Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4DD41C755595E90FA7710BB5773D9E9130E7279B.cer
File:                     4DD41C755595E90FA7710BB5773D9E9130E7279B.cer (raw, json)
Hash identifier:          Vu37pHcWtH9kEXP2sp6EweXHglouiZrGCMYuJPImuiA=
Subject key identifier:   4D:D4:1C:75:55:95:E9:0F:A7:71:0B:B5:77:3D:9E:91:30:E7:27:9B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       598A7DAEBE63B294603B8D22C1221118C9DD938F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/4DD41C755595E90FA7710BB5773D9E9130E7279B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 05 May 2025 18:39:51 +0000
Certificate not after:    Mon 04 May 2026 18:44:51 +0000
Subordinate resources:    AS: 263483
                          IP: 191.242.224.0/22
                          IP: 2804:128c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 02:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:8a:7d:ae:be:63:b2:94:60:3b:8d:22:c1:22:11:18:c9:dd:93:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May  5 18:39:51 2025 GMT
            Not After : May  4 18:44:51 2026 GMT
        Subject: CN=4DD41C755595E90FA7710BB5773D9E9130E7279B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6a:8f:ac:53:c3:27:94:47:72:23:fe:9d:f9:
                    82:84:1e:80:d5:86:a9:e6:8d:c9:52:07:da:ee:3c:
                    09:5f:a4:a7:76:70:32:75:cf:46:c4:bb:54:58:26:
                    5b:ce:7a:19:9c:fc:cc:b5:22:60:9b:ec:3b:a0:2e:
                    09:27:30:78:41:f6:b6:43:53:1d:94:50:1d:06:4e:
                    2d:0a:68:af:b1:57:7c:55:43:43:8e:90:c4:14:ad:
                    4a:cd:ff:98:b3:c3:d3:7f:02:0b:d3:cd:48:1d:a8:
                    2b:d8:6b:56:62:21:0a:2e:bd:14:b7:e9:16:b4:3a:
                    bc:c3:1c:f2:67:08:5e:ff:c4:68:97:82:ef:9c:18:
                    4a:c7:de:8d:10:d4:a2:01:20:cc:46:08:85:f2:23:
                    9d:10:73:f9:29:f1:65:7a:a0:f3:bc:65:da:1e:47:
                    9d:65:65:74:46:88:c8:85:2e:f4:99:b5:fb:97:f1:
                    ae:a1:dd:30:e9:53:fb:6b:a7:46:3b:6a:2b:06:41:
                    1e:3f:32:0a:99:4d:0c:47:b8:5c:79:aa:07:f7:e6:
                    2c:71:42:5d:46:96:0d:68:b7:f1:f5:52:16:d2:4a:
                    2e:00:71:f4:a1:80:ce:4b:72:a4:c0:f8:03:93:22:
                    ba:56:5f:41:41:f5:3b:0b:8b:b7:0f:a3:53:ec:91:
                    93:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4D:D4:1C:75:55:95:E9:0F:A7:71:0B:B5:77:3D:9E:91:30:E7:27:9B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GDY3f3DfNk8mtmAiHq8jQ7TzsgAcBHNvPnCfKuNdUm78/0/4DD41C755595E90FA7710BB5773D9E9130E7279B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.224.0/22
                IPv6:
                  2804:128c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263483

    Signature Algorithm: sha256WithRSAEncryption
         2a:04:05:38:10:4d:07:38:ba:42:14:65:6c:95:56:e2:b0:2f:
         83:74:64:12:25:fb:7c:48:46:8d:5c:3a:fe:03:43:b5:c7:21:
         f3:d9:a0:a9:52:73:39:0a:7c:5c:cb:1b:c9:af:3e:02:19:11:
         3d:06:9c:4b:09:ba:d9:97:59:15:49:c4:39:ab:7b:b8:75:e8:
         94:4c:f1:20:ae:67:22:02:44:8b:3b:1a:04:33:71:5a:67:8d:
         ec:a8:54:5d:f4:f8:f0:7c:a0:bc:b3:c6:b3:21:74:88:6e:74:
         4e:de:c4:63:6c:ad:1c:80:e6:19:c0:47:01:f0:c0:d5:f0:5a:
         4f:41:97:c8:50:65:f5:1b:9e:5b:07:53:09:62:8b:d5:ba:ca:
         c7:0a:65:b3:a2:53:01:57:60:c0:3c:70:4b:5d:23:7b:55:4a:
         c5:74:91:2a:18:01:08:8d:d4:e2:8c:d9:0d:9d:09:b6:d9:e6:
         c6:a4:cd:52:e9:ad:58:7c:7c:a4:33:c6:2a:04:e0:a7:47:2e:
         d1:4a:bf:5c:fd:4f:31:d9:bb:e7:00:9c:d9:81:6e:53:3b:9f:
         13:23:25:9b:7d:dd:ad:4c:61:29:89:18:f9:07:e7:ae:4a:23:
         db:be:45:ee:06:1e:e4:c7:53:8f:dc:39:69:b6:c5:62:2e:a6:
         60:31:46:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:12:46 2025 by rpki-client