Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer
File:                     24B3423445CE5D36280D8F72151340DCBE34B7BB.cer (raw, json)
Hash identifier:          dFBBi06ZMPmUzj3ffgA1r0779GI7ns1TzGMH1lIkH1o=
Subject key identifier:   24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       213260F9421F444D3366060654ED72A3F0A1145D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Feb 2025 18:32:45 +0000
Certificate not after:    Mon 16 Feb 2026 18:37:45 +0000
Subordinate resources:    AS: 268788
                          IP: 45.173.24.0/22
                          IP: 2804:5aac::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 22:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:32:60:f9:42:1f:44:4d:33:66:06:06:54:ed:72:a3:f0:a1:14:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 17 18:32:45 2025 GMT
            Not After : Feb 16 18:37:45 2026 GMT
        Subject: CN=24B3423445CE5D36280D8F72151340DCBE34B7BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:49:cd:1f:b6:4b:35:4c:7b:38:af:35:c6:
                    66:e7:57:0e:da:04:44:5e:eb:e0:c0:6e:37:6d:a1:
                    54:09:41:09:c9:01:b3:85:da:76:b1:f9:88:df:17:
                    b4:4d:41:34:e2:27:a8:2b:bb:b2:fd:35:07:e7:36:
                    29:15:74:3a:b3:b1:64:62:1f:57:38:89:b4:fc:d7:
                    a4:58:fd:48:10:14:a6:58:7c:ce:3f:e7:76:f9:9f:
                    32:7a:cc:c7:bc:ff:67:80:36:39:5b:58:d8:18:e8:
                    24:28:de:dc:94:c9:ba:26:75:f6:42:f5:88:b3:c3:
                    62:ad:e1:2e:24:3c:60:d5:90:35:5a:31:f2:b3:b5:
                    de:54:8a:4c:0e:7b:0e:23:18:70:1d:5e:df:e9:96:
                    86:7d:8d:14:e0:42:57:4f:6d:65:a2:dc:a7:6b:28:
                    1f:bb:76:c9:4b:6a:65:e8:8a:f7:98:a8:f7:6a:87:
                    c1:d6:d9:1e:23:af:08:de:25:d0:25:a9:fa:19:a7:
                    c3:04:3f:ac:ba:cc:f4:b8:5e:64:30:da:ed:09:6f:
                    fe:fd:90:c8:20:a4:6b:38:0d:86:e7:15:6f:4a:c2:
                    5e:49:3a:89:24:44:15:cb:f2:8b:f7:9c:aa:a6:1b:
                    b3:10:65:03:d0:3c:19:dc:c7:db:ad:d2:60:16:08:
                    41:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.24.0/22
                IPv6:
                  2804:5aac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268788

    Signature Algorithm: sha256WithRSAEncryption
         d7:9b:f6:4b:5b:a3:3a:1a:46:2c:3c:1d:fb:a6:7a:f1:e7:d5:
         ab:1a:ac:d3:05:e9:cc:e7:a4:37:5d:0d:57:d9:5c:12:c4:88:
         c0:9a:d0:ad:bd:dd:cf:ee:a5:aa:01:e9:d2:9d:3a:31:17:4e:
         c6:2a:89:1e:79:ec:4a:a6:4f:36:af:4c:9e:e9:d7:0e:7f:6a:
         9f:c6:68:e2:f0:53:2e:ef:9a:be:0a:83:e2:d6:c1:0f:6a:87:
         a9:c6:f4:f1:20:02:c8:31:5b:20:1a:3f:1d:8f:3c:44:6b:24:
         0a:54:d0:53:1c:30:99:a8:88:5b:e3:04:fd:6a:01:32:55:5c:
         ce:b2:33:17:b8:1e:48:67:25:90:77:8e:4c:03:b1:6a:53:3f:
         61:a7:1f:aa:2a:1e:6c:62:f5:8f:7d:a4:fb:27:5a:03:46:62:
         c0:f1:90:6f:76:a2:01:59:09:fc:69:68:d9:18:52:b1:7e:65:
         00:03:cc:1b:ac:cb:00:1d:0f:ff:af:74:67:18:52:2c:1a:e6:
         c5:b3:d6:ae:61:5b:22:5a:a0:68:ba:6d:bf:93:35:fe:92:a5:
         4b:05:9e:f8:0d:b5:b7:c1:1d:34:bb:5f:0c:98:f5:c0:3a:cf:
         18:b4:cb:b2:66:83:cc:7d:f8:d8:1c:d7:4a:e5:54:97:d1:2f:
         a4:92:c2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:07:12 2025 by rpki-client