Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4AF555507F76387C67C13DE0BC2B700D6D33121B.cer
File:                     4AF555507F76387C67C13DE0BC2B700D6D33121B.cer (raw, json)
Hash identifier:          tTmUN7nGjiaDqwAYkq4GqMHma/pndz7NcOMLmVC1mXY=
Subject key identifier:   4A:F5:55:50:7F:76:38:7C:67:C1:3D:E0:BC:2B:70:0D:6D:33:12:1B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6BF09F63AE2A6376E6279AC19D8A37F02EF7C68D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/4AF555507F76387C67C13DE0BC2B700D6D33121B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 02 Sep 2024 18:17:17 +0000
Certificate not after:    Mon 01 Sep 2025 18:22:17 +0000
Subordinate resources:    AS: 267316
                          IP: 45.232.60.0/22
                          IP: 2804:4b94::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 20:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f0:9f:63:ae:2a:63:76:e6:27:9a:c1:9d:8a:37:f0:2e:f7:c6:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  2 18:17:17 2024 GMT
            Not After : Sep  1 18:22:17 2025 GMT
        Subject: CN=4AF555507F76387C67C13DE0BC2B700D6D33121B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:23:ac:39:65:83:a1:11:34:37:48:c6:39:6c:
                    b1:50:24:8e:1a:02:f8:0b:15:d1:b4:63:1f:a3:0a:
                    3d:22:2b:fa:cd:8b:b1:65:82:c8:a0:b0:d6:41:ae:
                    46:f4:f8:07:95:5f:ca:47:58:80:8e:97:ed:bb:b3:
                    c5:81:a6:92:f1:32:ce:66:9d:66:73:ad:14:35:fb:
                    17:36:f9:23:bf:a8:7a:4d:2c:5e:c2:03:1f:d1:bb:
                    4e:05:df:ae:cd:84:5f:6d:dd:93:77:d7:97:64:f8:
                    e9:b7:68:c5:8a:aa:46:5a:cb:0b:aa:0e:4e:03:7c:
                    24:e9:f7:ec:86:a9:ea:d2:3a:31:73:bd:87:1e:23:
                    3a:27:09:02:49:66:f3:93:d3:2c:74:21:5e:28:2d:
                    79:96:e7:3e:47:c3:ca:90:c2:73:70:1f:04:22:05:
                    42:33:49:2b:89:39:11:53:b1:39:1c:ae:b7:57:2b:
                    8e:93:fb:e7:c8:53:f3:bc:47:63:67:d3:6d:53:d1:
                    c5:ac:85:61:5d:68:f8:d1:d7:03:f7:3d:a5:1a:60:
                    87:67:6c:60:86:31:d6:6b:ad:56:b5:42:ab:96:8a:
                    43:b6:39:b1:26:31:65:6e:02:af:8e:6e:4d:77:a1:
                    d1:c1:02:0e:b3:b3:22:60:84:c1:32:a5:72:6f:fc:
                    49:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:F5:55:50:7F:76:38:7C:67:C1:3D:E0:BC:2B:70:0D:6D:33:12:1B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/4AF555507F76387C67C13DE0BC2B700D6D33121B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.60.0/22
                IPv6:
                  2804:4b94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267316

    Signature Algorithm: sha256WithRSAEncryption
         8a:89:a3:16:a1:8a:31:e2:16:88:cd:f4:27:b2:00:2d:00:a4:
         4b:24:94:cd:ff:77:86:e7:f8:e2:71:1e:4b:4e:b8:b1:4f:e3:
         92:32:b9:2c:80:14:36:13:44:66:44:e8:c2:1b:73:f3:ff:98:
         4e:53:db:83:cd:24:65:47:fe:41:46:86:e3:3c:c2:b9:ff:d5:
         5c:97:e7:13:cc:a5:98:78:0d:63:91:52:1d:5f:82:fd:7d:b0:
         75:cd:e2:5f:d5:c8:44:5a:fe:08:69:e5:83:2a:75:c1:5e:d3:
         3e:da:05:66:3b:36:d9:f2:b8:10:ec:db:4e:98:6e:77:42:bf:
         b2:f9:95:3f:8c:ba:2b:76:f5:12:17:2c:39:5d:43:02:ee:a9:
         c5:9e:4e:e9:ae:ca:b5:ab:ba:31:d1:50:07:a8:b5:18:48:1e:
         ff:49:cf:64:25:b7:65:47:9f:dd:e7:9d:6d:40:f0:39:38:a2:
         d5:4d:ae:87:ee:8b:42:a7:fd:a3:f7:d0:29:48:19:63:fb:31:
         af:84:65:d9:53:ea:ae:14:7e:3c:1d:99:6a:f6:35:70:6e:34:
         08:19:c2:40:45:8e:bd:77:c9:de:05:ce:0b:52:c4:43:1c:c8:
         55:1a:8a:91:e2:fc:47:a6:1c:93:1b:b3:55:21:82:a8:cb:fc:
         8f:e7:64:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:55:49 2025 by rpki-client