Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4946A4EA305FB6F5E6A56BA5C5980C19A72848A3.cer
File:                     4946A4EA305FB6F5E6A56BA5C5980C19A72848A3.cer (raw, json)
Hash identifier:          jlR79Wl8LwJvzfM5bzibkY7IcUAgailVINfcr8sV6j0=
Subject key identifier:   49:46:A4:EA:30:5F:B6:F5:E6:A5:6B:A5:C5:98:0C:19:A7:28:48:A3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1BB14F39DC889B899BA6AB1DECFFDC979BA10892
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/4946A4EA305FB6F5E6A56BA5C5980C19A72848A3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 May 2025 17:11:50 +0000
Certificate not after:    Mon 04 May 2026 17:16:50 +0000
Subordinate resources:    AS: 269606
                          IP: 45.190.0.0/22
                          IP: 2804:6724::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 09 May 2025 23:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b1:4f:39:dc:88:9b:89:9b:a6:ab:1d:ec:ff:dc:97:9b:a1:08:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  5 17:11:50 2025 GMT
            Not After : May  4 17:16:50 2026 GMT
        Subject: CN=4946A4EA305FB6F5E6A56BA5C5980C19A72848A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:83:a8:c4:89:61:08:e3:10:66:e9:18:b7:10:
                    d1:1b:87:e4:ff:b4:73:e1:8f:01:bc:3d:68:71:93:
                    bd:5a:e1:14:4f:7f:53:a3:75:dd:9a:d0:92:83:10:
                    3b:37:c1:d8:2a:0e:43:d4:8e:f5:76:e7:56:91:e9:
                    83:dc:16:3a:4d:85:85:71:5a:3e:17:a3:34:0f:01:
                    ac:59:d7:7d:05:ea:9a:5f:2b:37:27:83:db:6d:ac:
                    7a:c2:9c:99:12:da:16:a4:8a:d2:c4:3a:5b:0a:ea:
                    dd:3b:96:cc:1b:56:2c:a0:7d:53:15:12:1d:4c:b4:
                    85:6c:e1:8e:24:72:d8:0a:8b:67:db:f2:f3:d5:fc:
                    91:f0:b8:5d:c9:ad:d8:64:68:fa:40:1a:39:0d:71:
                    ea:e5:2d:5c:59:81:e2:5f:59:a1:24:13:b0:5e:82:
                    4b:23:e7:06:b0:70:c5:dd:e2:48:4f:88:72:7d:25:
                    63:80:b0:ed:be:2c:3b:d2:6b:7b:ca:24:89:cf:6f:
                    46:81:3f:37:79:6a:73:07:38:78:d1:d2:77:32:63:
                    de:2a:fd:90:d6:f7:6f:01:c6:f2:e7:ca:17:d8:31:
                    94:84:c7:ee:b2:84:a6:8f:12:5c:e7:54:37:2e:50:
                    de:03:e5:1c:ed:e7:48:d7:05:e6:2f:35:62:95:2a:
                    26:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:46:A4:EA:30:5F:B6:F5:E6:A5:6B:A5:C5:98:0C:19:A7:28:48:A3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/4946A4EA305FB6F5E6A56BA5C5980C19A72848A3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.0.0/22
                IPv6:
                  2804:6724::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269606

    Signature Algorithm: sha256WithRSAEncryption
         23:8a:9e:ae:73:d3:62:fe:a5:23:24:d3:5a:95:4f:28:b3:95:
         18:7b:58:39:1c:97:51:37:22:42:f3:8c:de:55:8b:e8:44:52:
         5f:7e:e3:0b:ab:4c:cd:c2:13:e6:8e:d1:d4:d9:98:79:25:39:
         91:cf:4f:c9:8c:8b:10:b5:e4:a6:83:34:56:33:f4:1f:58:93:
         ca:f0:f8:49:23:1a:48:7a:f1:18:1c:e7:4e:e5:1f:3e:4f:ef:
         a4:f3:fa:e3:31:70:9e:ec:1a:12:f8:c8:d3:83:88:d9:ab:8a:
         42:e2:f6:1d:03:44:9e:30:66:bd:02:3b:07:47:a1:4b:f0:ba:
         aa:b5:3b:04:4c:0d:eb:57:95:30:4e:2a:d0:56:c3:e3:d3:61:
         7f:b4:a4:67:09:17:6d:be:f4:4e:54:04:d5:ec:86:0d:83:6d:
         be:09:a3:fc:7d:01:04:22:7d:87:7d:8e:8b:ea:c5:af:9b:ce:
         81:90:10:bb:09:37:0a:eb:43:df:bd:e1:be:9e:f3:45:5e:7b:
         6d:7b:b3:b6:e6:51:d4:7f:cb:2f:a6:91:84:21:1e:73:20:bf:
         0d:73:62:69:0d:f5:60:01:0b:89:47:1c:4f:87:e3:ed:ea:6f:
         6f:f7:34:ec:9e:f1:4f:63:b9:2c:cf:52:42:e0:b9:0a:4e:22:
         36:58:5a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:40:03 2025 by rpki-client