Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer
File:                     2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer (raw, json)
Hash identifier:          LYTGB5Vs9zRSp02eCgxj7ZNkEf3sHEi9/Y8rAP5gJM8=
Subject key identifier:   22:64:D1:7A:1D:E6:58:F2:5F:A0:EB:77:73:DA:7F:6B:41:E5:2F:D0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1A1B2C4ED335A29C4E3214BD5DBBB1024483A04A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 21 Dec 2024 16:12:18 +0000
Certificate not after:    Sat 20 Dec 2025 16:17:18 +0000
Subordinate resources:    AS: 266055
                          IP: 45.4.44.0/22
                          IP: 2804:39dc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:59:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1b:2c:4e:d3:35:a2:9c:4e:32:14:bd:5d:bb:b1:02:44:83:a0:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 21 16:12:18 2024 GMT
            Not After : Dec 20 16:17:18 2025 GMT
        Subject: CN=2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c3:13:bb:c1:47:c8:cd:5a:4a:6a:e0:de:e6:
                    ca:9e:bd:04:71:11:ea:d9:73:ac:2b:7a:9a:95:bd:
                    b5:69:3a:de:3a:b7:60:d5:e6:1a:b1:19:f5:a4:b1:
                    70:f5:a2:a3:eb:23:a3:fd:c0:a7:00:bc:fe:8c:57:
                    c6:d0:93:fc:a2:0c:25:08:6c:c7:d7:ce:0b:79:67:
                    7b:77:9e:3f:e1:ae:2e:9d:24:8b:4e:62:de:22:a9:
                    90:2f:d7:6d:1d:7c:e0:33:6a:7f:22:a5:48:f2:1e:
                    35:2e:e6:01:46:fc:83:0f:79:72:aa:b2:9f:3c:96:
                    0d:cc:60:63:aa:0a:d3:d8:54:c3:c5:f1:76:89:46:
                    cd:e3:a7:6c:3a:7b:6d:e7:eb:0e:74:bb:f5:52:35:
                    ef:25:a1:33:86:51:36:c9:1c:86:11:52:cd:da:d7:
                    5b:9d:13:11:0b:f4:ae:be:c1:7c:e0:a3:e4:0d:04:
                    20:a4:da:d8:09:d9:bc:ac:2d:61:c8:2a:38:b4:88:
                    2d:94:08:bf:f9:a6:83:cf:da:ff:55:bd:d3:bf:05:
                    f4:85:a9:22:29:b4:78:60:f5:4d:d4:69:46:25:2e:
                    57:11:57:09:7e:f5:7f:30:80:74:7a:a8:43:d6:78:
                    d4:19:f1:77:35:48:4d:26:08:e4:5f:5f:8b:60:29:
                    9b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                22:64:D1:7A:1D:E6:58:F2:5F:A0:EB:77:73:DA:7F:6B:41:E5:2F:D0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.44.0/22
                IPv6:
                  2804:39dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266055

    Signature Algorithm: sha256WithRSAEncryption
         32:72:ba:ff:b0:48:88:ef:4f:b3:e6:cd:3f:d5:de:52:1b:aa:
         51:5e:af:d8:0c:31:d5:10:13:ca:54:2e:b9:57:73:98:95:a0:
         70:6d:f0:23:6a:ac:c1:e2:02:61:0d:30:8b:62:6f:6c:96:b2:
         68:f9:78:87:20:db:1d:60:e5:5a:bf:6c:d4:25:80:e4:6b:b9:
         7c:d6:ca:8c:bc:76:d7:a9:96:91:58:55:8a:be:16:2b:d6:43:
         8d:bc:0c:56:08:18:4c:eb:c0:88:ee:d2:ab:63:fc:e0:51:85:
         c9:86:de:16:a6:66:8d:50:11:4c:4a:61:28:0a:5a:1d:5b:26:
         24:4c:b3:4a:6f:2a:2a:3b:a7:62:87:ca:9b:2b:c0:30:55:13:
         e3:6b:3c:4b:49:51:d5:d2:bd:08:a3:18:62:27:c7:1f:b3:36:
         3a:e2:95:f2:bf:00:df:32:95:ef:ea:16:66:46:dd:73:c4:7c:
         f0:0f:6f:ba:e6:fa:37:84:ba:01:6b:ef:28:34:fe:f9:31:ca:
         77:72:12:d9:74:00:71:b9:dc:04:d2:4e:a0:7d:55:3a:d3:60:
         96:ca:9a:43:84:8c:07:cb:f0:c2:b5:3c:bc:83:6a:81:f7:09:
         39:00:50:ee:ab:9e:ae:1c:d0:b1:82:99:00:5d:39:57:76:ce:
         f3:77:52:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:17:35 2025 by rpki-client