Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B882C1C7F7853B50794B0D38584713A2C1528F9D.cer
File:                     B882C1C7F7853B50794B0D38584713A2C1528F9D.cer (raw, json)
Hash identifier:          9qXk5P5MPP27yiAoU2k9dcJA7EQ845YHDgGabIhZAwg=
Subject key identifier:   B8:82:C1:C7:F7:85:3B:50:79:4B:0D:38:58:47:13:A2:C1:52:8F:9D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4C487EFB99DFD7A53D2DFE0A7EB0FE7E43EF36F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Apr 2024 13:37:49 +0000
Certificate not after:    Thu 17 Apr 2025 13:42:49 +0000
Subordinate resources:    AS: 270463
                          IP: 200.81.48.0/22
                          IP: 2804:6c5c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:48:7e:fb:99:df:d7:a5:3d:2d:fe:0a:7e:b0:fe:7e:43:ef:36:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 18 13:37:49 2024 GMT
            Not After : Apr 17 13:42:49 2025 GMT
        Subject: CN=B882C1C7F7853B50794B0D38584713A2C1528F9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5e:23:85:e0:78:51:f9:c7:05:02:cb:b0:65:
                    58:e7:c9:8a:30:5f:53:a3:8a:e8:46:1f:ee:65:50:
                    8c:f0:88:73:b8:78:cc:9e:67:48:d3:8d:69:b8:16:
                    eb:ff:e3:34:d5:74:be:8b:d6:14:cc:e2:c9:36:ff:
                    97:f9:c9:8c:6e:3c:c5:6f:12:01:f4:89:75:4b:0d:
                    de:c0:81:72:2f:a9:99:16:1e:12:72:82:7d:3d:04:
                    fe:db:b2:71:06:11:29:75:31:0f:36:b7:4a:e3:51:
                    d2:a5:85:9c:76:d5:fc:c7:5f:bf:f6:2e:7a:8c:85:
                    64:07:7e:9e:dc:5b:42:7a:47:96:09:26:17:d5:6c:
                    ba:d7:93:aa:40:33:93:e8:d3:90:e6:3c:05:60:87:
                    f8:57:81:6f:da:13:10:ab:6d:bd:6c:e0:5d:92:b1:
                    09:51:94:bc:16:92:b3:76:7f:c2:d2:49:e6:ba:00:
                    2c:53:d1:8d:07:9a:6b:b1:69:6a:7c:4e:8e:45:d6:
                    56:cd:2d:04:85:c8:c3:4f:d5:d1:93:3c:b2:9a:7d:
                    5a:b8:22:6a:cc:72:a8:85:40:28:1d:9a:e3:97:d5:
                    5d:ac:90:50:25:79:cc:b3:ea:85:37:50:37:f1:ae:
                    08:e2:4b:a3:18:0e:a2:85:1a:3c:f6:de:da:3d:6d:
                    21:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:82:C1:C7:F7:85:3B:50:79:4B:0D:38:58:47:13:A2:C1:52:8F:9D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ei4jmNZrcWfTjuLjBXGQUV6bC5GdUwqdq5j7rZs1cyKz/0/B882C1C7F7853B50794B0D38584713A2C1528F9D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.48.0/22
                IPv6:
                  2804:6c5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270463

    Signature Algorithm: sha256WithRSAEncryption
         95:e5:9d:68:57:79:b7:e3:79:25:3a:89:c1:a3:e3:cf:53:f4:
         0e:2d:2c:d6:3d:55:fa:fe:76:ed:a9:ee:0a:49:9b:c1:f0:fc:
         5a:a1:5e:55:23:56:76:1b:aa:d6:ab:80:6c:4e:16:13:cb:85:
         71:8c:13:f7:90:1b:d7:8e:74:9a:b4:1b:0c:c3:52:a2:35:65:
         05:3c:e8:c5:ef:96:b5:10:f7:1a:6f:5b:93:2b:14:50:0e:ec:
         95:78:cd:b1:99:da:1b:07:59:9d:d3:ab:27:83:d2:dc:49:e5:
         6d:19:18:8b:8e:9a:30:85:24:57:b8:c8:52:42:24:06:f0:0b:
         68:3d:a8:75:28:43:85:de:d8:18:2e:2a:f2:f2:e8:fd:43:e3:
         d1:42:e9:49:33:ad:9c:48:31:ba:29:b1:92:84:22:44:d2:5f:
         b4:58:79:ef:55:ea:bd:e4:ed:4e:43:21:8c:3d:7e:e3:a1:02:
         f2:65:b9:23:e1:ba:0f:f4:03:9a:24:f8:10:65:ae:74:fb:ab:
         9f:fe:ee:0f:8b:fb:35:42:40:6e:69:07:02:f7:0c:f3:fc:3e:
         53:50:91:65:5d:f0:cf:fc:58:e1:7b:0c:b0:6f:16:6b:2e:54:
         3a:d0:94:9d:dd:bd:93:b6:cc:a6:9a:dd:42:87:b1:57:68:3a:
         ce:18:b4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:24 2024 by rpki-client on console-ams.rpki-client.org