Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF2AF20B38CDDACBADD03E10C296F31339478DE7.cer
File:                     FF2AF20B38CDDACBADD03E10C296F31339478DE7.cer (raw, json)
Hash identifier:          8B2TNuQJBiT/HalS0oklqf3ENMl2CukfLOeQAufM/Z0=
Subject key identifier:   FF:2A:F2:0B:38:CD:DA:CB:AD:D0:3E:10:C2:96:F3:13:39:47:8D:E7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6EBD271DB1451563A744FBA3FBF8FAD838CB251A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/1/FF2AF20B38CDDACBADD03E10C296F31339478DE7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:45:08 +0000
Certificate not after:    Wed 04 Mar 2026 18:50:08 +0000
Subordinate resources:    AS: 270514
                          IP: 177.11.128.0/22
                          IP: 2804:6d20::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:bd:27:1d:b1:45:15:63:a7:44:fb:a3:fb:f8:fa:d8:38:cb:25:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:45:08 2025 GMT
            Not After : Mar  4 18:50:08 2026 GMT
        Subject: CN=FF2AF20B38CDDACBADD03E10C296F31339478DE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:58:d8:ab:11:02:8a:e8:0c:dc:c1:7a:32:b3:
                    26:ce:2d:6b:bb:1f:3d:23:b3:9c:f3:5b:c3:1b:3d:
                    89:75:7f:d1:54:d6:1a:71:af:62:a7:c6:e3:6f:3c:
                    c5:96:4a:db:d1:12:a2:24:9f:7b:07:fc:78:7e:c9:
                    83:15:92:a2:4f:de:a6:18:0a:49:34:a2:65:3f:6d:
                    a0:bc:89:39:0b:b3:17:53:d6:c8:17:cb:f4:23:2d:
                    f2:d0:a3:ae:a8:c2:3e:c2:63:86:76:07:f4:7a:f9:
                    f1:dc:0d:31:36:ca:13:e2:9d:e9:7a:4e:d8:de:44:
                    f3:57:cc:c4:44:a4:34:3b:de:77:41:f1:d2:fa:ce:
                    cf:c5:41:af:aa:b1:d1:01:e0:40:e9:9a:01:ee:c4:
                    4d:63:6d:b0:00:d3:0d:74:d1:e3:5f:d8:44:7c:53:
                    f5:00:f1:03:05:87:b3:46:5b:30:b5:b9:33:22:86:
                    05:fb:53:5e:69:d3:ec:3f:8a:c7:0d:83:2a:20:de:
                    03:16:59:14:c9:6f:d0:7f:34:70:77:28:a9:0e:40:
                    24:e2:3f:de:30:ef:16:23:8f:09:67:60:a6:30:22:
                    b8:16:37:8b:a7:b6:13:cd:02:b5:fe:d6:a9:ba:f7:
                    76:7f:d3:b7:e5:c5:de:81:00:63:c0:c4:d7:b0:42:
                    f8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:2A:F2:0B:38:CD:DA:CB:AD:D0:3E:10:C2:96:F3:13:39:47:8D:E7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5aRseHMT7bHtNPiaPv8RFaCw5kRE1WG9ysjCGKNEbwtp/1/FF2AF20B38CDDACBADD03E10C296F31339478DE7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.128.0/22
                IPv6:
                  2804:6d20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270514

    Signature Algorithm: sha256WithRSAEncryption
         21:26:8a:b0:a3:00:2d:df:a9:0f:8e:66:62:7e:a3:e5:ae:79:
         e4:10:0c:eb:01:b6:95:22:bb:2e:66:05:ad:ef:15:66:9f:da:
         c2:fb:05:b0:56:95:2b:0d:5d:86:75:17:62:0c:02:a6:da:02:
         84:97:ff:ba:8c:25:66:82:c7:44:ac:66:32:40:73:82:91:bf:
         71:95:9b:d7:e6:77:c9:29:09:47:17:fc:9a:d4:1d:04:54:ca:
         8c:c6:35:43:33:65:09:c7:fe:6e:7d:c1:0c:e6:14:09:17:52:
         87:28:19:93:84:b0:06:cb:ce:63:a8:04:19:c7:fc:60:f3:42:
         8f:89:27:b9:78:a5:67:9a:55:c2:32:af:e8:9a:65:81:09:e3:
         67:c5:ff:e6:9b:2e:9c:e3:1d:38:45:0b:09:3a:d2:8b:9a:39:
         c7:db:52:47:5d:79:a5:f4:db:5f:79:88:8f:31:d3:77:f5:1e:
         3f:8d:46:62:6f:4a:45:0e:b9:dc:c1:f7:84:a5:28:a7:1e:da:
         ee:6d:2d:aa:f8:cb:84:f8:cc:79:db:7e:f7:12:4f:1a:c4:ec:
         6d:62:14:f5:94:5d:5a:98:0c:68:dc:d1:18:05:ac:38:d9:5f:
         a1:ee:99:24:e5:59:c5:64:ff:57:89:67:3b:29:9c:1c:4a:f0:
         6f:cd:c6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:38:40 2025 by rpki-client on console.sobornost.net