Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4CCCD862A7546C62C26C58340CC513A6302DFA2D.cer
File:                     4CCCD862A7546C62C26C58340CC513A6302DFA2D.cer (raw, json)
Hash identifier:          1CvdsMAMmrVZBOVHend7A4i6vgYdoRrfBPkaKs/wOLo=
Subject key identifier:   4C:CC:D8:62:A7:54:6C:62:C2:6C:58:34:0C:C5:13:A6:30:2D:FA:2D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       46639EBE23E690E6DFCC4F1060F597E0E18D8F20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/4CCCD862A7546C62C26C58340CC513A6302DFA2D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 24 Oct 2024 13:38:54 +0000
Certificate not after:    Thu 23 Oct 2025 13:43:54 +0000
Subordinate resources:    AS: 52944
                          IP: 168.205.152.0/22
                          IP: 177.38.56.0/21
                          IP: 201.150.112.0/22
                          IP: 2804:b28::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:63:9e:be:23:e6:90:e6:df:cc:4f:10:60:f5:97:e0:e1:8d:8f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 24 13:38:54 2024 GMT
            Not After : Oct 23 13:43:54 2025 GMT
        Subject: CN=4CCCD862A7546C62C26C58340CC513A6302DFA2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:24:7d:72:93:41:4e:ab:95:8d:8d:9b:9b:39:
                    cb:e6:36:68:30:7e:4b:0d:91:1c:3d:21:9e:96:0b:
                    91:64:df:0d:9e:33:ad:ee:e6:3a:2e:07:ef:97:60:
                    a4:b5:e0:c7:a2:9f:18:3d:cd:28:e3:b8:c0:c5:4f:
                    43:d7:e8:8c:68:6c:0d:96:4e:36:ae:f1:a4:35:12:
                    1f:25:25:cf:c4:00:9d:10:b1:11:ec:ca:18:b0:19:
                    88:3b:63:d8:6f:b8:c8:b3:e2:25:84:d9:d9:07:e3:
                    c7:53:34:ae:87:28:c5:78:9d:c4:94:b8:85:44:58:
                    c5:51:07:ea:39:6a:61:68:5c:30:0a:c0:3b:28:37:
                    f7:84:a9:04:20:ca:7c:4b:8b:b8:75:5d:82:64:1d:
                    cc:75:24:21:89:98:4d:b9:77:71:70:20:2c:ed:79:
                    63:b1:f0:23:cf:7c:09:35:46:14:5c:20:d7:fc:26:
                    d0:ab:f8:23:c0:62:14:12:95:26:d8:10:38:5b:0f:
                    cc:40:0e:d7:ee:8a:dd:4a:24:6a:69:42:91:db:2b:
                    bb:56:f5:22:89:4f:70:c2:93:93:5b:11:a5:39:7e:
                    8d:3f:7a:df:96:cb:52:8d:b8:a2:af:fe:a4:3a:bc:
                    c9:ac:8f:bb:35:6c:6f:c4:49:ce:91:02:43:48:d1:
                    bb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:CC:D8:62:A7:54:6C:62:C2:6C:58:34:0C:C5:13:A6:30:2D:FA:2D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/4CCCD862A7546C62C26C58340CC513A6302DFA2D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.152.0/22
                  177.38.56.0/21
                  201.150.112.0/22
                IPv6:
                  2804:b28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52944

    Signature Algorithm: sha256WithRSAEncryption
         9b:c6:d6:a6:55:46:72:11:25:e8:fd:9e:b4:bb:27:e3:e9:08:
         0c:a5:63:96:0f:f0:11:b9:9b:e9:18:b3:3c:7e:27:d4:0a:cc:
         cc:1d:90:f2:31:02:6e:33:a4:b1:86:35:61:a3:4e:db:15:d5:
         06:5d:09:fb:89:7d:4b:fa:50:1a:25:f3:b2:7f:df:8f:a7:ac:
         83:7d:9e:c1:b3:51:aa:f4:b9:3d:2b:0e:67:a7:5e:17:97:b3:
         89:48:af:21:ce:99:b7:3c:59:99:3c:c9:f1:7b:7a:3c:54:17:
         c3:08:c2:35:e6:b5:ff:ef:bf:3b:82:eb:b1:01:7f:f5:3b:c6:
         82:60:a9:fa:e9:ff:9e:c8:f3:ad:ef:82:f6:cc:a1:76:24:49:
         3c:98:c8:a9:6a:84:14:cb:11:5b:ab:6a:ac:87:98:5b:2a:11:
         74:c2:7b:9c:0d:d5:28:9f:ac:94:d5:a8:ef:cb:47:f0:8c:9c:
         48:9b:55:58:48:96:0f:2e:91:4e:cd:9d:94:f3:60:fa:12:82:
         7d:e8:43:22:c5:61:98:a6:08:23:8f:33:1e:86:9a:24:b6:72:
         be:db:7f:5d:30:39:e9:00:d3:23:cd:26:de:cf:6a:37:ea:a5:
         a1:f5:73:b3:0c:26:fb:97:f1:e3:9b:1a:ec:d4:ac:2d:bd:31:
         af:14:ba:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:49 2025 by rpki-client