Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
File:                     BF45F5442049793490E484E18AD1516C8FDC8087.cer (raw, json)
Hash identifier:          kVIz5xEXOql1L/aMsbZiRVTeH7P1r/K/qk7PxYPyLY8=
Subject key identifier:   BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4588452429B82263DF3BC01C60E5CB1CC29FBBFC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 23:23:24 +0000
Certificate not after:    Wed 02 Apr 2025 23:28:24 +0000
Subordinate resources:    AS: 271193
                          IP: 179.49.144.0/22
                          IP: 2804:77b0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 04:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:88:45:24:29:b8:22:63:df:3b:c0:1c:60:e5:cb:1c:c2:9f:bb:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 23:23:24 2024 GMT
            Not After : Apr  2 23:28:24 2025 GMT
        Subject: CN=BF45F5442049793490E484E18AD1516C8FDC8087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ef:77:2e:6a:4a:2c:f1:e6:f6:c7:1e:ce:ad:
                    58:64:16:cd:e1:a7:b0:29:e0:39:4d:6d:10:cf:80:
                    89:64:19:9f:ab:3e:ed:3b:4c:b9:94:5c:a5:24:e0:
                    2c:5b:33:e0:09:86:1f:e2:37:14:3c:ea:b6:e6:97:
                    66:3d:c8:5a:fb:76:c8:85:de:3f:65:78:ac:4d:15:
                    3c:11:77:37:fa:40:b4:7c:ae:0a:99:82:6a:b6:ad:
                    36:64:88:20:cb:67:b9:29:30:55:87:16:b1:32:ad:
                    c0:53:5c:f4:f7:5e:12:db:07:be:69:3f:4c:9a:b2:
                    3a:32:c7:40:8b:e5:58:bc:e3:32:f5:14:f7:8a:ba:
                    1f:78:ab:41:42:49:65:c4:37:82:ce:6a:3d:3f:ae:
                    60:b1:ef:d8:7a:33:dc:3b:c1:f8:0d:2e:d6:61:39:
                    1d:5c:54:d3:b3:3a:47:17:7f:a4:ec:12:14:b8:ce:
                    6b:ba:40:a9:eb:e9:e9:58:d9:6e:64:11:97:4f:0c:
                    07:a1:39:97:7e:12:98:ac:f1:31:00:d7:63:f4:db:
                    77:3e:51:8e:6b:27:09:24:00:03:e2:7e:ba:93:b9:
                    f8:00:73:c4:f4:87:9c:b1:90:39:23:03:71:bc:71:
                    b4:c7:5d:e4:77:db:e0:47:b9:6c:f0:87:1b:36:4f:
                    25:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.144.0/22
                IPv6:
                  2804:77b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271193

    Signature Algorithm: sha256WithRSAEncryption
         1b:c4:1f:d7:50:49:d4:63:51:4c:51:9e:98:8b:05:4d:91:69:
         6d:d3:4a:d7:34:46:ce:c6:64:99:d4:f1:0a:38:9b:b3:2a:29:
         fd:81:a1:2d:f2:ff:30:2d:12:33:e8:fe:90:d3:02:36:de:7b:
         d8:82:54:7a:c8:a1:75:99:cd:ac:7e:87:82:65:9b:99:fc:b5:
         51:9c:38:34:df:81:32:bc:08:38:a5:c3:ad:61:ef:ac:c5:4a:
         cb:62:09:0d:12:14:91:ae:39:42:39:95:0a:ba:92:cc:18:d6:
         37:8b:4e:89:59:8d:60:de:9d:dc:e3:43:e3:60:5f:49:5c:af:
         97:41:16:4f:3b:1d:cb:61:68:07:24:04:81:29:8f:b3:04:21:
         b4:a7:df:95:b4:8e:45:a7:2d:08:b4:ac:39:06:ef:24:2e:43:
         70:25:f9:0e:45:06:9c:a6:34:a0:9a:18:32:64:c1:00:28:8e:
         e0:21:fa:35:7a:8c:72:15:77:0b:b3:80:4b:7c:a6:6c:80:93:
         54:03:5e:76:5a:9f:e0:7c:d0:47:ab:17:be:7b:64:cc:2e:1f:
         52:0d:4f:27:19:05:76:c3:33:1b:e6:36:09:af:9b:7f:2a:9f:
         db:c9:9c:14:b8:29:bc:df:b4:de:88:68:cb:8c:ad:aa:68:55:
         14:ef:27:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:14:25 2024 by rpki-client on console-fra.rpki-client.org