Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8498356D517B9A4BCC9A959FD112ED6755FD7D34.cer
File:                     8498356D517B9A4BCC9A959FD112ED6755FD7D34.cer (raw, json)
Hash identifier:          3TkvZ4lS3r7k1WS0GA/btruEMoc0JAISm54LRdtKAXU=
Subject key identifier:   84:98:35:6D:51:7B:9A:4B:CC:9A:95:9F:D1:12:ED:67:55:FD:7D:34
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       658822FEF9A0001FF2B59E4590E3C47A980CE549
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/8498356D517B9A4BCC9A959FD112ED6755FD7D34.mft
caRepository:             rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Apr 2024 15:13:47 +0000
Certificate not after:    Thu 24 Apr 2025 15:18:47 +0000
Subordinate resources:    AS: 264319
                          IP: 138.122.116.0/22
                          IP: 2804:2608::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 03:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:88:22:fe:f9:a0:00:1f:f2:b5:9e:45:90:e3:c4:7a:98:0c:e5:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 25 15:13:47 2024 GMT
            Not After : Apr 24 15:18:47 2025 GMT
        Subject: CN=8498356D517B9A4BCC9A959FD112ED6755FD7D34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f6:2c:d7:18:32:da:7a:4a:7a:a6:b3:8b:7a:
                    82:59:8a:76:36:84:2b:81:11:20:88:f4:06:36:cf:
                    0f:9e:de:8d:da:c5:d6:0e:89:9b:a8:28:29:57:cf:
                    e6:d7:41:66:fb:72:f4:6e:93:1d:05:3b:33:e3:7a:
                    47:26:1f:b4:02:17:56:e6:3a:1c:48:78:1a:b6:bd:
                    ea:5c:59:a1:d1:c4:65:c5:52:3a:75:ac:61:cf:e7:
                    54:c2:52:34:87:87:d2:1d:99:7c:e3:bb:67:e1:8d:
                    50:8c:db:57:53:34:a7:99:b3:a1:17:32:0b:8e:cd:
                    ca:7e:a4:02:2e:7c:7e:f4:e5:5c:03:ea:a9:dd:b5:
                    de:39:bd:5f:88:84:a9:45:a4:c6:38:25:80:ed:33:
                    c1:72:42:21:22:47:9b:6c:37:39:f0:5f:ba:00:a5:
                    d3:5a:cd:8a:78:85:c1:95:02:ab:07:46:be:23:58:
                    09:17:f1:21:f3:aa:31:c7:87:3e:01:73:af:bb:91:
                    f7:e7:e0:59:f7:fc:10:73:95:0f:71:05:1e:64:5d:
                    b1:c6:0d:03:d7:d7:7f:46:43:8b:c0:fd:02:ef:26:
                    5a:68:16:21:c3:c4:3a:7d:cb:a4:e9:62:df:fd:f6:
                    71:28:a2:8c:80:ac:69:8b:d1:11:d4:97:f9:e7:c7:
                    f7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                84:98:35:6D:51:7B:9A:4B:CC:9A:95:9F:D1:12:ED:67:55:FD:7D:34
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/779C2nUJVYJTwyULZGoom993UEFGCCxcTz8T4EWgK3a4/0/8498356D517B9A4BCC9A959FD112ED6755FD7D34.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.116.0/22
                IPv6:
                  2804:2608::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264319

    Signature Algorithm: sha256WithRSAEncryption
         cd:39:2d:5b:33:4a:da:8f:6d:c5:cf:0c:36:06:5e:0c:bf:38:
         7f:1e:be:42:17:01:d2:61:71:6e:6b:62:89:6c:76:62:86:c1:
         26:92:84:9d:fa:ed:91:1d:d4:1d:c8:13:d3:1b:bf:d9:12:37:
         19:4c:31:6f:b3:9b:2d:20:28:ca:bc:de:3a:22:6a:e3:c2:ca:
         4b:3d:55:57:3a:03:cd:ae:2e:44:d1:ed:21:4d:aa:57:73:e9:
         a1:36:69:6b:43:d6:01:cf:18:44:e2:05:cd:12:05:67:15:68:
         7e:cc:ba:13:a2:d6:84:f6:61:55:29:27:e0:99:8d:1c:59:10:
         16:9d:f5:91:70:88:e4:c9:42:86:5f:5e:44:3c:2f:aa:b6:30:
         06:26:28:7c:45:66:2b:97:3a:fd:ac:3c:28:35:23:62:e0:ba:
         87:d8:8e:35:d5:37:74:ec:74:70:aa:f4:89:89:c2:ff:22:7d:
         b2:27:8c:84:0c:41:8f:c0:81:2c:0c:22:13:53:18:86:92:1c:
         50:86:6b:3c:fc:ce:33:00:74:72:6e:0a:a9:99:b9:be:78:94:
         f7:41:cb:28:98:10:85:8b:28:84:a5:f9:0c:c1:d2:fd:33:f7:
         88:c1:23:7e:85:24:f8:ae:4c:b1:21:b7:57:84:6d:95:ec:b3:
         b7:eb:58:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----