Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.cer
File:                     49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.cer (raw, json)
Hash identifier:          rnJ5/k5Ka0TaScGiPnAN5T4ROYqeEY/OE+UooL0aso8=
Subject key identifier:   49:CA:BC:F4:EF:0B:4D:D6:95:18:9C:F0:FD:93:D1:9C:2F:27:2D:B5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       398FBAA884560E7888EE2DE710A5C4BA7521B855
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 Jul 2024 14:45:17 +0000
Certificate not after:    Tue 29 Jul 2025 14:50:17 +0000
Subordinate resources:    AS: 264503
                          IP: 131.255.148.0/22
                          IP: 2804:20a4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:8f:ba:a8:84:56:0e:78:88:ee:2d:e7:10:a5:c4:ba:75:21:b8:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 30 14:45:17 2024 GMT
            Not After : Jul 29 14:50:17 2025 GMT
        Subject: CN=49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ca:ae:1e:3e:f2:5b:72:f6:85:dc:3b:a4:14:
                    0a:17:0d:e4:93:8f:62:d6:cc:38:c4:0a:ad:6c:d6:
                    ef:92:8d:52:3f:d6:cf:23:cf:fa:72:33:1c:7c:07:
                    cc:a6:98:e2:54:17:98:d1:b9:68:a5:42:d1:31:46:
                    48:c1:74:aa:bb:14:37:27:19:8b:8e:cb:ec:ff:8e:
                    d3:01:7f:50:af:55:49:64:d6:81:39:c4:44:d8:86:
                    d7:df:02:a3:38:82:f0:ad:d1:07:c7:37:df:79:5f:
                    c0:45:72:b8:cf:70:dd:64:6b:4c:c4:c6:d3:78:4a:
                    fc:00:41:7f:55:2b:72:ff:62:05:12:83:63:00:89:
                    76:c3:b6:b7:a7:20:11:44:83:f1:51:df:62:f8:8c:
                    89:e7:9f:28:70:9a:5b:c3:ed:32:27:ee:b8:e8:c6:
                    90:59:21:ce:7a:bf:6c:35:14:43:0b:8b:4f:53:ab:
                    4c:20:1f:34:05:77:37:f9:9b:f1:f8:1e:20:4c:03:
                    d1:1b:ec:61:bc:9b:74:4f:00:22:79:5e:02:7c:56:
                    0d:1b:44:21:33:63:79:98:b7:80:dc:40:0e:73:11:
                    31:83:46:6f:1e:28:16:fa:ab:9a:87:c5:5f:d6:c9:
                    d8:a3:b5:fa:20:f0:9b:b2:2a:d8:8b:75:22:bf:95:
                    74:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:CA:BC:F4:EF:0B:4D:D6:95:18:9C:F0:FD:93:D1:9C:2F:27:2D:B5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.148.0/22
                IPv6:
                  2804:20a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264503

    Signature Algorithm: sha256WithRSAEncryption
         38:af:da:51:f1:57:56:d9:59:43:8e:fa:12:46:9d:69:f6:20:
         69:48:62:5e:88:c7:e8:e3:ed:80:5b:47:d8:9c:1f:cb:82:bf:
         2f:f5:ed:ac:7e:7f:5d:34:7d:cd:0c:e3:c9:91:2f:9c:4e:bd:
         ce:5e:ff:58:e6:91:01:f8:a5:20:b1:d6:26:2b:c0:54:f1:fb:
         e2:4a:b4:9d:45:bb:de:c3:fa:2d:ad:ea:f3:dc:67:de:7a:24:
         b6:b9:86:2e:33:9e:c2:92:14:f0:08:59:42:a5:30:60:52:a3:
         f5:26:22:f9:39:7f:30:5c:59:b8:79:c6:3a:1d:63:b0:8c:de:
         e7:4b:69:8c:e8:dc:f2:6b:4f:9e:85:f4:65:07:3b:2a:10:c5:
         a4:d7:d8:6e:88:70:0e:98:42:ca:de:87:fd:62:d8:81:42:24:
         76:0c:3b:36:bc:95:62:15:30:e0:51:db:c8:66:77:bd:c8:cb:
         56:cf:22:c0:0e:16:26:21:12:38:a4:90:b4:dd:f2:33:9b:fe:
         ff:fc:33:9a:57:01:0a:85:b7:9b:b0:92:04:f9:1a:ab:96:e2:
         4e:b0:4a:b9:f9:fe:14:d0:b0:d8:5f:14:bf:87:38:cf:16:f3:
         d9:74:24:ec:03:4c:f7:a1:2b:88:ed:cc:0f:ee:a8:d5:b6:89:
         33:a3:f8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:25 2024 by rpki-client on console-fra.rpki-client.org