Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.cer
File:                     D2986464325E8FD5DF10CBFA8DD303EF12449774.cer (raw, json)
Hash identifier:          uPdNvMpIU5DfGKsZjxSPmo+7ba5lejg8abZn6hmFvgc=
Subject key identifier:   D2:98:64:64:32:5E:8F:D5:DF:10:CB:FA:8D:D3:03:EF:12:44:97:74
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       459B6208BC955B65A0610EE2A3A4B8DA99872946
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 02:56:31 +0000
Certificate not after:    Thu 03 Apr 2025 03:01:31 +0000
Subordinate resources:    AS: 267640
                          IP: 45.71.248.0/22
                          IP: 2804:4494::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9b:62:08:bc:95:5b:65:a0:61:0e:e2:a3:a4:b8:da:99:87:29:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 02:56:31 2024 GMT
            Not After : Apr  3 03:01:31 2025 GMT
        Subject: CN=D2986464325E8FD5DF10CBFA8DD303EF12449774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:45:67:36:5f:71:42:09:aa:e3:e4:51:7a:bb:
                    5b:1b:26:39:56:68:fe:7a:56:ad:37:47:1c:38:e2:
                    08:7c:5a:4e:46:cd:3d:92:e8:29:4f:c9:9a:e0:4a:
                    bb:46:88:4a:97:73:28:d6:3b:b4:f1:a7:18:ac:1f:
                    d4:6d:d4:b8:e8:31:e2:7a:51:01:2b:b0:ee:4b:11:
                    0f:b2:ff:6d:a4:31:f2:f7:84:c9:1b:63:75:73:5d:
                    01:2e:9f:47:41:09:60:3e:7d:d5:87:ec:4b:48:d6:
                    ff:5d:c3:28:7a:f3:5d:2a:88:e0:0e:ba:7e:23:60:
                    25:89:1f:55:f4:24:6b:65:a8:77:66:cc:7d:51:fd:
                    77:9d:82:32:cd:d6:37:b0:df:6b:c5:65:40:73:a7:
                    7a:44:85:19:83:e6:3c:9c:13:3c:b3:0f:db:29:cb:
                    1a:0d:af:16:a3:ab:d9:d3:f4:29:a5:97:24:5f:90:
                    e9:3a:94:4d:f0:75:7a:9a:76:53:a3:35:c3:90:68:
                    fa:fa:a8:41:c3:df:ba:e3:0a:d0:65:b7:ed:35:29:
                    f5:03:31:c3:41:92:ed:ea:96:bc:98:c5:b8:78:65:
                    17:cd:48:47:3e:a5:9d:c6:c5:66:07:4d:e5:34:35:
                    c2:85:e1:47:bf:c4:a9:d3:7f:37:55:65:6f:97:24:
                    bb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:98:64:64:32:5E:8F:D5:DF:10:CB:FA:8D:D3:03:EF:12:44:97:74
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/1/D2986464325E8FD5DF10CBFA8DD303EF12449774.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.248.0/22
                IPv6:
                  2804:4494::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267640

    Signature Algorithm: sha256WithRSAEncryption
         4d:ae:76:50:d6:8c:9b:49:dc:c5:0f:1e:a6:7b:c1:b5:35:16:
         4a:b0:82:13:a2:04:18:22:df:52:78:c2:dc:a0:b6:19:0f:fb:
         98:cd:e9:5e:70:c8:a1:cb:20:3c:8c:27:03:4c:8f:24:69:96:
         0e:28:4a:f1:53:c8:1a:49:de:92:e0:ce:65:de:b2:28:05:bf:
         d1:d6:78:ea:09:ba:7f:de:fa:c1:48:7a:fe:93:80:9d:a2:e4:
         ca:3a:c6:9d:c2:eb:b8:12:88:7b:cc:55:2d:33:6d:55:69:bd:
         5d:f7:e8:59:de:a5:48:3d:8a:45:ef:e9:5a:6e:3f:8d:2c:87:
         ec:e2:1b:a7:0a:48:ce:86:39:ed:93:48:c8:e5:ee:48:93:00:
         26:db:49:99:cc:5f:63:4a:7b:35:9d:53:18:7d:08:32:82:47:
         9f:a9:fa:7f:95:59:f2:5c:ed:bf:db:7d:3e:3b:56:8b:e3:f5:
         c7:2a:40:b5:cd:50:9b:bf:21:4a:6f:8c:9c:29:45:5c:00:de:
         2c:69:0d:a1:4b:de:f2:cb:21:bd:a2:b8:79:2a:b2:58:41:4b:
         1e:e1:e9:09:a2:87:7c:1b:78:90:88:03:e1:b4:b5:e0:b2:d6:
         b8:d3:2c:c4:88:7a:f9:56:13:e1:ed:b8:14:fc:05:30:dd:8c:
         01:25:57:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:01 2024 by rpki-client on console-fra.rpki-client.org