Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer
File:                     DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer (raw, json)
Hash identifier:          kyDPzBFTpxi/BEtMqmlmtLuqOEKnNtq+dmHVV1hGtaQ=
Subject key identifier:   DC:E2:4D:4E:9D:4D:E1:79:A9:32:39:E5:97:2A:0A:48:CB:E2:41:17
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       31527AF02E92BBDF67DF9688CD3BFF23A22CF6DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 17:28:20 +0000
Certificate not after:    Thu 05 Mar 2026 17:33:20 +0000
Subordinate resources:    AS: 268648
                          IP: 45.164.244.0/22
                          IP: 2804:5468::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:52:7a:f0:2e:92:bb:df:67:df:96:88:cd:3b:ff:23:a2:2c:f6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 17:28:20 2025 GMT
            Not After : Mar  5 17:33:20 2026 GMT
        Subject: CN=DCE24D4E9D4DE179A93239E5972A0A48CBE24117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7f:fc:52:95:07:43:7a:95:3f:41:a4:f2:09:
                    3b:72:68:d0:34:c5:ca:8d:1b:6d:74:03:b0:1b:ef:
                    0d:06:ea:47:e9:0e:f8:f5:97:a0:fa:98:5d:3f:3f:
                    6d:f6:47:2a:22:32:e8:77:84:94:be:40:52:a1:9a:
                    8d:10:3d:07:4b:ef:dd:ae:da:e5:f1:8d:28:d6:fa:
                    91:5a:da:1c:3f:2f:c1:54:50:ea:69:90:28:68:5f:
                    4b:6f:9d:45:5a:b5:d9:e6:b6:1d:22:70:8d:66:b7:
                    98:63:5e:bd:5a:b1:b0:97:cc:3f:dd:c1:72:5a:6e:
                    a4:95:57:41:df:06:07:62:6a:19:ee:6f:98:80:c8:
                    a2:01:c7:98:2a:27:1f:c4:a9:0e:f9:fd:3d:1a:c5:
                    ca:f9:57:c3:34:21:6a:8a:e7:5a:7b:57:aa:6a:c2:
                    42:6e:c6:4e:15:17:67:3a:57:03:cc:ce:f0:9b:98:
                    c4:1b:a8:78:53:d5:89:79:39:76:59:97:93:61:2c:
                    93:a3:21:a8:ec:8b:5c:87:36:0d:de:a9:7a:b3:32:
                    85:2e:41:c3:b6:7c:44:0d:47:57:bd:6b:73:f9:15:
                    09:fa:70:1f:6e:e6:7a:90:54:a7:13:5e:6a:4a:48:
                    ef:af:13:f1:8f:2c:b6:8b:5b:49:6d:43:1b:d9:84:
                    23:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:E2:4D:4E:9D:4D:E1:79:A9:32:39:E5:97:2A:0A:48:CB:E2:41:17
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.244.0/22
                IPv6:
                  2804:5468::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268648

    Signature Algorithm: sha256WithRSAEncryption
         71:8d:f1:94:b5:85:f6:48:f7:c8:8e:bc:7d:4d:6c:07:e1:96:
         a3:61:eb:5a:c7:f6:ca:68:10:f4:7f:83:12:74:fe:75:a7:ae:
         c9:9f:3f:12:e1:91:9d:06:72:f0:c4:b5:31:a7:e7:30:80:8f:
         ab:20:50:07:92:29:5e:bc:02:ce:b8:83:f8:12:c8:ab:04:29:
         19:93:99:17:d5:a9:62:71:00:06:d1:44:47:e3:73:21:3b:bf:
         7c:67:5d:02:0c:20:ca:bf:b6:2f:97:3c:02:3d:f2:c5:78:54:
         4e:63:a5:63:51:ad:e7:d2:d0:8d:a5:d8:5a:ff:26:1b:32:6e:
         94:7e:4f:fc:58:91:e8:53:cc:db:3c:bf:3a:ac:7d:18:f2:88:
         ab:2f:d9:c7:78:b8:63:42:8a:0e:7b:a3:a6:9a:56:af:71:ad:
         34:ac:04:58:50:59:93:df:10:4b:29:8e:a0:2b:4a:f9:06:b5:
         91:02:e7:df:e4:93:e2:1c:fc:99:0e:f9:00:66:1d:ac:d1:fd:
         5b:09:ef:23:5c:3f:28:5e:d6:9b:a0:ad:dc:ac:4c:20:9e:0d:
         2c:98:50:ee:cd:6c:71:22:af:5b:6c:93:53:b3:d4:64:26:fa:
         bd:06:18:62:da:f9:3e:14:ff:7e:b0:e6:8e:25:a8:97:53:0d:
         87:45:f0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:30:03 2025 by rpki-client