Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.cer
File:                     4E335352EA63CE855FDA3B777EA08D10359B7B71.cer (raw, json)
Hash identifier:          7OKiYRd8D8oL2xs5vAcEJPbeUAasBaAU6EHzAzBoak8=
Subject key identifier:   4E:33:53:52:EA:63:CE:85:5F:DA:3B:77:7E:A0:8D:10:35:9B:7B:71
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       28AC463893178FC4765F95B3B16F993E8A8FF756
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 18:10:47 +0000
Certificate not after:    Thu 03 Apr 2025 18:15:47 +0000
Subordinate resources:    AS: 263047
                          IP: 45.188.224.0/22
                          IP: 177.129.208.0/21
                          IP: 186.237.24.0/22
                          IP: 187.61.112.0/21
                          IP: 191.243.144.0/20
                          IP: 2804:908::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ac:46:38:93:17:8f:c4:76:5f:95:b3:b1:6f:99:3e:8a:8f:f7:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 18:10:47 2024 GMT
            Not After : Apr  3 18:15:47 2025 GMT
        Subject: CN=4E335352EA63CE855FDA3B777EA08D10359B7B71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:ce:be:3f:40:7f:d3:9a:25:04:de:be:b0:
                    47:79:34:12:84:62:d4:6d:2d:e5:e8:ff:57:9a:2c:
                    28:3d:eb:51:22:39:a5:f1:6e:43:49:ed:df:76:1b:
                    dd:d4:0d:ad:c2:08:51:ee:8f:36:df:a1:f9:14:ae:
                    74:a5:2e:86:dc:7c:c0:bb:83:69:c2:6c:f7:c2:d2:
                    12:8d:07:3c:2d:4f:e7:9e:da:bc:4b:00:82:67:0d:
                    ce:3e:c4:a1:42:ee:7d:ec:b8:8f:61:56:3d:08:11:
                    33:b4:12:5b:ce:29:1f:32:6f:e6:4d:36:1b:6f:17:
                    a7:3e:6e:b0:89:17:34:56:5d:91:89:48:aa:87:54:
                    6b:b1:6e:be:56:bb:3a:1f:5d:da:03:e6:d4:2e:48:
                    af:bf:d2:24:b8:94:55:85:a6:de:ea:d6:e4:7a:76:
                    a0:e9:c0:3a:c9:47:a0:f8:50:7f:76:5a:fa:b6:27:
                    8c:de:2c:85:47:ba:ff:60:27:7a:8c:93:07:64:9d:
                    6c:d2:88:12:f3:b3:3f:d0:46:10:00:bb:2c:fe:4c:
                    26:31:cc:1c:4f:e8:ed:e3:1a:08:dd:21:55:41:6a:
                    f5:8c:20:bb:41:7d:8d:5c:a8:2f:d6:fa:7d:40:66:
                    aa:1f:ca:1e:31:d1:95:35:c7:a6:cd:10:3d:5d:11:
                    3b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4E:33:53:52:EA:63:CE:85:5F:DA:3B:77:7E:A0:8D:10:35:9B:7B:71
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.224.0/22
                  177.129.208.0/21
                  186.237.24.0/22
                  187.61.112.0/21
                  191.243.144.0/20
                IPv6:
                  2804:908::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263047

    Signature Algorithm: sha256WithRSAEncryption
         d0:d5:42:d9:91:b8:c6:de:af:d3:0c:ae:2c:33:4f:56:04:14:
         64:bc:90:d2:34:38:1b:5e:3b:b2:3c:19:42:03:cf:29:ad:a6:
         8e:79:c9:ca:f0:b2:fc:01:b6:82:9d:e4:42:b2:d1:8f:6d:b2:
         ca:96:20:81:f4:e0:b3:9b:1d:7f:13:90:46:35:d8:91:73:74:
         c4:0f:03:68:3f:6d:29:20:6e:2f:b7:7f:2c:77:b4:e6:f0:11:
         ef:6c:bd:d1:b1:1e:ac:f2:7c:f3:81:15:c5:ca:9a:15:46:b1:
         8d:dc:d6:08:0c:d2:0e:59:e4:b9:a7:0e:98:4a:26:ea:34:b0:
         ee:a6:16:03:99:ee:9f:52:bf:61:75:de:fb:fb:58:1e:27:e1:
         36:84:7d:ca:0f:88:7e:4b:f9:0a:a0:7f:f7:a1:b4:2b:74:c5:
         ba:bf:f8:79:21:64:38:08:78:3e:81:26:e0:29:e5:d1:73:2b:
         3d:65:07:33:52:be:e4:09:94:6d:e7:10:98:21:2a:a8:90:e4:
         e9:07:11:71:79:9a:0b:ae:4f:96:9c:b8:51:c4:38:33:ea:17:
         f9:e0:a6:bc:48:43:fa:d2:85:f1:ba:39:91:50:c4:60:54:c9:
         ce:61:85:bd:3d:57:0f:1c:6d:aa:c8:b7:79:93:06:70:10:3c:
         33:c3:f8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 00:29:11 2024 by rpki-client on console-ams.rpki-client.org