Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4CD98027488DD773F28F366E680034F12D6EAD2A.cer
File:                     4CD98027488DD773F28F366E680034F12D6EAD2A.cer (raw, json)
Hash identifier:          FKhApmuYTcWRuvk+DLRxM0k7VCF5b9PgF+i/6yO0Sfc=
Subject key identifier:   4C:D9:80:27:48:8D:D7:73:F2:8F:36:6E:68:00:34:F1:2D:6E:AD:2A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4B30CD65B325FD995A767AA15F9583E9B64B6AD3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FYpRkVthyT1Mfdp7mFkqUr8D9f3qZH4r2ddgfe5GfY3z/1/4CD98027488DD773F28F366E680034F12D6EAD2A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FYpRkVthyT1Mfdp7mFkqUr8D9f3qZH4r2ddgfe5GfY3z/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Nov 2024 22:55:50 +0000
Certificate not after:    Mon 10 Nov 2025 23:00:50 +0000
Subordinate resources:    AS: 264964
                          IP: 170.0.88.0/22
                          IP: 2804:309c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:30:cd:65:b3:25:fd:99:5a:76:7a:a1:5f:95:83:e9:b6:4b:6a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 11 22:55:50 2024 GMT
            Not After : Nov 10 23:00:50 2025 GMT
        Subject: CN=4CD98027488DD773F28F366E680034F12D6EAD2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:73:39:c9:5d:27:4d:50:bc:d0:db:a9:25:4e:
                    70:9f:f9:97:b2:a6:eb:51:15:4f:b2:57:4d:0c:3b:
                    8f:f5:23:19:66:18:42:5a:6b:87:15:d9:80:9b:9a:
                    4d:38:e8:bb:24:8a:0e:ac:2e:84:79:dc:27:1a:38:
                    a4:ec:90:38:27:98:83:35:4a:c2:e1:dc:a2:18:7d:
                    fa:e6:95:4a:75:68:7c:1b:46:6c:33:95:3b:8e:cd:
                    fb:72:f8:ce:e0:90:09:e0:b9:25:a0:b9:89:93:b5:
                    20:55:c3:57:5f:31:51:33:ea:4d:60:22:9b:46:09:
                    9e:a2:af:ce:4f:fc:c3:c3:94:27:67:80:32:07:82:
                    18:d9:ec:9d:be:c7:c4:77:61:16:c5:82:0f:81:c1:
                    05:e1:4c:03:dd:53:95:b9:29:2f:74:e0:4f:dc:a2:
                    03:ed:95:82:22:22:30:17:ab:8e:3a:61:f8:de:54:
                    62:a0:06:51:5e:f8:a0:bb:6f:be:ea:ca:4f:88:a2:
                    75:79:ae:2f:37:b2:f7:01:c8:87:79:70:6e:d7:15:
                    12:a6:7c:bb:7b:e0:2f:30:c7:b2:2d:f7:73:37:a3:
                    f2:9d:e8:f6:47:1a:54:3d:e6:d5:6d:69:d2:e8:0a:
                    31:c5:c8:90:da:e9:e8:03:87:63:32:dc:a3:a8:ef:
                    1f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:D9:80:27:48:8D:D7:73:F2:8F:36:6E:68:00:34:F1:2D:6E:AD:2A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FYpRkVthyT1Mfdp7mFkqUr8D9f3qZH4r2ddgfe5GfY3z/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FYpRkVthyT1Mfdp7mFkqUr8D9f3qZH4r2ddgfe5GfY3z/1/4CD98027488DD773F28F366E680034F12D6EAD2A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.88.0/22
                IPv6:
                  2804:309c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264964

    Signature Algorithm: sha256WithRSAEncryption
         63:e2:84:69:95:92:ef:b3:ac:ef:41:c0:51:2b:10:f9:33:cf:
         85:e6:2b:6f:a1:25:6d:48:b0:17:ce:65:de:a8:1c:51:ec:a6:
         81:1d:92:8e:29:03:24:9e:0e:c6:a2:89:5c:de:5f:e1:b9:a9:
         f8:07:a3:e7:cd:5e:ea:7f:e9:48:a8:c8:f5:23:a4:63:ec:d8:
         c2:e7:4f:e3:5d:58:83:71:a0:50:47:47:46:85:a8:06:6a:33:
         2a:51:72:11:ae:39:56:89:c7:ea:1f:ca:16:b1:21:d9:ac:13:
         3d:ae:c7:3b:30:5e:a8:ac:0f:73:ad:08:2a:33:47:75:6d:23:
         ef:8e:0c:e8:49:8f:31:96:f5:89:8a:3c:bf:50:0c:f4:4b:e1:
         69:e4:d9:f1:1a:bc:dd:75:f0:2c:43:98:c3:04:77:23:9c:ca:
         7e:9e:ae:9b:61:66:45:28:de:88:78:9a:86:d5:bb:a9:35:22:
         fd:de:4e:37:60:c5:74:d3:ca:25:31:73:16:dd:c6:97:c5:64:
         28:34:1b:55:ee:d2:0b:c5:95:84:fb:ae:48:bd:8c:26:fc:9b:
         54:6e:d9:c4:17:5f:30:e4:ab:63:58:e2:c2:35:4c:11:4e:cc:
         71:72:5e:f1:52:e4:1c:01:9b:8e:a2:7f:a6:ec:d2:80:6c:6b:
         8d:2a:2e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:57 2024 by rpki-client on console-ams.rpki-client.org