Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.cer
File:                     4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.cer (raw, json)
Hash identifier:          jhO2xe04W3SxJr7CyJ6Q6XuM89f/oVhiRSROFq/zP0U=
Subject key identifier:   44:91:F6:1A:33:92:F5:8D:CF:5B:33:41:1A:D0:EC:43:29:C8:AF:B7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       161147F90B2165D32B6587C5BF630E9582BD22AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jun 2024 12:42:39 +0000
Certificate not after:    Tue 24 Jun 2025 12:47:39 +0000
Subordinate resources:    AS: 263988
                          IP: 138.255.188.0/22
                          IP: 2804:28f0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:11:47:f9:0b:21:65:d3:2b:65:87:c5:bf:63:0e:95:82:bd:22:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 25 12:42:39 2024 GMT
            Not After : Jun 24 12:47:39 2025 GMT
        Subject: CN=4491F61A3392F58DCF5B33411AD0EC4329C8AFB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:83:a4:67:fe:5d:75:bd:06:cd:38:c7:47:f3:
                    f3:ca:f7:cf:14:84:be:58:9a:02:69:04:ed:33:36:
                    4e:74:5b:2c:90:ba:90:3d:10:28:80:3b:5a:18:86:
                    bd:e6:ed:a7:3d:e0:cd:cb:4b:19:6a:53:91:cd:e1:
                    1b:24:6b:4c:1b:04:bd:29:bb:70:63:86:24:41:83:
                    8a:89:36:1c:5f:1e:6b:a1:f9:ec:d5:db:06:d3:51:
                    c7:a5:24:9a:95:68:29:86:44:8e:f0:7a:f6:f1:4f:
                    3f:d4:4a:82:44:ff:b6:84:07:00:31:cb:c0:d2:90:
                    e2:79:99:67:b5:b0:28:fd:01:b2:88:9c:d6:47:b9:
                    2c:58:a8:24:e3:0b:b1:26:8a:5d:2e:6c:d4:94:6b:
                    0f:49:d5:c7:b7:7b:0c:e3:b7:d5:79:86:dd:36:9a:
                    82:54:4c:8f:81:10:c7:04:e5:5b:3e:20:ef:27:3b:
                    4b:2a:21:db:c5:d4:74:c1:b4:47:f4:a5:df:ad:ba:
                    d7:72:21:e9:af:38:08:dc:7f:ce:23:64:54:57:fa:
                    22:ff:b5:62:53:ab:15:e7:c9:e0:fd:b8:ee:54:7e:
                    92:d8:35:97:7b:b6:b4:87:96:d4:d8:ba:be:1e:6a:
                    a3:91:a6:d4:4a:c2:f2:91:62:29:2b:5a:9f:dc:80:
                    c2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:91:F6:1A:33:92:F5:8D:CF:5B:33:41:1A:D0:EC:43:29:C8:AF:B7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FNCwqYPHcAUEPeamoS7m9XC3UJi9Lktu5v9QywXFtHAs/0/4491F61A3392F58DCF5B33411AD0EC4329C8AFB7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.188.0/22
                IPv6:
                  2804:28f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263988

    Signature Algorithm: sha256WithRSAEncryption
         a0:24:fa:fd:e3:fe:11:3b:b2:ca:2d:4a:06:8f:10:3f:99:ce:
         88:6e:de:c3:62:32:b8:34:47:32:d6:7e:91:66:84:18:7b:7a:
         3f:e2:06:fb:4c:89:c6:89:a4:c7:a8:31:fa:a2:49:bd:e2:fe:
         bf:3a:b6:8e:78:e9:a5:8d:5f:af:40:96:6b:d1:82:a0:93:95:
         63:e2:f0:26:ca:f5:40:be:d3:dd:99:2e:0e:0a:d2:32:d4:7a:
         e8:f1:3d:f2:3d:b4:5f:f9:86:f7:c2:dc:43:70:ab:9b:9e:0b:
         94:cf:47:a7:b5:01:b9:90:f0:d7:7e:50:26:bd:59:fc:95:8c:
         9d:ad:3e:7b:e7:36:fe:4f:bf:39:99:dc:90:fc:b9:23:dd:55:
         2a:0f:59:5c:9c:2f:5b:50:1a:68:98:93:5b:f3:55:cd:5c:a2:
         8e:fc:d0:08:6c:c3:c0:6b:6c:5d:2c:8a:34:3f:d0:f4:d2:6b:
         c0:1d:cf:56:ff:2c:38:b0:f7:d9:4b:83:e6:ac:ff:32:64:e6:
         af:a0:eb:4c:ff:0e:e6:f4:f7:fe:89:f8:0e:35:c7:6d:30:9f:
         4e:91:e0:74:27:54:4a:33:cf:ec:21:05:f8:a6:3f:ef:f3:79:
         b0:26:31:01:38:56:41:57:d9:45:a1:27:42:1d:53:19:71:7a:
         d8:ee:6b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:02:02 2024 by rpki-client on console-ams.rpki-client.org