Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/028E1C811A385142DF6DF8C5382B1F0B1905AB4C.cer
File:                     028E1C811A385142DF6DF8C5382B1F0B1905AB4C.cer (raw, json)
Hash identifier:          wogJv2ZS0HHCvpNFHypgiUDWoa5o88whxDdPBatY6eg=
Subject key identifier:   02:8E:1C:81:1A:38:51:42:DF:6D:F8:C5:38:2B:1F:0B:19:05:AB:4C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0108EDAA2067ACBA3438F662095D10732CF9EED6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/028E1C811A385142DF6DF8C5382B1F0B1905AB4C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Apr 2024 16:21:18 +0000
Certificate not after:    Mon 14 Apr 2025 16:26:18 +0000
Subordinate resources:    AS: 265330
                          IP: 168.181.60.0/22
                          IP: 2804:2e30::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 02 Jun 2024 23:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:08:ed:aa:20:67:ac:ba:34:38:f6:62:09:5d:10:73:2c:f9:ee:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 15 16:21:18 2024 GMT
            Not After : Apr 14 16:26:18 2025 GMT
        Subject: CN=028E1C811A385142DF6DF8C5382B1F0B1905AB4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:eb:d4:34:b0:f6:2a:9e:fc:3a:67:af:3c:6c:
                    78:fa:22:89:ee:a1:63:69:ac:f1:71:8c:da:a0:a5:
                    30:0d:0e:ee:d5:bb:b8:3f:48:b1:51:da:b5:28:13:
                    7a:74:e9:9e:8d:8d:8f:bb:08:be:e1:7c:b5:d5:84:
                    d3:91:92:cd:6e:be:16:aa:27:44:86:17:a3:f3:a5:
                    88:16:ee:45:fa:0b:29:69:86:aa:92:e7:00:c3:e7:
                    e0:ad:8c:19:fb:7d:46:d1:05:18:51:23:c5:ce:29:
                    2d:dc:da:aa:68:4e:67:aa:56:73:2d:9d:80:50:6a:
                    47:41:e3:bd:e1:26:d4:e4:6e:9e:ff:e7:f0:64:01:
                    45:ea:5b:d6:92:24:93:5b:7f:76:4a:b7:5c:79:f5:
                    41:ec:e6:fc:fc:c1:d4:07:6b:5f:7c:78:fd:56:61:
                    62:8b:7e:2d:56:48:cb:f9:2c:5f:e2:d1:32:d2:08:
                    1e:4c:25:eb:3e:b1:14:ab:f7:07:06:ad:ed:0d:9a:
                    98:79:ed:e6:c7:24:59:1d:6b:b7:cf:21:05:42:63:
                    c7:7b:12:b8:49:9d:8f:11:76:98:bd:01:e9:77:e2:
                    ac:77:b4:2d:b1:24:ae:b5:9c:1e:ce:d9:9a:58:df:
                    99:76:20:89:e3:cb:21:5b:95:a1:c5:26:9d:d5:65:
                    08:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:8E:1C:81:1A:38:51:42:DF:6D:F8:C5:38:2B:1F:0B:19:05:AB:4C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CNsJ2qbZiTzeL5GdLCBfAXyHpsRBajbyN9oLQaiEnHCZ/0/028E1C811A385142DF6DF8C5382B1F0B1905AB4C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.60.0/22
                IPv6:
                  2804:2e30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265330

    Signature Algorithm: sha256WithRSAEncryption
         85:25:8b:84:38:73:17:af:74:1a:fe:27:30:d3:e3:cf:da:4b:
         72:2d:da:bc:fa:c0:40:a2:51:ef:31:a4:1a:4a:cd:02:c2:e6:
         d8:59:4c:04:87:04:01:10:9a:7a:6d:bf:53:7d:7f:b1:3a:60:
         90:97:ce:58:85:62:3b:99:27:8e:7e:3c:57:67:6c:a0:3f:82:
         49:f9:1e:ae:34:7e:a1:7f:e6:25:b7:4c:2a:9d:e7:79:76:ab:
         a1:81:30:fe:eb:20:df:b1:4a:f7:05:0c:71:20:45:06:da:ae:
         f0:86:a0:82:64:26:61:cf:7d:61:fe:0d:f6:a8:5b:61:5c:62:
         e7:ea:be:e2:3a:6d:5d:3e:8e:b3:eb:9c:b5:52:67:5b:42:92:
         ac:17:ac:c2:25:cc:4f:27:44:1c:54:98:bc:5b:20:53:56:08:
         f0:64:83:c4:91:f0:4d:b0:03:2e:83:1d:ef:f0:9b:0b:88:a4:
         36:55:64:14:fc:fa:03:62:99:db:d6:a6:2e:af:84:4d:d7:1f:
         5d:e3:a3:30:e4:5b:67:0a:7f:cf:51:1e:67:20:0e:69:83:28:
         fd:37:fc:4d:9e:30:52:64:6a:26:8e:cf:d8:c0:de:21:20:47:
         b9:2b:c8:98:95:3c:f1:42:50:b6:f8:24:e1:ed:28:22:5e:e0:
         a7:3f:82:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 00:29:05 2024 by rpki-client on console-ams.rpki-client.org