Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer
File:                     4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.cer (raw, json)
Hash identifier:          fNIXL9E+pq93BeMDJ4GdbUB8KxchWN0gwDbHXKFfQOQ=
Subject key identifier:   4D:CB:5A:BC:62:FB:BC:89:0F:DA:F0:5E:0D:86:D7:99:9A:6E:AD:B2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       32B2736CFB04C5F4DF661FD77E60B85BAC050DE3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Dec 2024 18:03:39 +0000
Certificate not after:    Tue 16 Dec 2025 18:08:39 +0000
Subordinate resources:    AS: 273485
                          IP: 2804:8f58::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 04:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b2:73:6c:fb:04:c5:f4:df:66:1f:d7:7e:60:b8:5b:ac:05:0d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 17 18:03:39 2024 GMT
            Not After : Dec 16 18:08:39 2025 GMT
        Subject: CN=4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:25:94:9f:74:cd:99:8c:7c:7d:bd:2f:f9:6b:
                    85:52:c0:14:ce:fc:06:9e:02:a4:3b:f1:ff:bc:36:
                    8e:de:5d:89:53:f6:71:fe:7e:99:52:49:13:5d:4f:
                    3e:0a:dc:ec:eb:7e:0c:9c:bd:3d:4f:14:ea:95:8b:
                    79:28:73:24:2c:0a:80:f3:33:50:c0:13:cb:80:02:
                    2a:cb:f5:6c:38:4e:3b:a8:7e:4a:79:18:de:eb:b2:
                    86:68:af:83:3f:c3:e0:d9:88:9a:ff:e6:58:50:34:
                    f1:e2:9f:fb:22:7c:4b:7d:e9:7c:b1:d5:57:71:6d:
                    10:fb:c6:d0:d2:ff:0a:04:9d:4f:7a:95:f6:b0:62:
                    41:f5:0b:1d:b5:b5:fb:a5:c5:23:af:b0:b3:b2:08:
                    b3:19:4c:9b:2c:dc:c1:25:90:25:ca:7c:f0:77:27:
                    69:ca:df:23:76:3d:59:92:26:e7:60:23:68:26:7d:
                    63:e5:c1:54:de:7c:c3:b7:84:61:64:f4:65:8c:ef:
                    24:8a:60:10:f4:c0:ef:38:65:72:89:59:5d:1f:96:
                    e1:eb:5a:01:ac:04:f0:7e:45:a4:c8:56:b6:fd:41:
                    0a:36:b0:42:b4:03:12:3c:28:69:f6:12:11:54:b4:
                    e0:de:66:f7:4c:60:0d:de:36:f3:2e:ac:c5:5f:db:
                    d9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4D:CB:5A:BC:62:FB:BC:89:0F:DA:F0:5E:0D:86:D7:99:9A:6E:AD:B2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uef8goYm1hLBBe7Nj2JFwB621drGN2jcBCa4wZvi1Q8/0/4DCB5ABC62FBBC890FDAF05E0D86D7999A6EADB2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273485

    Signature Algorithm: sha256WithRSAEncryption
         72:30:ee:b1:8a:d2:aa:e5:20:39:5e:1a:1d:da:f4:8b:10:f8:
         53:76:ab:50:a6:89:03:92:28:b6:6c:3e:33:0c:fe:d9:24:fb:
         bb:71:f5:b3:80:17:e3:e0:1d:2f:35:1a:64:6a:35:c4:8a:18:
         e8:a4:aa:b4:00:81:e8:cf:9b:8e:8f:34:fc:72:43:09:cb:e7:
         30:7c:22:f7:88:2a:1d:08:31:51:f5:33:e9:e4:30:d2:4c:32:
         91:7b:6d:83:db:1f:97:ab:15:10:b1:4b:ef:91:3b:4b:c9:92:
         76:24:c9:12:ce:17:3d:73:2e:f9:ab:f3:6f:91:75:99:1c:89:
         b1:59:b9:18:84:07:ee:ef:0b:0a:de:62:d1:d5:7e:84:7c:34:
         a3:8e:7b:f5:27:9a:19:dd:31:a9:0b:a8:d2:aa:a7:b8:b0:1a:
         b2:b7:ec:c4:6d:a1:b6:82:18:fc:a6:d4:c2:34:60:e5:b4:05:
         08:27:15:03:4b:bf:3c:cb:23:de:a1:46:fa:21:ca:e9:f7:80:
         75:8e:25:8c:36:a9:b7:d7:09:61:f6:31:67:7e:0d:bd:28:50:
         c7:80:39:b6:1a:75:d5:aa:61:9a:4a:4b:0a:26:ec:15:f9:60:
         e2:7a:13:a9:16:2c:5f:15:b8:91:63:05:cb:1f:b9:5a:85:14:
         93:5f:d5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:36 2025 by rpki-client