Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.cer
File:                     1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.cer (raw, json)
Hash identifier:          bipRYlX0pN5LDj9h5uOWHdhIDoZFtyTQYLDMt941ucc=
Subject key identifier:   1B:28:49:50:95:49:89:8D:2F:C8:5F:41:A2:D1:FE:7B:3C:5F:8D:8F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4D466F837FE15E11FAE2CD701581E63F48F76F73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 02:56:19 +0000
Certificate not after:    Thu 03 Apr 2025 03:01:19 +0000
Subordinate resources:    AS: 268109
                          IP: 45.168.128.0/22
                          IP: 2804:5824::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:46:6f:83:7f:e1:5e:11:fa:e2:cd:70:15:81:e6:3f:48:f7:6f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 02:56:19 2024 GMT
            Not After : Apr  3 03:01:19 2025 GMT
        Subject: CN=1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dc:5b:23:96:97:0e:5a:ba:26:7d:1b:29:82:
                    25:6f:67:e4:df:40:a9:ad:e9:ad:a4:16:3e:d0:85:
                    c7:e6:c0:f1:f7:74:92:e1:ae:20:19:ea:16:0e:d0:
                    19:89:a6:75:08:41:03:40:dc:8c:db:1a:65:ff:fe:
                    f3:f4:ca:60:c4:35:d4:ff:94:86:28:c7:4b:e2:8b:
                    46:f7:93:4e:46:b1:70:c0:2b:02:bf:f4:bf:79:79:
                    fb:4c:0c:57:11:d4:61:3d:a0:b6:b7:ee:c1:d8:e8:
                    49:e9:fd:0f:bc:47:53:70:d4:46:c7:e6:a2:a7:e6:
                    1c:f8:1b:cf:14:0b:a7:83:7c:6c:23:a1:5c:c2:96:
                    78:54:8f:ec:c4:9f:ce:96:a4:6d:44:5b:bf:19:c9:
                    2d:74:fe:3a:5e:ff:e2:49:de:83:5e:b8:14:4d:20:
                    b4:c7:7a:d4:e2:e7:4d:68:ec:5c:d0:0f:44:5a:24:
                    6e:4b:dc:f3:47:14:1b:64:de:a5:f8:6c:35:be:ec:
                    68:7b:29:c7:75:f0:6a:f8:80:07:55:01:3a:23:e7:
                    5d:01:36:a1:4b:3d:6e:cf:f2:39:1e:0b:15:c6:29:
                    6a:9a:d5:cf:71:7f:3a:96:63:30:61:99:3d:71:e7:
                    13:d3:9a:68:31:49:54:18:f9:12:42:76:a7:f4:87:
                    e2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:28:49:50:95:49:89:8D:2F:C8:5F:41:A2:D1:FE:7B:3C:5F:8D:8F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.128.0/22
                IPv6:
                  2804:5824::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268109

    Signature Algorithm: sha256WithRSAEncryption
         05:46:e5:d7:c4:07:e6:68:6f:04:eb:3f:00:18:64:39:0b:fa:
         50:f8:0a:20:c5:59:03:e2:84:59:c7:5d:f5:3d:a7:95:94:aa:
         d2:0e:02:72:19:2d:b0:69:9e:43:54:40:3c:66:a7:ef:37:78:
         8b:fb:b6:66:78:f9:8d:f7:bf:32:aa:b9:17:28:50:63:49:8b:
         55:07:8c:3f:6a:58:40:e8:93:b4:3b:89:f5:f4:33:44:f2:4e:
         de:a6:3c:da:e1:4c:5d:17:11:29:33:e8:e5:f0:ab:31:3b:6a:
         be:ce:a9:68:b6:d3:55:b5:7a:ca:24:3a:25:3f:62:c7:99:d0:
         a7:27:04:48:6b:9e:54:d4:1c:02:75:a0:bd:80:06:04:51:f7:
         f3:17:94:32:ce:08:a7:0e:21:ca:8e:73:fd:b3:e8:d5:a6:7d:
         e2:59:e9:43:12:9c:12:8b:a9:67:2c:04:0f:57:00:70:16:a1:
         17:0c:21:c9:51:0b:08:36:e4:e2:bc:11:66:9f:63:56:de:7e:
         c8:b9:91:99:01:a3:34:8e:18:56:cf:39:cf:bd:d0:98:8b:be:
         45:53:0b:ca:80:52:63:ed:cf:33:21:b9:16:9b:cd:9f:70:cb:
         80:6d:30:05:8d:85:6b:b2:4d:49:86:2f:4e:c8:63:e8:42:7e:
         cf:08:8e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:17 2024 by rpki-client on console-fra.rpki-client.org