Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4EEF1755CA1280766B487C66444CFF2032B2AE77.cer
File:                     4EEF1755CA1280766B487C66444CFF2032B2AE77.cer (raw, json)
Hash identifier:          Tya8QCUFKWvzPHCjEZ1UA+/bUOWlwdsp7/xkNgeI0S8=
Subject key identifier:   4E:EF:17:55:CA:12:80:76:6B:48:7C:66:44:4C:FF:20:32:B2:AE:77
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2555E3C27FBF37CE102ABB5CF879E62BFACBDE76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/4EEF1755CA1280766B487C66444CFF2032B2AE77.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Nov 2024 19:13:01 +0000
Certificate not after:    Mon 17 Nov 2025 19:18:01 +0000
Subordinate resources:    AS: 264320
                          IP: 138.122.120.0/22
                          IP: 2804:260c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:55:e3:c2:7f:bf:37:ce:10:2a:bb:5c:f8:79:e6:2b:fa:cb:de:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 18 19:13:01 2024 GMT
            Not After : Nov 17 19:18:01 2025 GMT
        Subject: CN=4EEF1755CA1280766B487C66444CFF2032B2AE77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ae:01:e8:94:00:07:35:ce:d1:f1:69:5e:bf:
                    81:64:f2:60:00:e5:b0:31:8d:9c:a0:4f:d9:d7:26:
                    81:4a:a3:5f:33:26:4f:5d:74:56:9e:48:a2:f5:07:
                    92:6f:06:72:9d:b8:fa:c6:b9:60:31:61:a5:ae:da:
                    a8:93:bf:80:6e:3d:c8:12:53:af:ae:44:0e:95:2b:
                    f7:1a:b7:fd:b9:1d:41:1e:82:35:9f:7c:75:c0:54:
                    58:a6:8c:d4:de:a7:25:b5:f8:9b:c1:0e:b0:a9:33:
                    2f:92:ef:2b:6b:14:79:46:ab:72:1c:53:a6:94:79:
                    31:af:f6:74:af:dd:29:33:95:48:c4:f6:61:27:92:
                    13:57:33:77:38:70:28:58:ff:49:8f:e1:e1:e3:8d:
                    9e:c7:27:25:9a:96:ac:e8:44:37:01:24:f9:59:09:
                    20:f0:fd:52:b4:d9:1c:cf:d4:98:fd:6d:5c:62:7b:
                    98:3a:55:2e:4b:74:85:67:ab:45:c8:a7:9f:5d:4d:
                    aa:fa:48:87:a1:c0:14:f1:98:f4:d7:2d:3f:c4:d1:
                    1c:2e:21:b4:58:49:22:32:b9:9e:2f:68:a7:ac:b8:
                    03:f3:df:c8:86:95:0a:2e:42:e7:f3:65:37:ac:1f:
                    41:69:cb:c6:8f:2e:a2:01:4d:ee:d7:e7:71:ef:8c:
                    7a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4E:EF:17:55:CA:12:80:76:6B:48:7C:66:44:4C:FF:20:32:B2:AE:77
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E9oyEp4tb4o919JSuBJDqKMhG9Eb95VdAiUBY5si6eMd/0/4EEF1755CA1280766B487C66444CFF2032B2AE77.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.120.0/22
                IPv6:
                  2804:260c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264320

    Signature Algorithm: sha256WithRSAEncryption
         4c:7b:d5:f7:22:5a:c5:36:06:3a:28:ff:b9:62:0c:6b:80:e9:
         7d:5c:9f:00:05:45:41:ba:4c:d1:c1:c8:9f:2d:7b:bf:ad:63:
         59:41:28:16:fd:15:af:b4:c8:bf:d4:28:85:79:01:89:dc:f3:
         ca:c2:ef:9f:7e:9c:04:30:99:a5:82:c6:6b:65:6e:ec:90:4f:
         cd:ef:e9:4f:dc:b5:81:2e:79:0d:8f:0f:c4:00:f9:01:ea:c3:
         24:f4:c9:24:68:de:e1:f7:d8:55:7e:c5:ea:00:65:e0:1c:fc:
         b5:ad:76:ce:38:94:4b:61:43:e7:99:7e:98:fd:a9:f3:42:46:
         9e:0c:95:7a:e5:9c:0f:46:ea:9b:02:d8:79:0a:81:e2:d2:d5:
         8d:e0:c8:7b:06:23:52:5e:62:9f:20:20:1b:4e:0c:da:af:31:
         2f:90:dc:85:d1:fb:ad:2d:a7:f1:f0:26:c6:bf:12:f0:90:4e:
         31:3f:af:1b:09:ac:cb:c4:4f:7a:a4:3f:98:45:6c:b5:f0:7b:
         0c:a0:f0:81:01:49:1f:92:67:cd:77:16:59:71:02:fc:c0:3b:
         2d:dd:d8:5d:0a:2c:1a:ff:23:15:3d:0d:8b:4b:25:2b:4d:dc:
         11:16:e2:1b:46:8d:05:dc:e7:f0:fe:a1:80:c5:db:ff:c1:27:
         27:52:1a:74
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUJVXjwn+/N84QKrtc+HnmK/rL3nYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDExMTgxOTEzMDFaFw0yNTExMTcxOTE4MDFaMDMxMTAvBgNV
BAMTKDRFRUYxNzU1Q0ExMjgwNzY2QjQ4N0M2NjQ0NENGRjIwMzJCMkFFNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFrgHolAAHNc7R8Wlev4Fk8mAA
5bAxjZygT9nXJoFKo18zJk9ddFaeSKL1B5JvBnKduPrGuWAxYaWu2qiTv4BuPcgS
U6+uRA6VK/cat/25HUEegjWffHXAVFimjNTepyW1+JvBDrCpMy+S7ytrFHlGq3Ic
U6aUeTGv9nSv3SkzlUjE9mEnkhNXM3c4cChY/0mP4eHjjZ7HJyWalqzoRDcBJPlZ
CSDw/VK02RzP1Jj9bVxie5g6VS5LdIVnq0XIp59dTar6SIehwBTxmPTXLT/E0Rwu
IbRYSSIyuZ4vaKesuAPz38iGlQouQufzZTesH0Fpy8aPLqIBTe7X53HvjHpdAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRO7xdVyhKAdmtI
fGZETP8gMrKudzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRTlv
eUVwNHRiNG85MTlKU3VCSkRxS01oRzlFYjk1VmRBaVVCWTVzaTZlTWQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0U5
b3lFcDR0YjRvOTE5SlN1QkpEcUtNaEc5RWI5NVZkQWlVQlk1c2k2ZU1kLzAvNEVF
RjE3NTVDQTEyODA3NjZCNDg3QzY2NDQ0Q0ZGMjAzMkIyQUU3Ny5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCinp4MA0EAgACMAcDBQAoBCYMMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQIgDANBgkqhkiG9w0BAQsFAAOCAQEATHvV9yJaxTYGOij/
uWIMa4DpfVyfAAVFQbpM0cHIny17v61jWUEoFv0Vr7TIv9QohXkBidzzysLvn36c
BDCZpYLGa2Vu7JBPze/pT9y1gS55DY8PxAD5AerDJPTJJGje4ffYVX7F6gBl4Bz8
ta12zjiUS2FD55l+mP2p80JGngyVeuWcD0bqmwLYeQqB4tLVjeDIewYjUl5inyAg
G04M2q8xL5DchdH7rS2n8fAmxr8S8JBOMT+vGwmsy8RPeqQ/mEVstfB7DKDwgQFJ
H5JnzXcWWXEC/MA7Ld3YXQosGv8jFT0Ni0slK03cERbiG0aNBdzn8P6hgMXb/8En
J1IadA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:06 2025 by rpki-client