Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer
File:                     8547D0C1A84725BCC8A05B725C22293DAC420C79.cer (raw, json)
Hash identifier:          N8PGvL6e1EIYPsepJ5PcVHH9QH0Ko68xkuaW0wW3ibs=
Subject key identifier:   85:47:D0:C1:A8:47:25:BC:C8:A0:5B:72:5C:22:29:3D:AC:42:0C:79
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4BD1323A170DEC07115A3B8E0BC6F88498934B22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 03:02:14 +0000
Certificate not after:    Thu 03 Apr 2025 03:07:14 +0000
Subordinate resources:    AS: 52907
                          IP: 177.23.104.0/22
                          IP: 189.76.80.0/20
                          IP: 2804:ab0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d1:32:3a:17:0d:ec:07:11:5a:3b:8e:0b:c6:f8:84:98:93:4b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 03:02:14 2024 GMT
            Not After : Apr  3 03:07:14 2025 GMT
        Subject: CN=8547D0C1A84725BCC8A05B725C22293DAC420C79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b3:5f:69:70:3d:cd:be:43:64:23:18:1a:c7:
                    54:36:d5:0f:77:0d:b1:75:cb:c1:37:02:f7:a6:b4:
                    03:ba:5a:dc:3f:a1:ea:78:17:a0:ed:9b:53:13:f8:
                    da:49:5f:77:24:10:82:37:e8:7d:6a:2a:ea:30:8d:
                    e6:d9:9c:60:ac:47:ba:12:4a:e0:46:69:d3:fc:5e:
                    83:0d:4d:dc:de:dd:0d:e5:79:5f:e8:59:b6:44:35:
                    cf:9a:22:4e:ac:85:7d:69:83:bb:90:9f:b2:3a:0d:
                    29:b1:f3:7a:02:7c:0e:85:91:ef:da:cd:b1:a9:65:
                    ba:30:c3:f3:bf:97:f5:29:14:da:7c:4b:8a:89:47:
                    1f:91:aa:d7:c3:67:87:4a:76:42:46:05:8c:57:c7:
                    63:93:54:43:c7:80:f8:0e:74:d3:6c:91:c9:8d:f7:
                    6d:e4:94:53:35:2d:1a:f0:10:2e:c3:d4:f4:e7:76:
                    17:83:8b:2e:9f:fa:ef:15:db:4d:36:0d:49:8d:fc:
                    74:be:7b:ca:36:72:86:a7:68:f0:f3:79:7b:2d:d7:
                    99:53:83:94:35:c0:02:67:1c:77:23:6f:1b:1a:4c:
                    c2:76:14:44:89:13:7c:e7:eb:22:79:be:dc:ae:50:
                    a6:fc:a4:b5:1c:14:ab:b1:a6:a5:a3:0d:d0:7f:1f:
                    db:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                85:47:D0:C1:A8:47:25:BC:C8:A0:5B:72:5C:22:29:3D:AC:42:0C:79
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.104.0/22
                  189.76.80.0/20
                IPv6:
                  2804:ab0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52907

    Signature Algorithm: sha256WithRSAEncryption
         33:0e:1f:f6:35:b5:a2:9b:65:d1:ea:fb:10:2b:a0:5d:29:c0:
         fa:d1:a4:97:b1:5a:21:92:67:91:86:19:27:11:dd:eb:09:1c:
         4f:b1:55:dc:f4:24:b1:42:b2:f0:e5:76:6a:14:b9:3c:ed:92:
         84:fb:83:a6:19:b5:8f:bb:fb:d4:a7:ac:eb:b4:b9:77:3d:25:
         fd:af:b5:e3:be:8e:4e:fd:77:97:fc:3b:71:0b:52:02:ea:1d:
         0f:2b:90:6c:d9:ac:7f:9e:39:59:3e:cb:46:ce:16:97:0a:6f:
         cf:32:49:60:82:22:4f:e9:1f:46:ff:37:09:5d:a6:50:ad:32:
         c4:a9:30:4c:58:c5:a0:ba:62:4f:9e:86:eb:98:14:76:d9:df:
         fe:59:7b:4c:6d:d2:21:24:ca:81:10:14:90:3b:eb:b3:f6:41:
         4c:69:d8:4a:69:f1:a3:4f:5e:d3:24:7a:c0:1a:20:26:a8:40:
         0c:20:73:8f:c7:dd:08:e0:ad:25:ab:63:9f:44:05:a1:2e:99:
         86:37:ef:9a:bf:d2:49:d1:70:a2:3e:5c:41:2b:3d:56:78:25:
         b8:e6:26:2f:c5:a2:b5:76:b9:6c:fe:52:59:74:c6:e9:ee:7b:
         85:74:a0:6d:e6:fc:59:e5:94:93:c1:d6:86:52:c9:6f:1d:e0:
         5c:e1:7e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:06:18 2024 by rpki-client on console-ams.rpki-client.org