Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer
File:                     33F508FEDC25BB4A07EAE9305026C5C6B61952F3.cer (raw, json)
Hash identifier:          IbwPz53fmPHMSIDUQdqjj6Eu4L5GU4mg4PXHJMwyGWE=
Subject key identifier:   33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       44408719FF7964B0681C7F8229E954095B9928B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 19:23:39 +0000
Certificate not after:    Thu 03 Apr 2025 19:28:39 +0000
Subordinate resources:    AS: 266584
                          IP: 45.7.116.0/22
                          IP: 2804:3e44::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 12:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:40:87:19:ff:79:64:b0:68:1c:7f:82:29:e9:54:09:5b:99:28:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 19:23:39 2024 GMT
            Not After : Apr  3 19:28:39 2025 GMT
        Subject: CN=33F508FEDC25BB4A07EAE9305026C5C6B61952F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:42:1b:0f:a4:62:55:bf:17:b9:a8:88:92:1e:
                    33:70:f9:75:84:57:d1:4e:d2:9d:41:2a:88:8b:c4:
                    cc:58:69:f4:45:a1:d0:80:c3:c3:f9:df:aa:e5:a0:
                    9c:3d:d9:9a:20:3d:3c:8c:49:7f:37:92:b7:82:c4:
                    24:cc:58:8f:23:2b:9f:fe:dd:b9:6f:22:c4:08:3a:
                    f3:a8:21:c9:7e:71:47:50:dc:85:ef:7a:85:52:30:
                    8f:56:99:60:d2:4d:e3:a6:fb:02:93:13:a4:d0:d1:
                    e0:e9:62:b9:6b:50:4f:86:e1:cf:38:2e:09:59:c4:
                    6d:27:fa:a6:fe:da:f0:f9:ee:c4:d4:8e:41:3f:28:
                    26:62:d5:aa:9e:99:da:fb:bf:11:a5:51:5f:74:aa:
                    6c:8a:57:50:d5:2b:90:b0:d4:c5:b2:f4:8b:70:f6:
                    a7:d8:13:98:ba:13:f2:8e:02:ea:3b:3c:48:08:37:
                    78:33:f5:ad:2d:ae:ae:b0:86:94:14:d1:c5:f1:25:
                    21:89:4f:1e:73:9e:13:68:cd:3c:76:19:c0:25:a4:
                    d1:c8:0d:f5:c5:f1:ff:e2:72:3b:ff:ef:52:cc:7d:
                    e5:9a:61:1b:b3:f0:be:af:d8:ff:20:c8:5f:16:d0:
                    10:02:25:b7:76:0a:a6:96:f7:d8:25:ad:64:a8:d3:
                    2a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:F5:08:FE:DC:25:BB:4A:07:EA:E9:30:50:26:C5:C6:B6:19:52:F3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3mKazay9XWo7eZjTtQU8oQWvLsTHaNFeanNWZ6TZrtMe/1/33F508FEDC25BB4A07EAE9305026C5C6B61952F3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.116.0/22
                IPv6:
                  2804:3e44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266584

    Signature Algorithm: sha256WithRSAEncryption
         10:86:b6:e6:cc:c1:01:d2:74:83:4c:dc:6b:af:6b:b2:51:a9:
         a4:ba:0d:a8:7c:a2:cd:61:fd:c2:ab:d5:61:5b:dd:e5:e8:50:
         40:02:ad:f6:67:8a:8d:25:84:02:d4:dc:70:32:99:2f:19:d6:
         a6:48:a1:d9:4a:06:e5:df:5c:df:d2:43:0a:c8:94:96:de:2c:
         c4:a1:92:d7:78:2d:a6:e4:d8:ca:78:74:6b:da:55:5a:db:7d:
         1e:85:5a:f2:3e:84:30:c9:99:53:88:e0:ca:18:30:f3:19:10:
         f1:27:e1:08:3b:6d:83:4f:b7:18:35:e9:fd:ea:26:fe:a5:5f:
         44:9b:56:bb:d2:b9:e8:b1:e8:18:a7:3e:54:a2:d6:00:21:0c:
         d4:55:d6:2c:fe:64:19:b8:12:5c:9f:85:61:30:35:95:f1:94:
         51:84:4a:51:88:d0:5a:29:6a:e4:c3:d8:5e:29:c6:1b:2b:d1:
         51:0e:c4:0b:9b:f7:ce:22:c9:bb:d4:24:f5:53:61:7e:88:8d:
         b6:a4:b6:72:eb:05:4f:81:99:95:ca:f2:ac:71:fa:2d:7d:0e:
         23:7a:40:7a:34:53:92:20:95:19:90:c9:10:20:80:75:f7:9d:
         ab:a4:5f:2d:d3:79:91:8d:4e:52:02:72:f9:81:54:47:ff:c7:
         e7:ec:24:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 14:02:02 2024 by rpki-client on console-ams.rpki-client.org