Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3846770C5A2C09E6C68AFCA43DAB84BA33310EDF.cer
File:                     3846770C5A2C09E6C68AFCA43DAB84BA33310EDF.cer (raw, json)
Hash identifier:          PxgR0IpIAuiDD7keYpwUyz3l/7gk6mNMUHLNoGdlT94=
Subject key identifier:   38:46:77:0C:5A:2C:09:E6:C6:8A:FC:A4:3D:AB:84:BA:33:31:0E:DF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       70BFC1D687AE7431B7CD423275775055281D9CED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A5c1bUpyFafcmHNR8howA865KFe9E9Jk3Nd2uVc8qNDy/0/3846770C5A2C09E6C68AFCA43DAB84BA33310EDF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A5c1bUpyFafcmHNR8howA865KFe9E9Jk3Nd2uVc8qNDy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Oct 2024 21:45:11 +0000
Certificate not after:    Wed 29 Oct 2025 21:50:11 +0000
Subordinate resources:    AS: 270848
                          IP: 179.43.24.0/22
                          IP: 2804:7258::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:bf:c1:d6:87:ae:74:31:b7:cd:42:32:75:77:50:55:28:1d:9c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 30 21:45:11 2024 GMT
            Not After : Oct 29 21:50:11 2025 GMT
        Subject: CN=3846770C5A2C09E6C68AFCA43DAB84BA33310EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:44:9e:e5:7f:2e:65:e4:a7:c3:62:ce:8f:83:
                    05:e0:cb:66:14:61:82:c4:6a:2d:48:86:d4:dc:3d:
                    42:23:b6:9b:42:95:4f:53:c7:41:27:40:8a:32:9e:
                    81:1a:53:6d:d7:7c:75:62:06:cf:ae:3c:67:ed:ec:
                    36:63:1e:8f:57:63:ab:8d:32:24:ed:b8:99:51:6d:
                    68:1c:cb:c6:3e:5d:eb:46:3e:86:ae:7c:e9:72:80:
                    80:13:2a:29:ac:7a:b3:1d:82:0e:7e:bb:ac:85:c3:
                    9f:df:ea:19:11:47:94:8b:45:62:8d:6a:24:cb:5b:
                    eb:67:d5:60:96:66:fe:7b:9f:05:6a:2e:f1:77:e9:
                    44:2d:d6:35:e6:93:4b:98:f3:91:43:d1:dd:a1:8c:
                    7a:69:7a:0b:46:72:a7:66:8a:af:3a:54:07:d3:a3:
                    a8:92:4c:d8:18:a3:08:00:f1:3d:75:ff:04:42:41:
                    71:0e:95:d1:e7:77:a9:e3:4f:6f:72:7d:01:c0:24:
                    55:38:82:04:87:13:fc:19:cf:13:da:ec:be:f4:0e:
                    29:bc:c1:8a:29:62:c8:b9:e7:09:42:f3:cc:c0:7c:
                    59:48:eb:d7:7c:47:1f:1d:2a:ab:b4:9b:5c:ce:ed:
                    c8:be:3b:64:36:33:bc:eb:94:c4:df:1a:04:dd:16:
                    f8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                38:46:77:0C:5A:2C:09:E6:C6:8A:FC:A4:3D:AB:84:BA:33:31:0E:DF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A5c1bUpyFafcmHNR8howA865KFe9E9Jk3Nd2uVc8qNDy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A5c1bUpyFafcmHNR8howA865KFe9E9Jk3Nd2uVc8qNDy/0/3846770C5A2C09E6C68AFCA43DAB84BA33310EDF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.24.0/22
                IPv6:
                  2804:7258::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270848

    Signature Algorithm: sha256WithRSAEncryption
         0e:57:61:aa:75:e5:f8:e4:2a:95:fe:d7:3c:de:78:e0:14:df:
         e2:0e:3f:29:1d:1b:f5:d5:6d:d7:ac:d9:b0:72:bb:96:95:16:
         03:13:b8:00:ba:55:d1:63:9e:fd:bc:d9:0d:6f:6d:b1:79:3f:
         7c:b9:2a:e9:e7:f9:97:3f:46:f9:d3:72:92:c6:72:d6:bc:39:
         40:79:1f:5a:b8:61:85:b5:1d:4e:bf:66:38:fd:65:f4:1a:5c:
         d8:5b:98:9e:6a:6e:1c:87:9e:5e:95:e8:0f:9d:30:24:b1:11:
         d5:b1:55:44:4f:66:8c:22:20:1c:08:18:04:8f:0d:fa:82:de:
         9e:b4:89:9c:5d:3c:2f:16:00:64:b6:98:08:3d:9c:aa:16:bf:
         76:72:a4:9b:d8:d3:2f:63:c6:93:89:68:d6:66:a7:50:9b:6a:
         50:b9:11:77:ac:31:46:45:9b:4f:62:f8:bd:c6:f0:36:d0:30:
         92:0f:e0:cf:82:ac:61:0a:35:6e:bd:6c:65:fb:b4:66:46:6d:
         99:48:99:e4:67:fd:b4:70:83:e0:71:aa:c9:9d:12:97:d4:7d:
         84:5a:08:05:7e:33:23:35:35:3b:b0:09:55:63:20:8d:38:56:
         44:4c:7a:ea:ec:39:d4:29:0b:cd:71:1d:97:41:ee:3c:4b:96:
         6e:66:7a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:47 2024 by rpki-client on console-ams.rpki-client.org