Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F5680082B28CE24DCF2FF22AD29F12F9E38037CB.cer
File:                     F5680082B28CE24DCF2FF22AD29F12F9E38037CB.cer (raw, json)
Hash identifier:          aM/y/e5xup1g1i/6p7gfzN1IVofnH2u6ltK1klt3Yt8=
Subject key identifier:   F5:68:00:82:B2:8C:E2:4D:CF:2F:F2:2A:D2:9F:12:F9:E3:80:37:CB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       53A7F38CEFFE167406ADC2DBE1870DBADA6B5B78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7h3T8795y6nSRtVumAU3JnZsBbhq7C7yQqPpgR7Tg7zY/0/F5680082B28CE24DCF2FF22AD29F12F9E38037CB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7h3T8795y6nSRtVumAU3JnZsBbhq7C7yQqPpgR7Tg7zY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 24 Apr 2025 11:24:05 +0000
Certificate not after:    Thu 23 Apr 2026 11:29:05 +0000
Subordinate resources:    AS: 267161
                          IP: 45.230.136.0/22
                          IP: 2804:490c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a7:f3:8c:ef:fe:16:74:06:ad:c2:db:e1:87:0d:ba:da:6b:5b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 24 11:24:05 2025 GMT
            Not After : Apr 23 11:29:05 2026 GMT
        Subject: CN=F5680082B28CE24DCF2FF22AD29F12F9E38037CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c3:23:ba:d2:a9:27:98:6e:ed:02:73:df:b9:
                    4a:23:29:b2:9e:86:47:7c:4c:b2:69:74:c1:f5:f8:
                    ad:76:65:ee:3e:23:2b:9d:6c:93:da:5a:51:c0:04:
                    bc:06:a6:84:ec:a2:2c:88:77:cc:cb:c8:ca:69:5b:
                    65:f9:e0:28:0f:0a:cf:7c:20:f5:e7:51:ce:2c:d5:
                    7e:a6:24:24:9f:83:fa:2f:75:9f:53:ee:84:97:51:
                    17:7b:98:d5:24:b3:ed:f6:82:03:72:97:4c:91:2f:
                    23:3a:57:43:6a:e3:7a:73:33:8c:80:10:b7:25:5d:
                    aa:e6:52:e7:7f:d0:57:f6:0a:f7:4d:c5:67:4b:7c:
                    08:6c:a0:23:c4:1c:ce:eb:54:49:79:db:6b:fa:42:
                    58:3f:6e:a5:c0:1d:68:0b:33:42:c9:c1:d8:b3:69:
                    e2:23:ec:fa:64:a6:d5:e5:71:e7:44:30:e9:25:f0:
                    4c:84:a5:ce:58:00:28:f4:6e:bc:bc:01:28:ff:7b:
                    40:ba:e6:ae:bd:7f:21:4c:b6:23:69:70:0f:03:8c:
                    15:16:77:fd:87:39:ab:41:5e:86:e5:86:d8:58:70:
                    15:aa:bb:57:d1:43:4c:c9:1a:70:dd:f8:ae:2e:c8:
                    dd:17:b8:47:c1:7f:58:84:3b:eb:d2:c6:29:e4:5a:
                    94:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:68:00:82:B2:8C:E2:4D:CF:2F:F2:2A:D2:9F:12:F9:E3:80:37:CB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7h3T8795y6nSRtVumAU3JnZsBbhq7C7yQqPpgR7Tg7zY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7h3T8795y6nSRtVumAU3JnZsBbhq7C7yQqPpgR7Tg7zY/0/F5680082B28CE24DCF2FF22AD29F12F9E38037CB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.136.0/22
                IPv6:
                  2804:490c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267161

    Signature Algorithm: sha256WithRSAEncryption
         04:87:86:e0:29:97:9a:68:25:7c:e0:69:3e:fb:98:b7:a4:ba:
         87:1c:eb:7c:50:b9:30:aa:cd:3d:87:29:76:c0:71:7d:3f:71:
         87:84:21:70:7b:ed:c3:d4:3e:2d:ea:e0:66:16:08:22:dc:26:
         d4:be:9b:eb:3d:12:e8:8e:fc:04:9f:ee:3c:79:10:2e:92:bb:
         f1:87:a9:21:bc:77:05:ed:5f:20:41:a5:6a:4d:5f:0d:0c:da:
         8b:00:74:2d:a8:71:be:c5:52:18:db:42:d7:8b:a8:54:d5:85:
         b1:f4:3b:44:17:ac:26:70:42:70:74:59:a9:51:6e:d4:53:39:
         ac:86:c3:ea:5a:86:78:b6:3c:8f:bb:96:b2:97:d2:74:1b:4b:
         33:79:70:a3:db:37:f3:ca:86:8b:03:98:91:3c:92:ac:56:21:
         5b:2e:f4:c2:f5:8d:6d:4c:3a:59:6a:10:09:29:0c:9a:30:ca:
         b4:ee:4f:a1:53:5a:bb:a1:bb:b4:f4:1d:47:9c:28:41:3f:f3:
         84:3c:e5:51:98:71:0a:1d:b7:25:12:9c:c9:07:99:f1:58:29:
         57:23:d7:1e:2e:ba:1d:3c:8f:35:dd:7e:54:95:5f:1d:28:03:
         5b:0e:77:a3:10:d5:da:9b:57:b0:bf:e4:b4:3f:ae:fe:e5:ae:
         eb:96:01:fb
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUU6fzjO/+FnQGrcLb4YcNutprW3gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA0MjQxMTI0MDVaFw0yNjA0MjMxMTI5MDVaMDMxMTAvBgNV
BAMTKEY1NjgwMDgyQjI4Q0UyNERDRjJGRjIyQUQyOUYxMkY5RTM4MDM3Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWwyO60qknmG7tAnPfuUojKbKe
hkd8TLJpdMH1+K12Ze4+IyudbJPaWlHABLwGpoTsoiyId8zLyMppW2X54CgPCs98
IPXnUc4s1X6mJCSfg/ovdZ9T7oSXURd7mNUks+32ggNyl0yRLyM6V0Nq43pzM4yA
ELclXarmUud/0Ff2CvdNxWdLfAhsoCPEHM7rVEl522v6Qlg/bqXAHWgLM0LJwdiz
aeIj7PpkptXlcedEMOkl8EyEpc5YACj0bry8ASj/e0C65q69fyFMtiNpcA8DjBUW
d/2HOatBXoblhthYcBWqu1fRQ0zJGnDd+K4uyN0XuEfBf1iEO+vSxinkWpRLAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT1aACCsoziTc8v
8irSnxL544A3yzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN2gz
VDg3OTV5Nm5TUnRWdW1BVTNKblpzQmJocTdDN3lRcVBwZ1I3VGc3elkvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdo
M1Q4Nzk1eTZuU1J0VnVtQVUzSm5ac0JiaHE3Qzd5UXFQcGdSN1RnN3pZLzAvRjU2
ODAwODJCMjhDRTI0RENGMkZGMjJBRDI5RjEyRjlFMzgwMzdDQi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLeaIMA0EAgACMAcDBQAoBEkMMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQTmTANBgkqhkiG9w0BAQsFAAOCAQEABIeG4CmXmmglfOBp
PvuYt6S6hxzrfFC5MKrNPYcpdsBxfT9xh4QhcHvtw9Q+LergZhYIItwm1L6b6z0S
6I78BJ/uPHkQLpK78YepIbx3Be1fIEGlak1fDQzaiwB0LahxvsVSGNtC14uoVNWF
sfQ7RBesJnBCcHRZqVFu1FM5rIbD6lqGeLY8j7uWspfSdBtLM3lwo9s388qGiwOY
kTySrFYhWy70wvWNbUw6WWoQCSkMmjDKtO5PoVNau6G7tPQdR5woQT/zhDzlUZhx
Ch23JRKcyQeZ8VgpVyPXHi66HTyPNd1+VJVfHSgDWw53oxDV2ptXsL/ktD+u/uWu
65YB+w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:47:31 2025 by rpki-client on console.sobornost.net