Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/04E2212E8119A88F829030DBA9530D79080ABB93.cer
File:                     04E2212E8119A88F829030DBA9530D79080ABB93.cer (raw, json)
Hash identifier:          Odgsrrqk8kCH0+QLe/Y7wWJ8W+s3d9kAGmcD0X6Yexs=
Subject key identifier:   04:E2:21:2E:81:19:A8:8F:82:90:30:DB:A9:53:0D:79:08:0A:BB:93
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7834059E8D4ADB7D08E6365E0FB9A7FEB11B5221
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/04E2212E8119A88F829030DBA9530D79080ABB93.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Aug 2024 14:52:55 +0000
Certificate not after:    Mon 18 Aug 2025 14:57:55 +0000
Subordinate resources:    AS: 262486
                          IP: 177.66.8.0/21
                          IP: 2804:1114::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:34:05:9e:8d:4a:db:7d:08:e6:36:5e:0f:b9:a7:fe:b1:1b:52:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 19 14:52:55 2024 GMT
            Not After : Aug 18 14:57:55 2025 GMT
        Subject: CN=04E2212E8119A88F829030DBA9530D79080ABB93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0c:99:83:3c:59:fb:6a:d3:fb:10:76:ef:a6:
                    7c:e3:2d:7c:9f:b7:42:d8:9b:40:b6:37:49:fb:bd:
                    cd:b7:9e:b0:bd:90:69:4d:4f:67:9d:c4:11:16:ec:
                    ed:a1:c1:8c:1e:28:d2:44:3b:c0:ad:66:33:b2:1b:
                    53:52:2b:41:28:71:9a:f1:a9:14:93:b8:7a:fa:8d:
                    3e:bd:40:48:c1:0e:86:71:98:66:47:f9:e9:f0:29:
                    07:0c:12:95:33:53:90:8e:8b:da:18:ec:82:a6:c8:
                    49:a0:a1:7f:05:ac:f3:44:11:4a:bd:80:4d:1b:d3:
                    49:44:94:84:9a:a7:4a:50:b7:f4:2c:ec:04:f8:0a:
                    f7:b9:46:ba:0e:6a:b0:73:f8:aa:f5:21:2a:b0:7f:
                    62:14:7f:bc:7d:26:19:25:ae:10:6a:44:0e:0c:74:
                    6e:d8:1b:84:26:2b:92:ab:a5:af:ae:0b:34:61:06:
                    41:3a:55:13:b4:03:c1:13:b5:ef:1f:1d:58:bd:da:
                    40:1b:b7:87:66:bc:f7:20:3a:3f:d2:c6:9c:07:71:
                    f9:d1:32:41:10:b8:2e:63:4f:4e:77:1f:8c:c1:59:
                    3f:db:4e:01:60:53:d4:55:31:32:ae:bf:da:83:56:
                    5c:53:66:bd:0c:07:96:ec:dd:8a:35:1e:15:29:5f:
                    86:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:E2:21:2E:81:19:A8:8F:82:90:30:DB:A9:53:0D:79:08:0A:BB:93
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/04E2212E8119A88F829030DBA9530D79080ABB93.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.8.0/21
                IPv6:
                  2804:1114::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262486

    Signature Algorithm: sha256WithRSAEncryption
         a2:6a:d9:6d:ba:47:3f:54:72:93:dd:f2:cb:d1:fa:9d:4b:c8:
         0c:a4:14:1e:30:e1:5b:4c:13:2e:5f:ef:e3:74:18:e3:c7:f0:
         19:96:c8:12:0c:a9:00:1e:04:a8:6d:c5:a3:3e:29:5c:4e:bb:
         16:2d:b0:ff:c8:cb:cf:17:ae:74:39:6a:cd:f9:96:65:d9:90:
         d6:ae:38:e9:43:c4:a0:20:89:30:14:8f:16:80:36:36:63:90:
         70:1f:b0:49:e5:6e:a9:01:2c:b0:61:43:a9:08:9f:a4:5b:11:
         ae:1f:f3:cc:f7:2d:6e:6d:87:db:ec:ea:14:f7:d2:5b:93:79:
         8b:5f:86:cd:7d:d1:34:e3:4c:10:da:38:23:3d:4e:db:01:b6:
         27:26:33:86:ee:89:76:9c:b5:19:be:49:6b:9e:3e:f9:df:70:
         7e:2b:8c:41:d3:3a:05:35:dc:c4:b8:83:bf:19:c2:79:12:f5:
         4f:43:d0:a1:7a:e1:ed:10:9d:37:cf:57:49:81:0a:70:a1:4f:
         36:e6:91:19:83:af:b6:4f:fd:40:79:b9:81:1e:fe:9b:fd:38:
         27:2d:c7:2b:26:42:9b:1c:bf:30:02:67:b9:89:08:98:70:26:
         45:79:64:91:7e:fb:18:c3:75:4f:ac:6d:96:71:31:1d:91:31:
         44:dd:f6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:18 2024 by rpki-client on console-ams.rpki-client.org