Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.cer
File:                     24C90100868CC7E5E4ADB4222503286F7BF449AA.cer (raw, json)
Hash identifier:          kqBWhuzigeWrVdT430DFDCbImr3WIOPZNgtlb9DGs8g=
Subject key identifier:   24:C9:01:00:86:8C:C7:E5:E4:AD:B4:22:25:03:28:6F:7B:F4:49:AA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       05F5D6F27FCB9E060195D269458CF3E3A8BA635D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Mar 2025 23:02:26 +0000
Certificate not after:    Mon 16 Mar 2026 23:07:26 +0000
Subordinate resources:    AS: 267282
                          IP: 45.232.180.0/22
                          IP: 2804:4b14::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 13:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f5:d6:f2:7f:cb:9e:06:01:95:d2:69:45:8c:f3:e3:a8:ba:63:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 17 23:02:26 2025 GMT
            Not After : Mar 16 23:07:26 2026 GMT
        Subject: CN=24C90100868CC7E5E4ADB4222503286F7BF449AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:80:5f:8b:ef:43:70:7c:f2:1f:98:03:7e:e0:
                    d5:a0:fc:41:b5:a6:60:58:c5:4e:c0:85:6d:84:14:
                    b3:a4:2c:02:e0:b9:c5:eb:ea:e5:a0:59:21:38:84:
                    36:71:e7:9b:83:9b:d5:aa:dd:25:07:a3:37:21:b2:
                    c2:08:63:21:03:6e:ae:8e:e7:35:3a:b7:68:97:ef:
                    2d:27:bd:1c:73:be:a5:ba:fe:94:b8:58:b0:07:94:
                    3f:98:2d:cd:91:fa:f0:a7:72:9e:25:ae:b7:27:8a:
                    d3:f1:2a:d5:e5:ac:88:25:68:19:fe:40:9b:bd:ca:
                    0d:98:75:32:33:3e:4d:06:5c:f6:9c:62:fd:72:05:
                    07:63:e5:e2:40:07:15:c9:e4:9b:c3:68:c4:c7:87:
                    c3:a6:d9:0c:27:b8:43:fd:ca:cf:7c:7c:7b:96:30:
                    10:9f:8a:b4:4a:67:ae:f2:08:9f:ba:8e:91:55:70:
                    a4:6d:e2:4c:f9:1d:e5:d7:fd:5b:b3:ec:b7:d6:a3:
                    65:7b:52:b7:d5:95:96:a3:d4:5a:c1:29:ee:4a:87:
                    d5:1c:28:bf:6d:dd:76:a2:13:25:11:46:e2:cd:ee:
                    7f:03:88:5c:4c:ca:15:24:fb:6b:ae:09:2f:ac:b0:
                    03:ef:3f:ce:3d:95:09:62:05:44:56:41:d4:1c:61:
                    e0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                24:C9:01:00:86:8C:C7:E5:E4:AD:B4:22:25:03:28:6F:7B:F4:49:AA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8UUSGXkLPbvJNCVnjinSRz4ENW4QQtsZNxof18qneHS/1/24C90100868CC7E5E4ADB4222503286F7BF449AA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.180.0/22
                IPv6:
                  2804:4b14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267282

    Signature Algorithm: sha256WithRSAEncryption
         a4:93:b6:64:c2:ff:76:8f:b7:70:d4:b4:32:47:a5:59:b6:13:
         ec:10:df:ae:75:cc:49:ca:9f:08:ea:3c:f2:11:ae:f5:bf:5e:
         a8:ab:32:f5:9c:7e:5b:a4:e3:2a:ba:77:1a:b2:da:d4:c3:a7:
         e9:86:74:5f:69:18:fb:50:de:9e:de:04:5e:40:f7:ef:d4:23:
         7a:b0:30:b2:b6:08:51:61:4e:d5:c4:33:71:e0:64:52:0d:32:
         e2:92:5f:f3:b2:ac:3d:7d:57:d2:17:4f:04:25:df:0b:90:50:
         41:8b:60:af:a7:9f:7a:3f:9f:90:1e:79:6d:a5:7f:f7:75:77:
         b8:ca:96:5a:a1:88:f3:80:5f:09:59:92:b6:cd:52:db:8e:3a:
         d8:73:9a:09:49:c0:70:1b:6b:c6:bc:98:ee:73:12:58:67:7f:
         99:f4:5e:13:55:a2:77:53:69:a9:3e:ab:2d:74:5a:2c:53:aa:
         8a:f5:6c:d6:7c:a1:fd:d1:62:a2:72:a6:82:b8:47:73:11:7e:
         8c:17:b1:ee:7a:87:d7:db:5e:af:09:58:24:73:e6:86:c5:dd:
         76:f0:3a:bc:cf:01:0c:a4:10:e6:cd:51:18:92:51:37:12:68:
         6f:a2:9a:28:0a:05:18:e6:4c:22:22:9b:8a:26:97:36:a2:32:
         f1:7e:68:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:19:53 2025 by rpki-client