Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer
File:                     4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer (raw, json)
Hash identifier:          XouQHQNHJi/pPTt1kcfHZo+PBbJKHyPTP5pnU1dECv0=
Subject key identifier:   4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       14E0B1DBFC50A986437A2C5F6086FACCCC622B31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 23:18:02 +0000
Certificate not after:    Thu 05 Mar 2026 23:23:02 +0000
Subordinate resources:    AS: 262315
                          IP: 177.124.24.0/22
                          IP: 2804:7b8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 20:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e0:b1:db:fc:50:a9:86:43:7a:2c:5f:60:86:fa:cc:cc:62:2b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 23:18:02 2025 GMT
            Not After : Mar  5 23:23:02 2026 GMT
        Subject: CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e8:55:19:00:0c:49:e1:f2:80:ff:40:00:49:
                    10:87:e7:51:5c:93:67:8e:32:dd:45:09:4b:e3:9a:
                    76:29:b6:47:26:89:5e:9f:70:06:89:34:1b:be:84:
                    2f:26:88:ae:6f:8f:b7:93:00:b0:53:58:17:bb:00:
                    fb:21:10:5d:75:f5:d0:1d:61:20:53:05:b3:e3:a5:
                    00:27:83:36:8a:24:26:9c:21:9a:ae:c4:65:fd:da:
                    f6:16:b4:84:27:c2:11:9d:ab:3b:e7:c6:81:9b:e0:
                    0a:17:f7:67:66:9b:e7:8b:57:6f:00:f5:d2:36:20:
                    e4:c7:ea:43:6a:4c:2f:5e:f0:a4:e7:46:61:93:5e:
                    21:86:de:07:88:40:a0:c1:56:be:dc:77:f9:14:43:
                    ac:34:e0:2c:e0:ed:98:ba:0c:ad:95:cb:54:d8:6b:
                    04:a7:74:05:0e:22:3c:fd:f2:c6:3a:14:9b:46:f4:
                    f1:a3:d1:85:eb:72:62:85:7f:c7:c0:33:85:a8:86:
                    b2:0f:1a:8d:d9:9f:6d:81:cb:29:72:7e:b9:44:ae:
                    31:90:a4:b0:2d:0f:6c:7a:21:eb:24:2a:fc:b5:22:
                    1c:8d:20:3c:6b:13:b7:47:36:77:17:0f:b9:f4:96:
                    af:1b:db:a1:28:b2:a6:ae:4f:d1:1b:be:09:7f:0f:
                    10:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.24.0/22
                IPv6:
                  2804:7b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262315

    Signature Algorithm: sha256WithRSAEncryption
         5a:28:d3:fb:21:59:0c:1a:74:92:d0:75:82:f2:d6:47:51:4d:
         63:b5:c2:75:81:3c:5c:67:a3:97:11:30:ce:cb:86:20:3e:10:
         b3:2a:a5:38:3c:89:bd:c7:93:e2:3a:bd:12:0f:44:c2:14:85:
         71:29:f3:d5:f4:1c:e9:7d:0f:be:1c:0e:a6:60:8f:7d:f4:1e:
         ea:51:a6:f6:7e:9e:13:dc:f6:72:17:5a:a9:ad:b6:a8:c9:e9:
         cf:4a:1d:f3:b0:77:88:ca:4a:38:8c:87:65:dc:37:11:2a:3e:
         fb:74:cd:fa:5c:bd:20:f2:46:f7:94:9e:1f:8d:b0:f0:ea:77:
         53:bb:3b:68:28:eb:c6:14:12:98:99:18:1b:d5:21:de:b1:91:
         75:3c:f3:2e:02:bc:a6:5d:2d:4e:88:10:44:fe:c7:e7:af:08:
         90:93:bb:85:4e:69:88:3e:e1:39:49:8a:8b:01:0f:61:ea:46:
         43:84:e6:84:44:88:bf:5d:7b:15:bf:b6:b0:2c:f1:73:ed:07:
         1b:a5:69:87:5c:71:b5:bb:56:24:5c:0a:a8:5c:e6:a0:32:3d:
         12:9d:57:d2:cf:b9:5a:aa:26:3d:2d:c1:93:06:a3:9c:cf:1a:
         aa:ec:4e:01:b6:5c:e7:c0:3e:a1:2b:a9:2c:fd:95:ea:6a:6c:
         38:49:49:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:04:51 2025 by rpki-client