Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FFFC078448D76222F00690DC23A9C960738B25A8.cer
File:                     FFFC078448D76222F00690DC23A9C960738B25A8.cer (raw, json)
Hash identifier:          WYp+4QhaM7YxYRbnLq6yZd+9i2eqvgeR5WAF2HrtTa0=
Subject key identifier:   FF:FC:07:84:48:D7:62:22:F0:06:90:DC:23:A9:C9:60:73:8B:25:A8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       09BFE4CC86626C73A3708A97B0A771A7B5DB7B4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6PkGV9E7K4GLjCxJivwLFN5r82JF87uLSAdrpv6Cev1B/1/FFFC078448D76222F00690DC23A9C960738B25A8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6PkGV9E7K4GLjCxJivwLFN5r82JF87uLSAdrpv6Cev1B/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 11 Apr 2025 00:22:45 +0000
Certificate not after:    Fri 10 Apr 2026 00:27:45 +0000
Subordinate resources:    AS: 266925
                          IP: 45.224.244.0/22
                          IP: 2804:456c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:bf:e4:cc:86:62:6c:73:a3:70:8a:97:b0:a7:71:a7:b5:db:7b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 11 00:22:45 2025 GMT
            Not After : Apr 10 00:27:45 2026 GMT
        Subject: CN=FFFC078448D76222F00690DC23A9C960738B25A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b0:fc:85:e3:de:1a:de:47:5e:0f:ae:53:66:
                    91:96:75:ee:57:fe:8e:52:b4:94:12:9f:ad:a0:db:
                    b7:3e:fe:32:1b:aa:e7:83:48:bc:9d:6c:c0:92:cc:
                    11:4b:a4:91:24:10:37:2e:1a:06:49:09:76:80:13:
                    12:7a:78:bd:0d:d6:7b:55:ef:33:20:a1:ae:18:a2:
                    ca:86:7d:f0:a9:f4:cc:34:4b:06:1c:54:50:34:cc:
                    96:17:f0:85:27:e5:fd:2a:93:d4:df:5c:d3:31:6d:
                    ea:1a:f9:f3:09:dc:9f:bc:c7:a8:37:e3:d6:6c:83:
                    db:41:26:00:c8:95:da:48:dc:1e:1b:73:bd:ff:dc:
                    d3:4b:2b:66:57:83:64:c6:4f:90:1f:57:dd:ee:d7:
                    1b:59:6a:b6:6c:ad:c0:4a:35:03:db:92:d0:09:85:
                    75:13:53:72:e2:1c:ca:8e:01:e5:e3:ba:62:02:75:
                    df:c8:40:24:a9:c8:88:97:a3:8c:5d:20:2a:a8:e8:
                    9c:c0:9e:8a:ca:1d:cb:f9:d9:07:e0:2e:cd:57:17:
                    07:ed:c4:9c:18:60:5b:d8:7a:aa:80:df:f2:7a:4f:
                    59:36:1a:20:19:db:2c:eb:57:66:70:ca:fe:25:0b:
                    b9:37:20:08:e0:d5:91:87:15:bb:96:f4:d2:df:4a:
                    ec:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:FC:07:84:48:D7:62:22:F0:06:90:DC:23:A9:C9:60:73:8B:25:A8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6PkGV9E7K4GLjCxJivwLFN5r82JF87uLSAdrpv6Cev1B/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6PkGV9E7K4GLjCxJivwLFN5r82JF87uLSAdrpv6Cev1B/1/FFFC078448D76222F00690DC23A9C960738B25A8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.244.0/22
                IPv6:
                  2804:456c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266925

    Signature Algorithm: sha256WithRSAEncryption
         46:72:1a:12:a9:59:ab:dd:5c:2c:a4:30:e1:2b:dc:84:9b:f8:
         6b:33:f0:b2:f4:5c:07:c1:76:5b:05:b6:80:a0:56:f1:9b:1b:
         46:e0:10:d2:85:10:97:60:e6:9e:11:f5:37:e6:bf:ad:a9:b0:
         58:90:1c:fb:32:03:ef:99:9f:74:0f:41:0f:93:2f:4c:a1:ff:
         8f:03:8f:8f:a8:9a:ed:5f:66:1c:10:dd:54:d8:33:5d:aa:0c:
         09:a8:2b:37:bc:5e:dd:33:3a:c9:92:67:b4:68:31:78:73:91:
         33:91:c8:7d:90:39:d7:bc:23:e9:86:80:36:40:b5:d8:05:68:
         d5:e8:78:75:01:cb:8f:89:16:b3:7c:ff:d1:98:1a:84:52:c8:
         b7:7b:aa:a0:ad:22:af:1c:eb:5a:fa:14:71:8a:5d:c8:57:ef:
         02:25:ae:10:22:d5:f6:71:f0:98:6b:55:cb:5c:94:ba:47:5d:
         6d:52:c8:95:f1:27:7c:f2:3a:54:21:57:42:62:06:97:31:a2:
         3c:0b:70:e8:02:cf:7d:29:77:8a:43:37:e4:1e:f6:3a:d2:84:
         0a:3e:29:d8:d5:41:e2:e5:92:f6:63:3a:da:fc:0f:49:81:f6:
         47:17:c3:a1:9f:d3:00:79:f5:84:55:13:49:a2:16:73:54:2b:
         1f:b8:42:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:47:33 2025 by rpki-client on console.sobornost.net