Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2AA457BEF432F83463DE6AD111F6881D89605D25.cer
File:                     2AA457BEF432F83463DE6AD111F6881D89605D25.cer (raw, json)
Hash identifier:          55WOKd+7jjP/15B8FyPa+s8Wp0k0CM0W5UCk710P9gM=
Subject key identifier:   2A:A4:57:BE:F4:32:F8:34:63:DE:6A:D1:11:F6:88:1D:89:60:5D:25
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2A3D944B1F87DF1EF76C3B522ACB43A17BD78899
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/2AA457BEF432F83463DE6AD111F6881D89605D25.mft
caRepository:             rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 19:01:31 +0000
Certificate not after:    Wed 02 Apr 2025 19:06:31 +0000
Subordinate resources:    AS: 264409
                          IP: 131.221.44.0/22
                          IP: 2804:1e20::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 20:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:3d:94:4b:1f:87:df:1e:f7:6c:3b:52:2a:cb:43:a1:7b:d7:88:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 19:01:31 2024 GMT
            Not After : Apr  2 19:06:31 2025 GMT
        Subject: CN=2AA457BEF432F83463DE6AD111F6881D89605D25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:91:f1:90:59:38:08:69:0a:e5:1b:d2:50:43:
                    e1:d0:b9:4d:60:de:e1:b7:b6:5d:a8:5f:64:5a:28:
                    43:ec:6b:c4:ad:42:16:df:c4:c5:db:3e:b4:14:ee:
                    a4:23:8b:66:89:63:3c:ed:ec:6b:76:3a:78:73:d6:
                    f1:5c:f5:58:3e:e0:e8:77:88:63:ae:5d:8e:c7:e8:
                    ec:17:40:98:55:46:40:f4:b7:d1:64:f4:b2:4a:1d:
                    70:84:f1:c5:83:5e:5e:a3:48:fc:1c:c4:db:a9:61:
                    46:b1:5e:6c:66:45:0c:d3:37:94:53:fa:c1:30:aa:
                    f5:d4:b2:dd:d9:69:db:05:61:38:5e:aa:08:9a:71:
                    5d:38:fc:95:f6:d3:06:e4:8e:3f:89:a8:47:a1:07:
                    0e:4c:2b:73:38:a9:18:c6:ca:76:57:60:0b:ac:e3:
                    e1:79:23:f0:5a:3e:4a:8d:63:01:49:84:9a:12:8d:
                    d7:b1:30:9a:6c:61:ff:a2:d7:49:3c:f4:35:60:62:
                    03:59:34:62:cf:a4:ad:16:b1:cd:33:df:1f:94:58:
                    a0:cd:00:1b:47:f7:fb:96:ea:f9:1c:91:3b:0d:7c:
                    46:58:2f:94:ce:4f:c0:ea:e7:b2:17:b8:63:50:eb:
                    a8:2f:73:e8:ea:14:69:e1:a4:51:99:ce:4f:97:d6:
                    28:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:A4:57:BE:F4:32:F8:34:63:DE:6A:D1:11:F6:88:1D:89:60:5D:25
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/77aiAaqhtWFqU1sAbJhdAH5wZ6GuGbyJNHy6B6RuViHh/1/2AA457BEF432F83463DE6AD111F6881D89605D25.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.44.0/22
                IPv6:
                  2804:1e20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264409

    Signature Algorithm: sha256WithRSAEncryption
         6e:f0:fc:d5:d1:24:21:06:68:59:46:66:42:a9:b5:84:9a:54:
         b2:f1:cf:93:e7:b1:1f:55:e7:25:6f:a2:c1:e1:82:bf:79:ab:
         69:e5:34:fc:93:88:a5:be:2c:9d:d1:14:48:4a:2d:2e:7a:3e:
         da:8a:8c:8c:51:1b:26:b5:b8:cd:11:f8:d5:a5:b8:bd:79:84:
         16:0a:7a:0c:48:e3:b9:49:4d:95:59:1f:4b:6b:39:60:95:d6:
         b8:69:ec:92:d0:9c:42:1f:40:c8:f3:5a:9a:66:08:7d:2e:96:
         82:5f:7f:e9:f0:ef:30:79:0b:2c:ae:82:86:4d:de:17:2a:cf:
         5c:8f:e6:69:05:3e:b0:a3:65:7a:a3:ee:b9:8b:0f:01:4b:1b:
         a5:08:5e:0f:9e:54:ff:52:a3:d8:0d:5b:d3:c2:48:d0:72:8f:
         bc:67:d6:dc:65:64:f2:4f:5e:c8:38:ce:04:4b:7d:f0:f8:c3:
         c4:d2:c8:90:25:f7:03:58:cd:47:9e:4b:f3:56:9b:8c:40:e9:
         8a:66:76:29:9e:44:2a:10:e4:2c:2d:ba:9f:e8:1d:28:cf:ec:
         7d:be:de:23:15:b5:78:4e:bb:2c:ae:11:22:91:b5:94:28:88:
         7b:37:31:1d:81:68:ed:c8:ad:1c:e2:67:ed:72:18:26:fa:c5:
         56:5c:80:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 20:58:22 2024 by rpki-client on console-ams.rpki-client.org