Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/88E26E0285FA89F0727C6A0265CEE4C1D33E3B08.cer
File:                     88E26E0285FA89F0727C6A0265CEE4C1D33E3B08.cer (raw, json)
Hash identifier:          RvtHtHb1wWXifMLVomN8xvL6TjKwt5oUnapQB7ru/yo=
Subject key identifier:   88:E2:6E:02:85:FA:89:F0:72:7C:6A:02:65:CE:E4:C1:D3:3E:3B:08
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2AC4033EC5E849E0A090E6875D8B878935272160
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/1/88E26E0285FA89F0727C6A0265CEE4C1D33E3B08.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 22:45:23 +0000
Certificate not after:    Wed 02 Apr 2025 22:50:23 +0000
Subordinate resources:    AS: 262565
                          IP: 168.0.140.0/22
                          IP: 177.73.48.0/21
                          IP: 2804:610::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 06:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:c4:03:3e:c5:e8:49:e0:a0:90:e6:87:5d:8b:87:89:35:27:21:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 22:45:23 2024 GMT
            Not After : Apr  2 22:50:23 2025 GMT
        Subject: CN=88E26E0285FA89F0727C6A0265CEE4C1D33E3B08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0f:5d:4e:0d:bb:37:4e:dd:a8:dd:29:21:43:
                    4c:37:a1:af:9c:65:ba:39:d5:9c:e5:ce:5d:e5:64:
                    1b:a8:a3:30:5c:41:8a:2c:da:60:8e:65:3f:c0:e9:
                    3b:1f:bc:ce:fe:8c:a3:6a:8a:7f:21:a8:f2:92:e8:
                    26:4a:5b:b8:7a:af:7e:c5:92:23:96:5d:1a:f7:3e:
                    d4:27:2a:5b:1a:fb:c5:11:3b:97:c6:81:56:f3:a4:
                    81:0b:b2:ea:fc:0d:2c:9d:86:86:bc:4f:f0:dd:44:
                    0b:20:1c:02:51:65:30:b3:45:37:c7:9c:00:ff:9e:
                    99:91:37:7a:3c:63:a0:61:ca:ed:a8:4c:6b:2d:f3:
                    1d:d7:a7:b6:79:6c:9b:fe:b2:1f:8b:5c:cf:00:cd:
                    67:14:b3:bc:6c:1b:80:53:9f:38:ae:06:44:20:80:
                    51:18:11:9b:2e:f3:e6:68:9c:4c:f8:31:44:c2:0b:
                    78:e1:c3:7e:40:11:60:73:61:55:d5:ab:80:3c:f4:
                    44:04:a4:06:9a:e3:dc:31:c3:e7:6a:8b:52:49:56:
                    70:c1:c1:d5:af:22:45:d2:d8:5f:17:a5:01:f9:1a:
                    1f:b7:50:9d:b6:3e:bd:4e:72:3a:4a:e3:ce:0d:c9:
                    e9:9f:a9:52:a8:68:b4:fe:89:40:8e:d2:80:89:0a:
                    9f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                88:E2:6E:02:85:FA:89:F0:72:7C:6A:02:65:CE:E4:C1:D3:3E:3B:08
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G852YA5QNVqtq35fcNcmMNU89AC6ER5oUgGenPLZXd99/1/88E26E0285FA89F0727C6A0265CEE4C1D33E3B08.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.140.0/22
                  177.73.48.0/21
                IPv6:
                  2804:610::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262565

    Signature Algorithm: sha256WithRSAEncryption
         92:50:20:f8:96:46:0f:f0:cc:cd:4f:2d:48:97:0e:1f:46:7b:
         c6:ca:45:18:fd:c1:3e:36:df:51:7e:38:96:9d:ae:a5:09:b5:
         98:a9:6f:62:bb:39:95:52:5c:df:50:5c:12:18:b2:a3:61:75:
         0c:2b:17:81:14:82:ba:8e:09:23:74:8c:a6:d2:84:36:37:eb:
         82:c4:88:62:b4:21:dd:d1:78:d4:09:9b:4b:0d:9d:f2:90:33:
         cb:6a:cd:49:cd:bd:92:8d:ed:df:70:7d:f7:96:2c:b8:35:28:
         8e:e5:c1:97:b1:db:aa:93:19:01:47:f9:20:f9:47:45:aa:79:
         41:a4:5d:a9:49:cb:79:67:fc:4a:cb:c8:23:36:5e:b2:de:f8:
         35:83:38:0e:f3:f9:d5:cf:47:22:01:ef:1c:2b:ce:d4:55:b9:
         75:87:6a:bd:c6:45:82:82:46:f5:b2:ce:71:35:43:f4:00:47:
         6b:fe:5d:ea:5d:cf:bf:8e:58:ac:da:74:85:d0:8b:d8:ad:6d:
         50:c5:59:08:bd:37:e4:7e:37:2a:ba:a9:a3:d9:11:13:81:69:
         24:c0:28:81:f2:70:8f:38:35:0c:d7:dd:c4:d5:01:eb:10:4b:
         b3:55:5b:d0:03:e4:f9:1f:6d:c1:06:6a:c1:86:9a:e0:df:3a:
         1e:58:17:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:18:05 2024 by rpki-client on console-fra.rpki-client.org