Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FD4F4B25972C4E648507F9D49CACC2CF95322DFF.cer
File:                     FD4F4B25972C4E648507F9D49CACC2CF95322DFF.cer (raw, json)
Hash identifier:          r0mbRqOxKc18YP4UuGoAyRZvANNnN2vmYJ3k4TzOjUw=
Subject key identifier:   FD:4F:4B:25:97:2C:4E:64:85:07:F9:D4:9C:AC:C2:CF:95:32:2D:FF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       068C07F41919E866B67E7B03876525194F8C8589
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/FD4F4B25972C4E648507F9D49CACC2CF95322DFF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 01 Apr 2025 16:44:11 +0000
Certificate not after:    Tue 31 Mar 2026 16:49:11 +0000
Subordinate resources:    AS: 273638
                          IP: 2804:89f8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:26:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8c:07:f4:19:19:e8:66:b6:7e:7b:03:87:65:25:19:4f:8c:85:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  1 16:44:11 2025 GMT
            Not After : Mar 31 16:49:11 2026 GMT
        Subject: CN=FD4F4B25972C4E648507F9D49CACC2CF95322DFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fe:b4:68:5c:f8:a3:06:f6:cf:71:83:7a:f3:
                    ae:88:d6:f5:08:fb:74:2a:f3:50:a0:e0:2e:01:52:
                    4e:7e:d6:d0:dc:0c:29:a4:2c:9a:d9:bc:aa:15:91:
                    f0:f3:3a:2d:da:5a:89:92:79:cd:b2:aa:22:7a:b8:
                    c3:7c:81:94:b6:09:b5:8a:0f:05:6a:b1:58:08:87:
                    a0:12:91:ac:b8:9b:2a:68:fa:94:9b:ec:03:f1:50:
                    7d:a0:ee:85:ab:bd:1d:04:68:d3:30:71:70:2d:aa:
                    e6:f7:0e:3f:af:96:c1:bf:45:c1:64:5b:a3:64:ec:
                    54:33:bd:20:88:c6:ac:63:5b:8f:60:8c:b9:31:2f:
                    2c:d3:b9:7b:a1:b8:49:87:78:48:51:2f:7c:41:6b:
                    55:6d:be:ec:fa:cb:10:32:19:bf:54:a7:d8:db:fd:
                    2f:1e:1e:ce:ba:c3:a6:3f:b0:a7:7d:51:d4:fc:ae:
                    e5:97:be:d7:60:2c:66:22:59:88:76:6e:e9:dd:59:
                    ee:bc:0b:ef:f0:e7:6a:d6:23:e9:2c:e2:9f:51:61:
                    4c:1e:07:87:41:01:27:b7:da:34:11:b1:02:62:4f:
                    4c:e8:1f:6f:1f:e0:c4:11:76:df:65:9b:d7:de:95:
                    6b:55:c2:bc:53:fb:dd:39:a7:fa:37:5c:f2:bb:69:
                    27:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:4F:4B:25:97:2C:4E:64:85:07:F9:D4:9C:AC:C2:CF:95:32:2D:FF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/FD4F4B25972C4E648507F9D49CACC2CF95322DFF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:89f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273638

    Signature Algorithm: sha256WithRSAEncryption
         a5:b3:cf:c3:8f:79:b4:b9:b0:be:2e:35:9f:b8:27:04:8a:b1:
         c9:45:a9:a3:f4:7f:75:48:b6:05:ea:7b:34:06:0e:bf:6c:65:
         4e:22:6e:76:29:97:16:89:4f:fd:20:3b:21:45:b7:c8:ff:25:
         c6:3a:5c:d8:34:3e:fb:d7:5a:33:dd:1e:5d:40:00:61:67:7b:
         fa:ba:28:ef:7d:e2:90:03:65:4a:5b:3d:a2:0d:de:5c:d6:9a:
         ef:ab:88:39:98:d1:35:d9:8a:1d:9b:31:d4:38:8c:c7:fd:c2:
         2a:7c:25:9a:76:11:12:bf:01:2a:b4:8f:cb:6d:82:e6:24:8e:
         b9:99:42:3d:9c:07:61:26:c7:78:d8:ed:00:f9:53:e7:ae:66:
         56:f7:e6:25:06:1d:30:c2:5a:18:fc:2e:3f:44:e3:85:5e:0d:
         74:a5:fc:80:d1:44:06:4e:c8:6e:cf:cd:ef:bb:68:8d:ba:fc:
         86:72:08:49:92:8a:01:d3:86:44:52:64:2b:91:89:b7:d5:6d:
         05:99:92:86:a1:c6:59:f8:64:b1:13:92:6e:6a:da:55:06:28:
         7c:48:0d:8b:95:ab:3f:3e:38:e1:9e:bb:97:fa:3c:ba:20:e0:
         cd:28:d7:8b:b6:a0:6d:da:f4:96:f4:9d:87:e8:50:30:da:37:
         dd:f7:c4:98
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUBowH9BkZ6Ga2fnsDh2UlGU+MhYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA0MDExNjQ0MTFaFw0yNjAzMzExNjQ5MTFaMDMxMTAvBgNV
BAMTKEZENEY0QjI1OTcyQzRFNjQ4NTA3RjlENDlDQUNDMkNGOTUzMjJERkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW/rRoXPijBvbPcYN6866I1vUI
+3Qq81Cg4C4BUk5+1tDcDCmkLJrZvKoVkfDzOi3aWomSec2yqiJ6uMN8gZS2CbWK
DwVqsVgIh6ASkay4mypo+pSb7APxUH2g7oWrvR0EaNMwcXAtqub3Dj+vlsG/RcFk
W6Nk7FQzvSCIxqxjW49gjLkxLyzTuXuhuEmHeEhRL3xBa1Vtvuz6yxAyGb9Up9jb
/S8eHs66w6Y/sKd9UdT8ruWXvtdgLGYiWYh2bundWe68C+/w52rWI+ks4p9RYUwe
B4dBASe32jQRsQJiT0zoH28f4MQRdt9lm9felWtVwrxT+905p/o3XPK7aSeBAgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT9T0sllyxOZIUH
+dScrMLPlTIt/zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNnhM
OEdqTWREMnp5N3I3TlhZclNWbVpueDU4MUJNYVhSaGVVdHpOUXR6aFQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZ4
TDhHak1kRDJ6eTdyN05YWXJTVm1abng1ODFCTWFYUmhlVXR6TlF0emhULzAvRkQ0
RjRCMjU5NzJDNEU2NDg1MDdGOUQ0OUNBQ0MyQ0Y5NTMyMkRGRi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASJ+DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
LOYwDQYJKoZIhvcNAQELBQADggEBAKWzz8OPebS5sL4uNZ+4JwSKsclFqaP0f3VI
tgXqezQGDr9sZU4ibnYplxaJT/0gOyFFt8j/JcY6XNg0PvvXWjPdHl1AAGFne/q6
KO994pADZUpbPaIN3lzWmu+riDmY0TXZih2bMdQ4jMf9wip8JZp2ERK/ASq0j8tt
guYkjrmZQj2cB2Emx3jY7QD5U+euZlb35iUGHTDCWhj8Lj9E44VeDXSl/IDRRAZO
yG7Pze+7aI26/IZyCEmSigHThkRSZCuRibfVbQWZkoahxln4ZLETkm5q2lUGKHxI
DYuVqz8+OOGeu5f6PLog4M0o14u2oG3a9Jb0nYfoUDDaN933xJg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:07:56 2025 by rpki-client on console.sobornost.net