Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7C4A4C09FBCA8A29247625F24E7295E6AC204FF4.cer
File:                     7C4A4C09FBCA8A29247625F24E7295E6AC204FF4.cer (raw, json)
Hash identifier:          BDg8Nzurce3/aDBdu4oB90CJfSbaIMZWZAEdKlcCXx0=
Subject key identifier:   7C:4A:4C:09:FB:CA:8A:29:24:76:25:F2:4E:72:95:E6:AC:20:4F:F4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       713B76C31C670DF1A9945281F52F29032E2ACA2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/2/7C4A4C09FBCA8A29247625F24E7295E6AC204FF4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 14:03:47 +0000
Certificate not after:    Thu 03 Apr 2025 14:08:47 +0000
Subordinate resources:    AS: 269007
                          IP: 45.176.152.0/22
                          IP: 2804:5e08::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Jun 2024 18:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:3b:76:c3:1c:67:0d:f1:a9:94:52:81:f5:2f:29:03:2e:2a:ca:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 14:03:47 2024 GMT
            Not After : Apr  3 14:08:47 2025 GMT
        Subject: CN=7C4A4C09FBCA8A29247625F24E7295E6AC204FF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:46:84:51:88:29:03:8d:a9:a8:b1:e2:25:16:
                    d9:13:ba:ad:b2:f3:50:c6:01:26:c8:43:74:9c:8a:
                    8d:aa:9c:f0:93:83:fa:92:fc:d5:7e:62:c2:66:60:
                    8b:88:ea:ef:4d:e5:02:19:f7:d2:64:aa:27:47:80:
                    fe:10:1d:42:0a:73:bd:5e:cd:6c:c3:17:61:10:43:
                    91:6d:ab:cf:4a:0f:51:e4:34:19:2b:a5:f0:c5:21:
                    9b:81:66:57:cc:bc:5f:89:36:25:d1:2e:18:5c:37:
                    6a:57:85:82:26:74:7f:e8:58:31:04:50:e4:7b:12:
                    63:77:4d:4e:ef:96:29:74:37:48:00:1d:be:0a:1a:
                    b1:1c:e6:69:30:e7:c3:fa:31:5c:ed:d1:05:f3:35:
                    6e:1d:e5:be:83:f4:2e:6f:9d:7b:c5:d9:4a:86:fb:
                    b7:3f:bd:52:29:da:ac:a7:18:3d:cf:ca:14:8e:72:
                    7a:66:f8:21:0e:91:1d:48:6f:26:34:81:76:b9:5b:
                    5d:6b:c4:73:25:ee:e2:3f:d5:2a:21:9d:22:34:19:
                    73:13:0c:73:61:e8:20:e5:6b:53:7b:c7:e8:b0:68:
                    a7:28:4b:f9:e1:a0:c3:fa:1d:ff:ae:3d:46:0f:e3:
                    50:42:3b:64:2c:0b:1b:f3:b7:14:fa:eb:08:ab:cc:
                    c8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:4A:4C:09:FB:CA:8A:29:24:76:25:F2:4E:72:95:E6:AC:20:4F:F4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/2/7C4A4C09FBCA8A29247625F24E7295E6AC204FF4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.152.0/22
                IPv6:
                  2804:5e08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269007

    Signature Algorithm: sha256WithRSAEncryption
         bb:40:0c:15:c0:cd:d7:f7:dc:6d:e3:04:16:b1:a3:bd:3b:25:
         fc:87:ee:e7:5d:95:19:78:34:a1:40:9d:db:f6:ed:95:9b:ed:
         d7:e8:3a:c8:0c:03:46:d8:64:43:73:10:e5:9d:af:7c:04:16:
         39:ac:f6:d3:6c:cc:4d:2e:62:cb:5b:a6:01:8f:4a:52:06:7b:
         8d:4e:22:ca:a4:fd:48:cf:8c:93:6a:14:b5:ba:08:58:d1:8a:
         e3:86:d9:3e:16:ee:86:8c:8e:de:4e:20:3d:18:01:c4:27:6f:
         56:46:68:b3:7d:45:fe:50:58:6d:04:8c:a9:95:b5:70:ec:43:
         8c:95:5d:2e:61:c6:ce:20:fe:d5:7f:b0:39:4e:50:8e:d9:a2:
         01:a8:f5:ff:b7:f1:4f:fa:e0:93:38:62:76:66:30:ea:2d:82:
         2b:94:27:96:8c:4e:b6:d1:d4:05:63:e6:fa:d0:0d:a3:bd:0b:
         f4:33:69:f3:7b:7a:eb:70:e7:8f:3d:c2:b2:29:d1:ab:37:00:
         33:2a:7e:be:b0:1a:50:25:c4:15:9e:30:c6:48:fd:4a:e8:9d:
         b0:b8:8f:36:a7:17:e9:c4:b5:54:47:86:8c:62:e5:35:b5:dc:
         70:fc:8c:57:13:d5:d3:69:c4:ec:9e:6a:b8:29:ff:b9:af:c8:
         28:d7:ca:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 15:56:16 2024 by rpki-client on console-fra.rpki-client.org