Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1855AAC48B259BBADA08BA3C6D6EA02E1786C76E.cer
File:                     1855AAC48B259BBADA08BA3C6D6EA02E1786C76E.cer (raw, json)
Hash identifier:          08KmkzD5byo9wQbO4x2gQv+yt1APQdv88HEaKsLUn3M=
Subject key identifier:   18:55:AA:C4:8B:25:9B:BA:DA:08:BA:3C:6D:6E:A0:2E:17:86:C7:6E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5E57473BAAEB3AAE1705CD20A8DD1274368682A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/1/1855AAC48B259BBADA08BA3C6D6EA02E1786C76E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 11:36:48 +0000
Certificate not after:    Thu 03 Apr 2025 11:41:48 +0000
Subordinate resources:    AS: 265011
                          IP: 170.84.148.0/22
                          IP: 2804:3164::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:57:47:3b:aa:eb:3a:ae:17:05:cd:20:a8:dd:12:74:36:86:82:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 11:36:48 2024 GMT
            Not After : Apr  3 11:41:48 2025 GMT
        Subject: CN=1855AAC48B259BBADA08BA3C6D6EA02E1786C76E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:d1:c3:12:84:ba:4f:be:4c:8c:75:0d:4f:
                    09:50:2c:b3:59:3b:02:f9:f2:94:3f:05:34:6d:14:
                    7d:09:d4:1e:9b:ff:79:8b:23:7a:36:28:0c:d1:5e:
                    65:39:64:e2:3f:10:68:41:d9:e0:95:c8:a3:d7:71:
                    ba:2c:7f:8c:7d:1c:b5:b1:56:f2:f3:1c:e9:9c:bd:
                    6b:13:f3:b5:23:fc:73:72:63:38:f7:86:ed:de:57:
                    70:46:76:a9:de:be:b0:f4:e2:58:cb:27:12:eb:d1:
                    b8:4b:d6:22:bc:4a:1d:6d:21:40:46:f1:db:0e:52:
                    de:1a:98:79:41:33:e9:b3:46:83:ae:9e:d7:e3:5e:
                    c9:de:e7:02:cf:8a:03:75:0d:59:36:1b:b9:51:ed:
                    3e:b8:0d:67:49:93:92:cb:b1:35:b7:68:bf:e2:fa:
                    2d:b9:25:02:99:2b:a1:3f:10:95:d9:e9:cb:0e:4f:
                    1a:94:0a:29:0f:69:1e:0f:23:67:f7:33:95:8b:87:
                    a7:48:28:26:f0:4f:08:ae:e3:e5:0d:e3:3e:3c:b1:
                    47:7b:59:b9:44:1f:8a:d1:c7:f4:28:04:d1:26:ca:
                    a1:ed:66:98:33:28:31:1b:c0:ab:e0:1b:f4:1a:cc:
                    da:8f:6f:48:72:b1:82:c8:3c:dc:8f:2c:ac:50:e0:
                    e7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:55:AA:C4:8B:25:9B:BA:DA:08:BA:3C:6D:6E:A0:2E:17:86:C7:6E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/1/1855AAC48B259BBADA08BA3C6D6EA02E1786C76E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.148.0/22
                IPv6:
                  2804:3164::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265011

    Signature Algorithm: sha256WithRSAEncryption
         63:fa:7f:53:81:ff:b7:8d:d6:8c:f8:00:30:ad:f2:27:14:34:
         d8:0a:d8:01:4d:10:44:3e:be:49:01:54:c7:96:45:d5:6c:19:
         fb:a5:bc:21:07:45:dd:52:40:aa:d5:9d:67:90:73:0e:42:00:
         04:28:04:a4:61:41:bc:14:53:6c:14:fe:c0:de:1c:89:2c:87:
         38:7b:cf:09:3d:60:c7:96:7b:4b:cc:c1:c9:8d:84:19:be:a6:
         df:7b:83:15:36:be:e9:7b:73:43:c1:72:17:e8:e4:09:cf:5b:
         12:d3:93:96:a4:b5:9a:ff:cc:e9:21:97:61:8e:34:0a:09:ec:
         05:c8:d3:53:8d:f4:19:47:f8:47:d6:11:22:e1:ce:bc:d2:f1:
         21:44:af:18:65:b8:43:81:2a:89:e9:40:98:90:68:30:74:e2:
         97:ed:a3:5a:97:02:b3:04:02:c1:ac:7d:61:02:b9:67:b4:f0:
         37:87:8d:63:1f:b3:47:34:4c:e2:d7:55:37:72:a2:c1:50:4e:
         ca:d0:25:e8:2a:be:b8:71:25:0a:6e:62:0a:4c:65:60:12:79:
         a6:26:0b:f1:c4:7b:90:71:58:09:ca:1a:9c:e4:51:da:00:ae:
         64:a2:8b:19:b4:b1:fb:4f:2f:76:0e:2f:f1:5c:3c:65:94:9f:
         fc:27:78:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:11:29 2024 by rpki-client on console-ams.rpki-client.org