Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/32D32D34674F0161657AF3F71B992CAF74E2BBB9.cer
File:                     32D32D34674F0161657AF3F71B992CAF74E2BBB9.cer (raw, json)
Hash identifier:          830RdEYTdIJOsxpeinbijTEhgSuTrE13w2THBbRkZ1Y=
Subject key identifier:   32:D3:2D:34:67:4F:01:61:65:7A:F3:F7:1B:99:2C:AF:74:E2:BB:B9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3E61956DEC69C3A28AC44494B60328A9250A64E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/32D32D34674F0161657AF3F71B992CAF74E2BBB9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 27 Jul 2024 19:58:05 +0000
Certificate not after:    Sat 26 Jul 2025 20:03:05 +0000
Subordinate resources:    AS: 268517
                          IP: 45.162.92.0/22
                          IP: 2804:526c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:61:95:6d:ec:69:c3:a2:8a:c4:44:94:b6:03:28:a9:25:0a:64:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 27 19:58:05 2024 GMT
            Not After : Jul 26 20:03:05 2025 GMT
        Subject: CN=32D32D34674F0161657AF3F71B992CAF74E2BBB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7d:ac:47:2a:e7:c7:87:2b:f8:a8:e2:cc:d5:
                    50:52:3e:d1:18:24:8f:bc:99:6c:9d:95:25:f7:1e:
                    af:fd:57:6e:aa:f6:d5:f1:f3:f0:20:fb:ac:af:56:
                    f1:dc:d6:ae:b0:2c:9a:09:14:41:c1:8a:90:e3:5a:
                    44:fd:d9:c9:02:cd:c7:77:86:e6:c2:40:eb:a6:be:
                    61:a3:e3:ff:e6:66:07:e1:ff:e2:03:7b:1d:77:64:
                    f4:99:bf:76:2d:e3:14:17:e1:39:3b:46:73:52:dd:
                    b9:d6:80:5c:c5:88:8e:ef:5b:de:2d:cb:26:ff:64:
                    0e:9c:a0:9f:8b:80:31:02:b5:e0:98:93:82:b9:0f:
                    55:b2:ea:04:21:cc:de:c7:21:a6:25:a5:77:da:b1:
                    f9:cf:b8:8e:4c:9e:e3:d7:d2:d0:1d:48:a6:5e:10:
                    96:1d:67:ac:0c:bc:37:3e:e7:a6:e2:30:32:3a:1e:
                    44:8d:54:65:0c:99:a9:87:24:b3:96:8d:93:28:d6:
                    f8:18:5f:a0:ce:c5:1e:47:6e:34:48:de:95:da:81:
                    41:d7:d4:ad:fa:91:5e:9d:c7:55:4d:52:7e:00:3b:
                    1b:e5:ad:80:3e:dc:6b:25:4a:37:bf:e2:4b:2b:a0:
                    0a:a7:b5:4b:22:7d:73:4c:01:f1:2e:04:f0:e5:93:
                    b5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:D3:2D:34:67:4F:01:61:65:7A:F3:F7:1B:99:2C:AF:74:E2:BB:B9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/32D32D34674F0161657AF3F71B992CAF74E2BBB9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.92.0/22
                IPv6:
                  2804:526c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268517

    Signature Algorithm: sha256WithRSAEncryption
         bb:c8:a9:e2:f8:0c:13:6e:78:27:c0:6b:5b:23:3c:f0:6d:9f:
         f4:e8:c0:b5:be:ce:28:fe:2d:bb:89:3c:f5:f4:77:02:37:73:
         ed:b7:72:13:d0:e6:11:c4:50:e2:a7:63:2a:7f:40:ad:1e:d3:
         6a:f0:68:a9:61:fd:f2:e1:6c:7a:03:01:6e:82:17:46:0a:87:
         26:41:ad:5a:7a:ed:ba:be:b4:ee:52:a6:7f:0a:01:8e:16:86:
         13:fe:40:49:29:1c:5e:8c:3f:82:ca:10:bd:79:8e:4d:f4:de:
         50:d7:69:5f:2a:4c:27:5b:bc:06:1c:41:5e:6a:e1:d8:4b:5d:
         40:f3:9c:2e:8f:a8:44:df:73:0e:2a:3d:3c:18:04:61:89:8d:
         27:2e:db:43:81:cd:de:bb:f8:8b:41:5e:22:84:c1:f0:9f:d0:
         89:7d:8a:63:a7:2e:45:8d:9e:a3:f1:7e:0a:51:d3:9d:58:96:
         40:74:6d:d6:f6:69:d2:25:6d:a5:ef:82:3e:b8:57:43:da:77:
         a7:8a:18:9a:04:7a:39:1b:31:a8:90:be:49:d0:4f:c0:69:7a:
         c8:fe:3d:02:97:67:7e:78:c9:b1:53:d2:4c:8c:62:f1:c5:f6:
         73:3a:d1:20:16:cc:ad:5c:2d:65:83:25:0a:72:71:b5:e5:a1:
         17:b7:8b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----