Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer
File:                     DCE24D4E9D4DE179A93239E5972A0A48CBE24117.cer (raw, json)
Hash identifier:          wo0RfSnpLM5CkE2i6JjHdbIDwubo+Wbr6OcZycuVLsg=
Subject key identifier:   DC:E2:4D:4E:9D:4D:E1:79:A9:32:39:E5:97:2A:0A:48:CB:E2:41:17
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       50FE6D030B592A74C355599FA1AC67BEE2C4177F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 07:50:31 +0000
Certificate not after:    Thu 03 Apr 2025 07:55:31 +0000
Subordinate resources:    AS: 268648
                          IP: 45.164.244.0/22
                          IP: 2804:5468::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 01:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fe:6d:03:0b:59:2a:74:c3:55:59:9f:a1:ac:67:be:e2:c4:17:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 07:50:31 2024 GMT
            Not After : Apr  3 07:55:31 2025 GMT
        Subject: CN=DCE24D4E9D4DE179A93239E5972A0A48CBE24117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7f:fc:52:95:07:43:7a:95:3f:41:a4:f2:09:
                    3b:72:68:d0:34:c5:ca:8d:1b:6d:74:03:b0:1b:ef:
                    0d:06:ea:47:e9:0e:f8:f5:97:a0:fa:98:5d:3f:3f:
                    6d:f6:47:2a:22:32:e8:77:84:94:be:40:52:a1:9a:
                    8d:10:3d:07:4b:ef:dd:ae:da:e5:f1:8d:28:d6:fa:
                    91:5a:da:1c:3f:2f:c1:54:50:ea:69:90:28:68:5f:
                    4b:6f:9d:45:5a:b5:d9:e6:b6:1d:22:70:8d:66:b7:
                    98:63:5e:bd:5a:b1:b0:97:cc:3f:dd:c1:72:5a:6e:
                    a4:95:57:41:df:06:07:62:6a:19:ee:6f:98:80:c8:
                    a2:01:c7:98:2a:27:1f:c4:a9:0e:f9:fd:3d:1a:c5:
                    ca:f9:57:c3:34:21:6a:8a:e7:5a:7b:57:aa:6a:c2:
                    42:6e:c6:4e:15:17:67:3a:57:03:cc:ce:f0:9b:98:
                    c4:1b:a8:78:53:d5:89:79:39:76:59:97:93:61:2c:
                    93:a3:21:a8:ec:8b:5c:87:36:0d:de:a9:7a:b3:32:
                    85:2e:41:c3:b6:7c:44:0d:47:57:bd:6b:73:f9:15:
                    09:fa:70:1f:6e:e6:7a:90:54:a7:13:5e:6a:4a:48:
                    ef:af:13:f1:8f:2c:b6:8b:5b:49:6d:43:1b:d9:84:
                    23:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:E2:4D:4E:9D:4D:E1:79:A9:32:39:E5:97:2A:0A:48:CB:E2:41:17
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4QCg5qy6i1Y9Ka3f4FQQkxAVgdis94wRsWHjwmE3StjB/1/DCE24D4E9D4DE179A93239E5972A0A48CBE24117.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.244.0/22
                IPv6:
                  2804:5468::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268648

    Signature Algorithm: sha256WithRSAEncryption
         54:dc:12:2f:60:53:dd:42:4e:03:ac:8e:48:32:83:48:d3:eb:
         0c:81:9a:e1:b9:36:fd:9a:ca:ff:f1:59:33:70:fa:29:37:32:
         2d:b5:8c:ab:bc:4d:fd:bb:79:65:38:e7:38:7b:21:c6:2b:66:
         30:b8:ad:fe:3b:bc:1a:c9:35:24:3e:97:30:f6:f2:b6:ac:ad:
         b9:e0:e3:85:ed:a5:76:c2:d7:46:92:5d:b1:1d:a0:5b:6c:eb:
         60:8a:04:f4:62:db:6f:29:ce:01:cf:12:d6:c7:36:9d:8e:81:
         63:a2:b4:8d:72:b7:08:4d:a3:13:16:a7:6c:a3:91:6d:48:96:
         0a:77:0c:ec:b0:dc:60:7d:9f:f4:c6:d8:c6:76:0c:ce:eb:f0:
         66:13:31:f5:d3:01:d8:5f:73:7b:96:5c:b1:3a:fc:ee:2f:8e:
         94:c1:99:29:68:9a:52:9d:92:09:c0:17:24:42:bd:cb:72:5b:
         14:8c:3e:c0:e7:55:af:9f:00:21:f8:15:41:99:23:9f:40:df:
         77:e6:ce:3e:74:b9:3f:c3:56:2e:b5:77:cb:33:bb:0b:31:ca:
         10:af:3f:81:0e:2c:80:55:8f:94:d9:98:ae:6b:b3:7b:7f:cb:
         96:0c:14:15:1e:b4:99:b5:92:b9:42:19:48:1b:d3:d7:76:2f:
         8b:d7:18:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:01:15 2024 by rpki-client on console-ams.rpki-client.org