Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.cer
File:                     45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.cer (raw, json)
Hash identifier:          F6aYyGrBF3NmC2CjhnoKN31QY+7eRWDtkvueofOR/m0=
Subject key identifier:   45:E4:3D:2A:72:EE:C8:9D:0C:8D:64:8B:E1:C5:D8:5B:00:9E:B2:16
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4BBE19E5AA68212E2E0FDC5F38D6D5DBA54FFCD2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 May 2024 13:13:48 +0000
Certificate not after:    Wed 28 May 2025 13:18:48 +0000
Subordinate resources:    AS: 269413
                          IP: 45.186.60.0/22
                          IP: 2804:6434::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:be:19:e5:aa:68:21:2e:2e:0f:dc:5f:38:d6:d5:db:a5:4f:fc:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 29 13:13:48 2024 GMT
            Not After : May 28 13:18:48 2025 GMT
        Subject: CN=45E43D2A72EEC89D0C8D648BE1C5D85B009EB216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9b:b5:0e:d0:6d:b6:7d:39:04:9d:2b:3e:77:
                    2b:2a:e5:d2:ce:5c:03:a9:de:a8:f9:8b:82:74:84:
                    8f:fc:b8:e6:8e:e2:da:58:fe:89:de:86:64:33:6a:
                    29:85:bd:5b:71:43:ba:9e:cc:2f:25:b1:8c:3d:69:
                    b6:85:a2:c7:8b:bf:e1:03:5c:1f:80:ea:12:08:be:
                    65:fc:b4:59:ee:ba:6b:47:06:a3:fb:fd:64:f9:6a:
                    81:c5:ea:29:25:99:19:81:47:14:f1:ab:94:f9:bd:
                    37:b0:a8:81:08:e8:07:f3:ab:19:ac:77:f4:27:fd:
                    20:f8:52:07:d6:b4:04:f9:b0:72:6e:8a:9b:2e:e8:
                    aa:3f:ee:35:6a:b4:51:00:2f:7c:12:86:f1:60:36:
                    6f:ba:a7:7b:be:9a:74:65:7d:df:9d:f0:c1:1e:0a:
                    29:c3:39:46:f1:63:53:cb:7a:25:36:87:4c:19:dd:
                    99:38:a4:56:30:9b:72:63:94:6d:62:06:ed:ad:0b:
                    4c:bf:59:4a:94:6d:ce:b5:c0:e3:3f:dc:06:68:92:
                    4c:43:c8:ab:8d:76:b6:cb:c1:ba:6a:30:3f:ee:8b:
                    c4:a5:da:05:85:c3:7b:f4:ab:8d:5a:9d:83:10:16:
                    4d:d4:22:bb:48:9e:05:9a:e6:5a:f8:93:fa:63:ad:
                    3f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:E4:3D:2A:72:EE:C8:9D:0C:8D:64:8B:E1:C5:D8:5B:00:9E:B2:16
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3JLhzfJmGgVkZd4hkCYsuuzU9AeoPSzXLBg26z7rNS8o/0/45E43D2A72EEC89D0C8D648BE1C5D85B009EB216.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.60.0/22
                IPv6:
                  2804:6434::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269413

    Signature Algorithm: sha256WithRSAEncryption
         90:4b:5b:41:06:28:82:f7:a5:2b:65:f8:c6:d2:50:ea:61:2f:
         29:b2:dc:1c:67:6b:58:d9:48:f3:4e:13:b9:e6:83:17:48:e3:
         dc:08:91:56:66:1a:cf:17:67:83:ae:75:9e:34:a2:27:5b:f5:
         41:56:2d:05:17:3b:a3:e1:36:3b:4b:e7:fa:e1:3b:03:a3:c9:
         60:a1:72:d5:82:fe:72:53:b0:2b:d2:a9:e1:1a:52:25:ef:80:
         e5:b5:99:1b:db:16:55:2c:c1:1e:c7:33:48:12:28:56:29:b0:
         9c:b4:69:24:87:27:67:ea:27:54:52:05:77:7d:6c:5a:80:26:
         77:4b:e9:4b:aa:95:3b:02:58:16:32:a8:8b:1f:f1:5c:8e:e4:
         1d:3a:1e:c6:8b:8f:fb:8b:90:05:8f:37:b2:8e:69:6a:56:27:
         91:a5:cc:51:18:a3:bb:50:e8:09:a8:1b:40:ad:da:75:b9:97:
         0d:3b:18:54:c9:84:9f:51:f3:99:b7:07:bb:0f:87:e7:7e:c3:
         8e:ae:fd:2e:58:5e:bf:95:cd:63:68:40:e4:91:c6:82:71:dd:
         23:c7:d9:73:aa:2d:56:c1:11:3d:83:4d:c5:66:5f:57:d9:81:
         99:ee:b8:db:fa:93:57:ad:fc:cb:76:64:e7:f3:82:af:62:cc:
         33:de:f7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:07 2025 by rpki-client