Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4B29A9A89597A4D4F57700CCA0C13155971D9465.cer
File:                     4B29A9A89597A4D4F57700CCA0C13155971D9465.cer (raw, json)
Hash identifier:          gaE7L0QpjwEJEXzG0djkWh1zEKEaYgQaXlKYElMr+cA=
Subject key identifier:   4B:29:A9:A8:95:97:A4:D4:F5:77:00:CC:A0:C1:31:55:97:1D:94:65
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       74460848D147EBAAF05616E1C040C176B14712A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/4B29A9A89597A4D4F57700CCA0C13155971D9465.mft
caRepository:             rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 23 Nov 2024 14:13:44 +0000
Certificate not after:    Sat 22 Nov 2025 14:18:44 +0000
Subordinate resources:    AS: 271582
                          IP: 45.165.180.0/22
                          IP: 2804:7dc8::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 05:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:46:08:48:d1:47:eb:aa:f0:56:16:e1:c0:40:c1:76:b1:47:12:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 23 14:13:44 2024 GMT
            Not After : Nov 22 14:18:44 2025 GMT
        Subject: CN=4B29A9A89597A4D4F57700CCA0C13155971D9465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5e:fe:45:ce:ba:5d:90:ed:bc:35:b9:d2:3c:
                    42:59:32:f4:94:2b:8d:64:e4:03:cb:9a:18:99:48:
                    06:9c:71:8d:4d:52:c3:63:23:98:8e:2c:e6:a5:93:
                    96:bb:42:43:40:b5:e9:93:56:94:ab:17:cb:84:6d:
                    9a:ec:37:73:a4:65:ae:40:27:fd:cf:1c:a2:93:00:
                    27:1f:15:1c:f0:c8:f4:cb:31:f4:65:49:c4:83:e4:
                    d2:6d:46:ed:11:7b:1f:7e:90:6b:99:f7:97:55:29:
                    db:b9:24:62:96:c9:91:19:a8:b4:da:d2:44:78:31:
                    a3:ca:63:3c:4d:76:2f:85:ad:17:36:a0:24:a2:0f:
                    35:e0:47:38:5a:16:be:5a:a3:14:3f:ad:88:18:a1:
                    ee:65:d8:21:95:96:11:45:aa:8c:ff:c2:f4:47:fc:
                    24:ff:c0:a7:9e:6f:43:5d:2d:2c:3c:36:4b:e1:34:
                    49:e9:f7:7f:86:96:15:7e:b4:31:71:12:4c:9e:56:
                    62:b1:45:b2:90:7a:dc:c6:57:a6:5f:51:98:d8:87:
                    4c:ba:df:51:25:09:b2:70:eb:1b:f5:04:75:c4:0d:
                    23:b1:f7:ef:11:1a:10:7a:dc:f6:dc:65:e8:c3:8e:
                    97:f5:6d:24:a7:0e:32:c3:d6:ce:d3:1d:47:14:6d:
                    ff:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:29:A9:A8:95:97:A4:D4:F5:77:00:CC:A0:C1:31:55:97:1D:94:65
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/W8b78FXvkQWAuh15gihpr9XRrm3JAE7bjHMiZL1DYwA/0/4B29A9A89597A4D4F57700CCA0C13155971D9465.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.180.0/22
                IPv6:
                  2804:7dc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271582

    Signature Algorithm: sha256WithRSAEncryption
         54:43:a0:de:89:e2:0c:aa:21:8f:8d:92:8c:c7:5a:0c:a5:55:
         7e:9c:8f:20:24:63:64:a2:2e:37:01:4c:ed:6e:de:2b:f5:dc:
         04:d4:a9:f8:ce:05:9f:36:c6:e5:9b:eb:a0:56:18:d5:e1:f5:
         2d:d0:07:bc:60:c9:6e:25:4c:7b:5b:06:f2:5a:22:ee:df:04:
         b2:f6:8f:77:37:68:9d:be:b1:26:69:0f:97:7a:0f:85:a8:b2:
         08:ef:c5:84:9c:91:0d:c4:c5:7f:90:6d:5d:bb:6a:2e:b5:33:
         cc:f1:84:5e:5c:b4:b5:a8:41:29:50:4b:9d:4e:18:49:44:90:
         08:e7:64:78:14:89:66:cb:07:32:96:95:98:f3:90:87:e0:0e:
         3e:9b:69:62:48:76:91:c5:fe:4e:44:fd:97:17:d8:f0:1a:e5:
         1b:8b:e4:7d:89:7c:ee:a8:e9:4c:3c:18:0e:d3:30:ee:ba:27:
         bd:c8:f1:76:61:5c:95:cf:d8:a3:6c:7f:9a:ad:27:23:26:7d:
         6b:c3:1d:45:fc:cc:33:27:cd:a8:be:40:ca:5b:70:f9:18:23:
         1c:69:24:05:bf:5b:93:89:e5:00:32:e9:b6:b5:9f:8d:14:be:
         f4:bb:20:07:9d:00:3a:70:40:2c:8a:e4:c7:aa:22:5b:60:6a:
         c5:41:9a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:26:02 2024 by rpki-client on console-ams.rpki-client.org