58:83:78:17:ad:10:e1:c9:a9:b9:26:72:83:00:f0:
         73:cc:98:0e:f9:2b:8e:f5:80:88:c9:d2:6b:37:f0:6f:65:2f:
         fb:ae:32:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:03 2025 by rpki-client on console.sobornost.net