Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
File:                     4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer (raw, json)
Hash identifier:          gNp2A5/tbpzwOx53XHh92v0XuS7xHgj3tN9cPv0d+kY=
Subject key identifier:   4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2E30FCF3770D232970D4C26A8A5FA5348FDDCC7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 May 2025 12:32:16 +0000
Certificate not after:    Wed 13 May 2026 12:37:16 +0000
Subordinate resources:    AS: 14840
                          AS: 26622
                          AS: 61889
                          IP: 177.152.184.0/22
                          IP: 186.211.128.0/17
                          IP: 187.103.96.0/19
                          IP: 200.0.32.0/20
                          IP: 200.143.64.0/18
                          IP: 200.195.224.0/19
                          IP: 200.215.208.0/20
                          IP: 201.16.0.0/17
                          IP: 2804:8::/30
                          IP: 2804:e34::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 05:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:30:fc:f3:77:0d:23:29:70:d4:c2:6a:8a:5f:a5:34:8f:dd:cc:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 14 12:32:16 2025 GMT
            Not After : May 13 12:37:16 2026 GMT
        Subject: CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ac:44:03:2b:ed:00:4b:41:93:3d:e7:d5:85:
                    2a:a9:8d:12:b0:67:5d:0b:89:27:af:0d:8e:14:d0:
                    fc:dd:fb:35:1e:02:be:d0:29:a6:0b:dc:7a:db:12:
                    40:3d:16:65:a8:2b:34:48:e3:5f:8d:c0:e2:15:85:
                    64:10:16:c6:2a:b0:e7:81:43:cf:c4:7c:fa:aa:1a:
                    88:bf:0a:45:f4:36:8c:06:3c:61:e3:03:3e:85:46:
                    1c:08:52:04:b4:cf:62:a9:b0:be:8c:f1:fc:89:1b:
                    33:b9:6f:9b:9e:3a:cd:a3:c7:67:9e:a6:99:d5:d3:
                    97:79:ca:c0:7f:37:ef:50:30:ec:5b:8f:d8:cf:3d:
                    8c:28:17:a2:38:85:37:91:6d:f3:68:e6:48:ce:c2:
                    6d:32:74:d1:ce:a2:c6:ef:c8:a9:fa:6a:fc:ec:f0:
                    96:48:73:2e:fe:00:ad:80:53:86:c0:7f:3d:0e:ee:
                    2e:23:db:83:9e:db:23:7f:0e:15:17:07:32:cf:6e:
                    e9:99:65:d9:a5:f9:66:cd:17:3f:65:63:fc:8f:d7:
                    3d:19:a8:62:3b:eb:7c:63:d6:a6:ea:05:43:d8:f4:
                    26:92:7f:23:a5:5b:20:a5:cb:be:9d:48:72:50:a0:
                    75:03:c0:62:54:e6:5a:20:f3:9c:f3:8a:34:af:2b:
                    78:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.184.0/22
                  186.211.128.0/17
                  187.103.96.0/19
                  200.0.32.0/20
                  200.143.64.0/18
                  200.195.224.0/19
                  200.215.208.0/20
                  201.16.0.0/17
                IPv6:
                  2804:8::/30
                  2804:e34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14840
                  26622
                  61889

    Signature Algorithm: sha256WithRSAEncryption
         36:53:4c:59:a9:78:30:e8:25:2a:53:3d:02:75:0e:95:fb:9a:
         67:f6:8a:79:7f:e0:da:8a:dc:b7:c7:6d:2f:bf:5d:9b:94:92:
         4d:34:b4:00:f2:c0:5b:0a:d8:ca:8d:d0:d3:84:77:96:f2:3b:
         0a:55:15:9a:22:4a:34:82:c1:d9:2f:af:32:3b:db:b8:5f:c9:
         c9:83:ca:29:67:bf:da:3a:e3:72:da:41:d5:d6:2b:da:11:9b:
         ef:6a:22:4d:17:0c:6a:02:37:9b:52:2a:26:0d:49:8f:0a:76:
         bc:48:66:a9:7a:b3:12:e9:c1:99:6d:a5:85:3c:c5:b7:f6:c5:
         3d:58:ef:11:e5:3b:02:97:fa:83:6a:c5:9a:c1:f1:69:eb:07:
         3b:68:94:52:0a:c3:38:ef:14:22:1e:56:f2:0a:91:c9:1c:b9:
         d1:70:c9:da:00:9d:f2:4d:56:e7:a1:2f:7b:c3:94:c4:95:71:
         32:c2:6d:33:e0:b3:62:6c:39:f2:dc:66:f4:53:c0:54:c5:c5:
         0c:e3:91:1a:43:3c:50:88:77:03:70:cd:fb:76:f1:09:46:11:
         0f:3d:35:6c:1a:80:57:72:3a:9d:7d:f6:59:d4:2c:2b:13:76:
         b7:f2:df:9f:4a:58:75:9c:2c:3e:51:31:8d:90:b4:0e:e4:6d:
         69:4a:91:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 04:01:51 2025 by rpki-client