Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.cer
File:                     4329045FF5A88F6B7949093B6FE2C5D28A774010.cer (raw, json)
Hash identifier:          UnFXboeFW7hy3Wc1HgbB1OD96WEd3fgEuK5Dp4pZm/g=
Subject key identifier:   43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       21354D7B64D9CFC165359138DBBDF26F95D0C412
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 19:00:49 +0000
Certificate not after:    Wed 02 Apr 2025 19:05:49 +0000
Subordinate resources:    AS: 263098
                          IP: 167.249.180.0/22
                          IP: 186.208.252.0/22
                          IP: 186.233.92.0/22
                          IP: 2804:176c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 05:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:35:4d:7b:64:d9:cf:c1:65:35:91:38:db:bd:f2:6f:95:d0:c4:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 19:00:49 2024 GMT
            Not After : Apr  2 19:05:49 2025 GMT
        Subject: CN=4329045FF5A88F6B7949093B6FE2C5D28A774010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ce:df:3c:86:4e:ef:60:a8:d8:a9:27:99:72:
                    16:49:49:f0:1e:01:8c:d3:68:0c:25:59:93:5a:c5:
                    31:0d:4d:6c:3b:86:72:d4:bf:1e:00:b9:49:e6:c1:
                    0a:15:34:c8:5e:93:46:a9:87:95:93:32:31:54:56:
                    d2:21:0b:6f:dd:06:50:ca:46:55:91:b2:2d:8c:3d:
                    e3:9d:fc:1d:d9:ff:19:0b:97:de:e9:65:bc:ff:db:
                    19:aa:c2:00:2b:83:7b:e3:98:2c:99:aa:23:75:e4:
                    77:d7:fe:ff:b6:9a:2d:11:34:cd:4e:fe:74:79:15:
                    01:5c:c4:a3:7b:e7:e7:08:c3:be:38:f3:13:18:4b:
                    a2:fa:b9:7e:cb:70:b2:db:76:89:6f:82:b2:de:0b:
                    fa:56:f6:71:6f:7d:c4:25:af:48:df:8d:8b:38:e0:
                    3e:e9:fb:6d:e7:13:8e:3e:3a:34:0a:27:a5:46:07:
                    40:b9:5a:d5:e2:64:ee:6f:e1:49:bf:f3:e5:fe:8d:
                    9f:8e:16:84:09:bb:a3:cc:4b:3d:0b:5a:81:3b:85:
                    72:f2:09:88:cc:ad:21:cc:30:7b:75:cc:e5:a3:a4:
                    f4:37:70:4a:92:da:57:48:e9:32:9d:d5:97:01:af:
                    11:01:91:49:b9:f9:5c:ca:80:90:6c:28:0d:81:f5:
                    b8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:29:04:5F:F5:A8:8F:6B:79:49:09:3B:6F:E2:C5:D2:8A:77:40:10
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpQu2suBiTQ8eTokMNDu2YCD1EEtvmSj7YLwm2wisL7M/1/4329045FF5A88F6B7949093B6FE2C5D28A774010.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.180.0/22
                  186.208.252.0/22
                  186.233.92.0/22
                IPv6:
                  2804:176c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263098

    Signature Algorithm: sha256WithRSAEncryption
         cb:24:c2:5b:2a:5b:18:07:6b:7b:67:72:b7:19:7a:29:dd:a0:
         00:17:d0:26:f4:a6:2f:ae:a8:3a:df:d8:88:1a:20:22:49:22:
         5e:24:06:44:f2:cc:d4:a3:68:8a:c4:62:6e:f9:78:6b:d3:d4:
         27:4a:1a:b9:81:b1:96:93:3d:81:69:3b:de:21:49:91:bf:95:
         15:7c:eb:4c:a1:79:1f:9f:bb:19:d9:cf:90:33:d7:1d:2b:9f:
         6e:b6:52:5e:d9:28:b6:f3:be:06:62:f0:5d:e8:9e:80:9e:0b:
         41:f0:b0:5b:80:f5:a6:4d:cc:a4:93:08:65:75:17:95:d3:be:
         26:3d:ce:d9:56:d1:52:4f:e5:dd:2e:b6:82:c6:23:22:be:d7:
         0e:45:eb:68:43:79:5f:24:7e:95:ee:b5:d8:88:f4:e0:92:78:
         0e:e7:36:6d:3b:d6:0b:f3:01:8d:83:9d:a7:71:c4:8f:d2:ef:
         a0:ac:17:7e:ce:da:84:0c:06:09:c4:29:f9:04:21:1d:6a:54:
         88:d0:27:49:48:a8:e0:4b:b7:bd:9a:6d:3f:a1:82:be:b7:c7:
         97:1d:6d:fa:88:b5:58:94:c6:96:86:89:bf:3c:ad:cb:4e:bf:
         6d:60:9e:03:18:85:cc:1a:0a:1b:53:a2:8d:84:29:94:19:7b:
         a2:6d:7b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 02:59:25 2024 by rpki-client on console-fra.rpki-client.org