Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4A2574393B503DE41274B86A7310E0272B6E4C75.cer
File:                     4A2574393B503DE41274B86A7310E0272B6E4C75.cer (raw, json)
Hash identifier:          kfiELZtWhQ3R/5R7oGXMVbeKvmgZqabpp93g357Jyv0=
Subject key identifier:   4A:25:74:39:3B:50:3D:E4:12:74:B8:6A:73:10:E0:27:2B:6E:4C:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       733AF439185898D004AAED015A6C39C802C02BF1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/4A2574393B503DE41274B86A7310E0272B6E4C75.mft
caRepository:             rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Nov 2024 13:05:52 +0000
Certificate not after:    Tue 04 Nov 2025 13:10:52 +0000
Subordinate resources:    AS: 267311
                          IP: 45.233.124.0/22
                          IP: 2804:4b84::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3a:f4:39:18:58:98:d0:04:aa:ed:01:5a:6c:39:c8:02:c0:2b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  5 13:05:52 2024 GMT
            Not After : Nov  4 13:10:52 2025 GMT
        Subject: CN=4A2574393B503DE41274B86A7310E0272B6E4C75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2d:ba:74:b0:86:a2:61:d6:6a:f0:2c:08:f1:
                    8a:24:ab:c0:d9:e5:31:da:f3:63:a3:db:30:83:bc:
                    d3:46:50:77:18:4e:b4:4c:8b:84:f8:ab:1e:d5:25:
                    61:5f:82:ad:42:c5:d7:87:35:6f:87:da:a3:04:93:
                    d1:66:b1:e7:39:f9:15:c4:ca:a0:cf:43:12:7f:a4:
                    47:67:c9:52:d7:4f:bb:25:eb:52:77:0c:5f:25:c8:
                    66:00:b4:3c:a3:c6:69:8c:0e:08:06:9c:2e:20:88:
                    87:58:98:c6:d3:d0:5e:6f:ee:d8:e3:27:b4:b1:44:
                    29:90:30:76:25:72:e7:ed:59:d4:19:c0:25:4b:74:
                    67:b2:cd:96:ad:0c:a1:2c:1d:ba:4a:7e:09:89:2d:
                    18:cc:24:b5:e2:78:57:68:22:8d:02:b4:81:89:c7:
                    60:06:8a:2a:80:07:ba:53:9f:a0:01:d9:32:79:4c:
                    fc:7a:a1:24:4c:20:b6:b4:fc:fe:f4:75:61:20:bd:
                    b8:4a:82:6f:54:d6:61:63:8a:13:10:c0:08:07:9f:
                    d1:8c:10:41:45:fd:52:09:68:51:0e:66:56:70:8b:
                    af:5f:5e:77:dc:cc:52:2e:ff:24:b5:0f:d8:cb:05:
                    d4:da:06:38:88:f0:c2:27:3d:95:ce:2b:aa:4a:76:
                    33:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:25:74:39:3B:50:3D:E4:12:74:B8:6A:73:10:E0:27:2B:6E:4C:75
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/99fRWK3KHYAnyGMGFayYV77LyeZwJ4ffr1G8i5fYbAVS/0/4A2574393B503DE41274B86A7310E0272B6E4C75.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.124.0/22
                IPv6:
                  2804:4b84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267311

    Signature Algorithm: sha256WithRSAEncryption
         1e:5e:3a:7c:7c:ef:0d:d9:c7:cc:8f:68:01:4a:bf:39:ea:df:
         30:fb:04:5f:60:cd:2e:b3:dd:7e:3f:60:76:86:88:11:0e:b2:
         7f:1c:02:0d:c7:06:78:19:49:1a:e6:a5:5d:ab:b9:51:45:88:
         95:55:38:47:ea:f6:72:b7:68:33:b6:5b:bb:dd:f9:de:d1:98:
         b3:93:09:ab:64:56:ee:dd:4e:7b:10:66:b0:4c:af:a8:5c:c9:
         d2:fc:83:80:80:fc:3f:93:07:91:45:40:2a:47:e9:0f:3e:72:
         f3:7b:5c:00:9f:1e:0b:da:88:d1:6d:c8:eb:a1:10:eb:48:77:
         02:4f:ce:53:28:ad:cc:76:3a:ce:71:06:f9:0e:7a:3c:6b:85:
         90:89:fb:80:23:5a:a4:3f:b5:00:47:10:8b:77:10:cd:69:c6:
         09:ed:a4:90:30:00:4c:d4:f9:15:f1:ee:36:23:ea:77:fe:75:
         e2:30:5a:f7:3a:0e:19:09:94:be:7a:ef:8e:88:cc:ec:ad:1a:
         a6:bc:be:6a:85:0a:75:69:ae:c1:1a:e6:f8:21:d7:e0:d1:9b:
         46:e9:f1:43:3f:36:e3:39:71:bc:1f:82:f3:ec:8b:e5:1e:07:
         c3:c9:aa:e6:2f:4f:80:b1:26:29:ca:48:a5:cd:43:e6:c9:a4:
         77:7f:91:cf
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUczr0ORhYmNAEqu0BWmw5yALAK/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMDUxMzA1NTJaFw0yNTExMDQxMzEwNTJaMDMxMTAvBgNV
BAMTKDRBMjU3NDM5M0I1MDNERTQxMjc0Qjg2QTczMTBFMDI3MkI2RTRDNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Lbp0sIaiYdZq8CwI8Yokq8DZ
5THa82Oj2zCDvNNGUHcYTrRMi4T4qx7VJWFfgq1CxdeHNW+H2qMEk9Fmsec5+RXE
yqDPQxJ/pEdnyVLXT7sl61J3DF8lyGYAtDyjxmmMDggGnC4giIdYmMbT0F5v7tjj
J7SxRCmQMHYlcuftWdQZwCVLdGeyzZatDKEsHbpKfgmJLRjMJLXieFdoIo0CtIGJ
x2AGiiqAB7pTn6AB2TJ5TPx6oSRMILa0/P70dWEgvbhKgm9U1mFjihMQwAgHn9GM
EEFF/VIJaFEOZlZwi69fXnfczFIu/yS1D9jLBdTaBjiI8MInPZXOK6pKdjOrAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRKJXQ5O1A95BJ0
uGpzEOAnK25MdTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOTlm
UldLM0tIWUFueUdNR0ZheVlWNzdMeWVad0o0ZmZyMUc4aTVmWWJBVlMvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzk5
ZlJXSzNLSFlBbnlHTUdGYXlZVjc3THllWndKNGZmcjFHOGk1ZlliQVZTLzAvNEEy
NTc0MzkzQjUwM0RFNDEyNzRCODZBNzMxMEUwMjcyQjZFNEM3NS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLel8MA0EAgACMAcDBQAoBEuEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQULzANBgkqhkiG9w0BAQsFAAOCAQEAHl46fHzvDdnHzI9o
AUq/OerfMPsEX2DNLrPdfj9gdoaIEQ6yfxwCDccGeBlJGualXau5UUWIlVU4R+r2
crdoM7Zbu9353tGYs5MJq2RW7t1OexBmsEyvqFzJ0vyDgID8P5MHkUVAKkfpDz5y
83tcAJ8eC9qI0W3I66EQ60h3Ak/OUyitzHY6znEG+Q56PGuFkIn7gCNapD+1AEcQ
i3cQzWnGCe2kkDAATNT5FfHuNiPqd/514jBa9zoOGQmUvnrvjojM7K0apry+aoUK
dWmuwRrm+CHX4NGbRunxQz824zlxvB+C8+yL5R4Hw8mq5i9PgLEmKcpIpc1D5smk
d3+Rzw==
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:00:00 2024 by rpki-client on console-ams.rpki-client.org