Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.cer
File:                     481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.cer (raw, json)
Hash identifier:          6orRnDsdS1iTHY6LtFmcf4/FLcZiFw7R+0TgNmIBtlA=
Subject key identifier:   48:1B:24:AC:65:23:E8:C3:FC:CE:DE:9F:C8:B8:A7:4C:C2:C4:E5:F9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3A944268822D2663AFF08D75AD039C97F97D5004
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:25:54 +0000
Certificate not after:    Wed 02 Apr 2025 18:30:54 +0000
Subordinate resources:    AS: 267248
                          IP: 45.232.20.0/22
                          IP: 2804:4a8c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 01:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:94:42:68:82:2d:26:63:af:f0:8d:75:ad:03:9c:97:f9:7d:50:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:25:54 2024 GMT
            Not After : Apr  2 18:30:54 2025 GMT
        Subject: CN=481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:91:1b:99:a5:e0:00:d5:30:d8:87:09:b5:63:
                    4f:1e:64:f1:88:fc:b2:70:f4:62:27:41:89:a6:51:
                    63:00:69:84:4f:97:00:9d:14:a2:1e:d3:de:76:55:
                    bc:fc:7e:74:49:30:98:8c:50:cb:cc:b8:23:e5:b6:
                    f5:a2:b1:63:76:64:8c:8f:86:7a:89:13:06:6d:cc:
                    2f:34:88:90:dd:7b:68:06:42:a3:32:99:80:7d:c0:
                    6c:35:35:fb:85:7e:50:ec:ef:9a:30:bb:fa:79:69:
                    70:28:c4:ba:1e:98:01:91:d4:ef:98:f3:43:34:1a:
                    63:73:24:a7:f2:dc:cf:89:f2:89:76:e4:97:00:e6:
                    ef:b0:97:0a:e3:5a:09:f3:e9:66:0a:5f:e5:d2:55:
                    20:c9:b0:0e:08:64:b1:30:3a:14:d8:73:be:f2:7f:
                    ee:06:a3:f2:75:0e:a8:a0:90:9a:b1:83:79:8f:76:
                    52:3f:31:a2:70:1c:dd:2e:4a:56:6d:ef:84:f0:2f:
                    1b:ac:eb:35:6b:a4:30:1b:a7:a6:7f:7c:ad:80:f9:
                    fe:ca:5c:30:7c:db:ee:c7:21:bf:9d:9d:3b:38:2d:
                    80:57:f2:4c:b3:2a:4a:28:2c:dc:17:6b:d9:ce:22:
                    1d:93:0a:a4:85:7c:77:d5:e7:01:0d:c6:3e:33:b3:
                    37:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:1B:24:AC:65:23:E8:C3:FC:CE:DE:9F:C8:B8:A7:4C:C2:C4:E5:F9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4BMXt6pXVYueaQZD8qpd1hMEq1RKBGkV3AocBFHRAm8T/1/481B24AC6523E8C3FCCEDE9FC8B8A74CC2C4E5F9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.20.0/22
                IPv6:
                  2804:4a8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267248

    Signature Algorithm: sha256WithRSAEncryption
         59:44:a5:27:58:73:5e:4e:70:16:16:4c:c4:1a:b4:d0:af:51:
         e6:59:5f:26:15:fa:ab:76:d7:12:46:93:1e:e8:4d:2c:6e:8b:
         a4:13:c3:c8:a8:bd:62:10:cf:63:02:9b:14:41:3b:be:1f:da:
         8f:cc:c8:f5:c8:56:d3:48:b1:14:6e:62:e7:bd:c9:1c:41:cc:
         89:1a:85:8a:e8:74:fa:6b:3d:cd:7a:ec:75:3d:79:e7:45:35:
         1f:bb:32:9e:26:c5:f8:f9:73:71:42:39:41:18:07:d7:3d:66:
         94:b3:e0:cd:c0:9b:db:45:69:20:f2:02:d6:4a:12:0c:e5:d5:
         2a:09:e0:02:1f:09:b8:13:e9:5f:82:79:5b:92:6a:5c:4b:f4:
         8d:d0:5e:7e:f3:da:1f:9f:9d:e6:19:55:2c:da:12:dd:b9:be:
         b7:07:eb:ea:fb:ea:ca:53:62:8c:75:97:2e:c7:23:b3:f6:a9:
         e4:d6:db:97:26:42:91:7b:d6:4a:89:c5:41:cf:f6:89:44:7a:
         76:3d:91:2f:1f:6b:1a:f5:74:55:01:22:fd:09:c7:b3:e3:7a:
         ca:f5:f3:d0:c7:d9:3a:cb:55:26:9a:93:74:84:58:df:44:12:
         fc:59:3a:32:b1:80:ed:33:76:1c:cf:86:eb:c3:1f:88:eb:ba:
         35:49:ef:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 00:54:59 2024 by rpki-client on console-fra.rpki-client.org