Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/03BF4AFF1AB77B0E0FD870EB679323489DF549B4.cer
File:                     03BF4AFF1AB77B0E0FD870EB679323489DF549B4.cer (raw, json)
Hash identifier:          hu/10IEWirLhtB/U37fpV5CnPuq/rloJx40aBrvWEBk=
Subject key identifier:   03:BF:4A:FF:1A:B7:7B:0E:0F:D8:70:EB:67:93:23:48:9D:F5:49:B4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3150E6741A89605D4F56CE1305030B0CBE42D4B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EiGUDHHaG6diBSQrEQstPMYk4v8uvYk72AX6kNJrG6nK/0/03BF4AFF1AB77B0E0FD870EB679323489DF549B4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EiGUDHHaG6diBSQrEQstPMYk4v8uvYk72AX6kNJrG6nK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Nov 2024 18:17:36 +0000
Certificate not after:    Tue 04 Nov 2025 18:22:36 +0000
Subordinate resources:    AS: 267037
                          IP: 45.227.232.0/22
                          IP: 2804:4730::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:50:e6:74:1a:89:60:5d:4f:56:ce:13:05:03:0b:0c:be:42:d4:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  5 18:17:36 2024 GMT
            Not After : Nov  4 18:22:36 2025 GMT
        Subject: CN=03BF4AFF1AB77B0E0FD870EB679323489DF549B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:df:e6:5b:76:8d:c6:97:cb:42:28:35:c6:5d:
                    9f:f8:dc:86:af:32:5d:af:12:73:8e:20:72:0b:72:
                    53:0d:31:b1:e9:d3:97:cd:5b:2e:31:cc:fc:4b:1b:
                    08:67:a5:b9:38:97:a7:0b:2b:b7:3d:01:00:15:40:
                    56:26:c9:7b:d8:11:fb:71:9a:47:8f:00:a5:73:bf:
                    43:b3:1e:99:37:8f:50:fe:77:29:0b:01:0f:7c:aa:
                    e3:77:2a:94:f2:9d:35:f2:83:95:4e:df:51:ee:c6:
                    53:09:07:a4:01:26:8f:73:40:08:d8:ef:16:82:4b:
                    de:6c:67:24:b9:d2:24:95:17:8c:53:94:98:3a:ce:
                    c4:21:28:0a:95:d3:24:ee:0d:6d:3f:40:1a:4a:e3:
                    17:4b:8d:15:3e:c9:37:38:e2:f1:48:94:89:9f:99:
                    d8:a8:8c:62:36:26:a2:c6:6d:b8:33:71:f3:05:df:
                    3d:0b:f1:a4:9f:04:ae:bf:05:11:62:b4:d5:43:ed:
                    fc:47:67:f5:ea:be:14:90:67:ab:33:ad:dc:94:fb:
                    f6:ff:e7:a4:a6:4f:ab:47:bc:36:08:aa:18:db:f6:
                    d0:c3:cc:96:52:cf:21:f2:58:06:d1:67:16:d4:35:
                    1b:f6:58:d3:63:56:90:7a:db:6d:b4:8a:66:f5:4d:
                    e7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:BF:4A:FF:1A:B7:7B:0E:0F:D8:70:EB:67:93:23:48:9D:F5:49:B4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EiGUDHHaG6diBSQrEQstPMYk4v8uvYk72AX6kNJrG6nK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EiGUDHHaG6diBSQrEQstPMYk4v8uvYk72AX6kNJrG6nK/0/03BF4AFF1AB77B0E0FD870EB679323489DF549B4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.232.0/22
                IPv6:
                  2804:4730::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267037

    Signature Algorithm: sha256WithRSAEncryption
         d0:11:36:76:55:a8:62:c4:91:b1:fd:86:96:5d:c1:9e:01:33:
         73:69:90:34:75:e7:2c:d6:0b:27:6a:ed:b2:9a:2f:fd:c6:96:
         da:4c:7d:34:8c:6e:a3:24:b3:9d:71:a8:92:d0:48:99:aa:72:
         7e:00:79:57:f8:a7:87:d0:15:1e:3d:0b:06:40:6c:0b:ae:07:
         12:42:69:ce:df:a6:a2:a9:c3:a4:bc:a4:f9:3b:71:3e:ee:e5:
         f6:24:5e:a5:92:34:7a:e5:0e:ee:4b:33:33:fd:0f:91:32:66:
         7d:c3:d4:c6:43:22:53:72:f4:b4:ab:55:a9:c6:e8:9d:e7:8c:
         b2:3a:7a:dc:1e:86:7c:06:98:31:9f:66:fc:a0:92:f1:ab:90:
         f4:47:a4:95:4f:9d:82:70:bf:21:01:0f:81:e0:63:94:04:7e:
         c6:53:1b:6c:03:28:93:8f:07:21:97:71:a0:94:cd:b7:6f:d0:
         e2:60:53:3f:32:07:43:56:57:4a:55:23:f2:e0:07:e2:37:2a:
         40:5a:8a:e7:4b:cf:a2:60:f9:4c:9d:85:93:b8:c1:f2:f5:2a:
         a5:7c:70:15:be:64:d7:7b:5c:3e:46:7f:e6:b3:51:93:f1:27:
         64:c5:63:9e:42:8f:19:48:ef:f6:0d:5a:05:73:91:c3:80:a5:
         d0:da:ed:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:40 2024 by rpki-client on console-ams.rpki-client.org