Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AE466D7909B281D340C712F382B9405A03BD4381.cer
File:                     AE466D7909B281D340C712F382B9405A03BD4381.cer (raw, json)
Hash identifier:          nT7+5a9Z7FH07I9Lz1i24sBjn15WmaEHR+BAtRuB04E=
Subject key identifier:   AE:46:6D:79:09:B2:81:D3:40:C7:12:F3:82:B9:40:5A:03:BD:43:81
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1AE4BBA90E2DDA699C1166CC7B7409C87A23FD3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/AE466D7909B281D340C712F382B9405A03BD4381.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Jan 2025 20:29:24 +0000
Certificate not after:    Tue 20 Jan 2026 20:34:24 +0000
Subordinate resources:    AS: 262543
                          IP: 177.72.80.0/21
                          IP: 2804:37a4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 20:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e4:bb:a9:0e:2d:da:69:9c:11:66:cc:7b:74:09:c8:7a:23:fd:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 21 20:29:24 2025 GMT
            Not After : Jan 20 20:34:24 2026 GMT
        Subject: CN=AE466D7909B281D340C712F382B9405A03BD4381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e1:95:77:5c:dd:1d:38:e3:a6:7b:b7:a8:8d:
                    a4:78:83:df:44:99:e4:05:3c:a7:35:64:6c:cb:d6:
                    ec:3b:4f:65:05:fb:ee:e0:b4:27:13:1a:8c:8a:79:
                    d7:6a:1a:e7:f6:8f:32:b5:5f:a6:a1:e8:b0:7b:c5:
                    2d:98:3a:b7:22:47:7e:31:3f:ff:95:9f:fb:a2:a0:
                    4d:f1:c1:e6:26:28:62:7a:e7:8f:78:98:a3:ee:fe:
                    40:40:a2:71:c4:04:62:34:40:00:e7:76:31:ad:ad:
                    74:d3:09:79:f2:a1:9b:b6:5a:08:94:e7:66:b7:6e:
                    24:ac:71:d3:59:69:c2:c4:0d:3d:87:e3:bf:de:8f:
                    ab:13:0d:8f:94:19:bd:3d:a0:3b:76:ba:d3:fc:44:
                    8f:ae:78:c3:82:5c:d8:fe:1b:55:11:8f:ab:03:4b:
                    e8:00:d3:86:f3:63:70:05:1e:3d:49:3e:93:15:55:
                    cc:41:70:2f:aa:4c:36:bf:88:ed:4e:50:f0:47:48:
                    66:ff:b3:6e:73:ca:b4:d0:e4:8e:31:a3:08:07:a5:
                    87:77:3d:c3:98:35:92:67:67:39:b4:0a:6b:cd:ef:
                    9e:da:6f:14:10:66:8c:29:53:5b:56:70:7a:d1:aa:
                    3e:99:f9:cb:c6:78:2d:0c:3b:d3:ff:d1:d5:47:1e:
                    be:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AE:46:6D:79:09:B2:81:D3:40:C7:12:F3:82:B9:40:5A:03:BD:43:81
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/AE466D7909B281D340C712F382B9405A03BD4381.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.80.0/21
                IPv6:
                  2804:37a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262543

    Signature Algorithm: sha256WithRSAEncryption
         01:ba:3a:e3:22:52:15:87:c0:21:75:e3:16:9a:0f:f0:4d:7a:
         3d:19:19:e9:cf:ab:d1:3f:17:36:0a:b0:08:eb:c9:54:41:0d:
         4c:f5:ad:92:37:d5:78:0a:5c:b2:55:53:15:51:ee:73:33:26:
         cc:9d:25:da:aa:50:e1:bb:41:ee:7f:24:c9:be:a3:9c:0a:e9:
         6a:f8:66:f0:d3:2f:28:e2:ff:fb:45:00:be:8b:a2:13:c2:6b:
         45:d0:e7:5e:ca:75:37:38:7d:fe:de:00:49:7f:4c:ab:01:5b:
         6d:fa:9c:f0:9f:25:8b:83:ec:e7:a8:fb:2d:9d:0c:84:47:d6:
         4c:0c:8e:f2:4d:a2:32:d7:62:4d:fc:4d:f1:71:a9:9c:61:f1:
         01:4b:14:3a:e0:32:1a:35:b4:20:7b:90:40:58:92:a2:d5:f7:
         1c:8b:ad:0b:86:c9:bc:de:97:e6:7c:8a:ba:40:37:c7:94:41:
         e3:7d:56:52:79:6b:df:39:2b:78:c8:aa:f5:a1:5b:0c:e6:a8:
         f7:10:28:13:59:50:0b:21:7b:26:bf:04:63:ca:18:3c:fd:2e:
         bb:a3:2f:59:e9:27:e6:ca:09:2a:d5:eb:1c:7f:94:51:f1:a6:
         dc:ec:cb:b1:8c:1e:35:6d:16:a3:9b:b0:3e:db:bb:8d:58:27:
         ef:7a:a6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:07:49 2025 by rpki-client