Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4C0E5583F85FD92E5B21D697990054A242CE2E03.cer
File:                     4C0E5583F85FD92E5B21D697990054A242CE2E03.cer (raw, json)
Hash identifier:          BG7prOv570TurOg2VYz37BO7Dayw/rM1FlXSHNXgihk=
Subject key identifier:   4C:0E:55:83:F8:5F:D9:2E:5B:21:D6:97:99:00:54:A2:42:CE:2E:03
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       780F95ADA59E8599D068159BEE1EA2C2F7E25609
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/4C0E5583F85FD92E5B21D697990054A242CE2E03.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 31 Jan 2025 17:57:19 +0000
Certificate not after:    Fri 30 Jan 2026 18:02:19 +0000
Subordinate resources:    AS: 267027
                          IP: 45.227.168.0/22
                          IP: 2804:4708::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 22:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:0f:95:ad:a5:9e:85:99:d0:68:15:9b:ee:1e:a2:c2:f7:e2:56:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 31 17:57:19 2025 GMT
            Not After : Jan 30 18:02:19 2026 GMT
        Subject: CN=4C0E5583F85FD92E5B21D697990054A242CE2E03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:58:49:8b:5f:21:b2:a7:68:fc:72:36:cc:f7:
                    ff:5f:6f:ce:50:4f:27:02:c3:1b:d3:6e:10:0f:61:
                    bc:c6:56:b2:78:bb:a8:04:52:c1:0d:59:ef:2b:c0:
                    ee:ef:ca:96:ae:e1:fc:2b:63:9b:d3:19:f2:31:7a:
                    a8:4c:eb:01:19:b3:ce:29:fd:a6:85:4c:b9:93:51:
                    b7:62:67:9c:fc:8e:47:bc:f7:16:0e:4e:7c:4f:0e:
                    71:98:6f:e2:76:76:71:b6:9b:0f:be:0d:af:83:ba:
                    28:52:34:52:21:51:3e:b3:84:ac:1e:84:b6:45:1a:
                    d0:91:73:36:2d:84:3b:2a:c3:e5:4c:d0:5a:ff:2d:
                    0d:7d:90:25:93:70:b8:c6:07:53:56:ec:49:63:86:
                    2d:71:5c:66:d4:f8:d6:b4:f5:48:5d:ac:57:3b:28:
                    88:61:f8:e8:3f:72:35:9c:79:51:c2:c7:c8:9a:cc:
                    0c:6e:3a:a7:a1:e0:1d:47:7b:f8:a5:e2:41:96:f7:
                    d2:82:84:3c:96:10:12:11:04:3e:d8:58:9c:b4:55:
                    c4:88:1a:54:9b:33:c5:a8:14:a6:42:45:bd:7c:ed:
                    2d:27:6c:a6:d7:a3:df:1b:88:ab:45:91:95:65:40:
                    c6:51:4a:6b:92:de:39:d8:8b:bb:50:56:96:9a:a3:
                    6c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:0E:55:83:F8:5F:D9:2E:5B:21:D6:97:99:00:54:A2:42:CE:2E:03
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/4C0E5583F85FD92E5B21D697990054A242CE2E03.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.168.0/22
                IPv6:
                  2804:4708::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267027

    Signature Algorithm: sha256WithRSAEncryption
         93:e8:e6:72:64:c2:dd:54:71:00:94:08:b1:1f:f3:6d:52:97:
         35:e8:13:e2:83:18:ac:45:05:52:ab:86:5c:05:f9:a3:01:c9:
         9d:4c:d3:e2:54:83:23:3e:fa:70:05:b8:78:1a:74:ae:f1:54:
         8e:bb:28:8d:34:88:e9:b4:a0:be:4f:f5:aa:7d:89:21:59:8b:
         05:4c:a7:eb:c3:45:dd:a7:f5:11:4d:67:67:39:b9:68:db:43:
         82:38:e5:7d:09:8a:33:18:bd:9f:0d:a2:3f:4b:22:fa:ab:66:
         1d:d5:a6:37:12:09:d8:0c:3a:7c:f2:a6:c7:5b:f6:c7:c8:1c:
         a3:d3:b9:91:3c:51:82:eb:f4:b8:8c:05:35:55:4c:33:2c:b7:
         b3:03:e6:c9:61:24:04:f0:78:d2:55:21:bc:db:28:db:8f:87:
         b9:7c:ef:96:7e:00:54:63:51:93:5e:76:3f:06:35:84:23:c1:
         3b:13:c6:b2:ac:e2:1f:aa:e5:38:82:2e:0c:c0:fd:e0:df:3e:
         97:65:7f:27:73:d7:5f:d5:8d:c0:f6:91:05:41:7c:ff:c9:24:
         95:d9:e9:2b:a2:1b:80:4d:50:be:aa:34:ed:cf:57:87:b8:a5:
         b2:10:1f:44:d2:86:d8:4f:9c:77:4d:98:cc:39:e9:a6:37:a1:
         ec:99:84:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:29 2025 by rpki-client