Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8663247D8136C6B4962E7AFD2A8510373EEEE3B2.cer
File:                     8663247D8136C6B4962E7AFD2A8510373EEEE3B2.cer (raw, json)
Hash identifier:          mppH/JkIdt1XSq6W5ZIr2lDqEsVt9Q+tTPV318DSESo=
Subject key identifier:   86:63:24:7D:81:36:C6:B4:96:2E:7A:FD:2A:85:10:37:3E:EE:E3:B2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       618B78FED0CA22D53F7E355A579EB470F1A70C82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/8663247D8136C6B4962E7AFD2A8510373EEEE3B2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Apr 2024 11:29:56 +0000
Certificate not after:    Tue 22 Apr 2025 11:34:56 +0000
Subordinate resources:    AS: 268512
                          IP: 45.161.184.0/22
                          IP: 2804:5258::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 28 Nov 2024 00:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:8b:78:fe:d0:ca:22:d5:3f:7e:35:5a:57:9e:b4:70:f1:a7:0c:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 23 11:29:56 2024 GMT
            Not After : Apr 22 11:34:56 2025 GMT
        Subject: CN=8663247D8136C6B4962E7AFD2A8510373EEEE3B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:25:17:be:5e:23:b8:06:a0:12:0b:cb:63:87:
                    47:d1:49:e0:75:b5:af:91:5d:20:88:17:a5:b2:b1:
                    3f:b4:f7:ca:77:0c:d7:c2:53:12:cb:2b:b1:8b:88:
                    45:51:18:21:48:af:4b:5c:62:3f:42:5e:2d:50:1e:
                    31:5b:35:8c:af:03:38:2a:c5:91:49:66:07:30:d4:
                    bc:e7:91:6b:88:80:f4:f5:d8:f2:5f:91:d9:51:9e:
                    4c:01:20:65:90:63:f1:4c:1a:ee:a1:16:1a:fb:22:
                    e0:fb:b8:20:d0:29:86:65:d2:64:10:c6:8c:6d:20:
                    f9:7b:47:3f:4e:68:47:14:d4:c0:70:f0:3c:38:f3:
                    6b:99:e5:36:58:b1:9f:86:2e:8b:d2:41:9b:fa:30:
                    32:94:e3:38:b7:cb:04:47:e4:18:47:70:2d:68:90:
                    d8:78:d1:d5:68:d1:3a:f1:3f:ea:7a:ad:cd:ed:a5:
                    9b:9d:27:4d:49:97:1c:ed:43:de:b1:6c:6f:af:19:
                    80:13:13:69:34:e4:64:88:d1:e2:da:1a:ae:41:2f:
                    f1:5a:08:69:f7:8f:bd:26:56:1d:45:25:c7:94:ab:
                    75:3b:a1:d2:f8:16:a2:cf:95:2c:5b:df:02:da:ad:
                    d8:c5:5d:b6:aa:b2:a8:c0:ee:fc:3f:c8:2e:67:4e:
                    f5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:63:24:7D:81:36:C6:B4:96:2E:7A:FD:2A:85:10:37:3E:EE:E3:B2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/8663247D8136C6B4962E7AFD2A8510373EEEE3B2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.184.0/22
                IPv6:
                  2804:5258::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268512

    Signature Algorithm: sha256WithRSAEncryption
         74:4a:99:aa:72:d0:58:73:61:90:bc:2b:15:b9:e1:01:5e:03:
         ca:4f:ca:39:6c:2a:1c:23:d3:cd:15:ce:ad:ba:4a:dc:b1:14:
         60:32:c6:ee:32:36:39:7e:12:b3:bd:7a:eb:1f:8d:6c:27:90:
         31:58:99:09:c7:a6:98:28:58:ae:52:34:0e:f0:99:a0:d2:6e:
         43:8f:01:39:ba:c9:94:04:f7:06:b5:a3:fd:a2:0c:40:62:80:
         94:0e:27:55:82:3f:cb:58:19:ed:e8:b8:d8:c7:d6:21:ba:43:
         a2:17:1a:6f:08:59:d3:4f:30:99:85:4a:b6:d3:36:20:bc:a0:
         dc:e7:2d:41:d1:1a:2b:6d:7d:7c:85:8b:b2:bd:fd:82:5c:01:
         7f:d0:da:f9:b6:59:79:c8:fc:c4:8a:92:dd:10:ad:b7:36:6e:
         bb:1d:33:1e:b1:a7:9e:1a:6c:05:93:a7:3e:4b:53:b3:d2:3f:
         b9:75:94:a3:87:4a:b6:5f:c2:1e:30:3f:cc:93:57:ec:b3:be:
         0b:f2:2a:88:57:4f:a3:b4:b5:c4:fa:e1:f8:dd:30:c7:07:2b:
         b8:3f:77:2a:83:ec:95:f3:f6:b1:4c:a9:5d:5b:7a:42:bb:b0:
         d1:f9:2d:d5:86:46:e6:1f:d5:cd:fd:17:ae:bf:d9:32:61:f2:
         ab:17:2f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:16:44 2024 by rpki-client on console-fra.rpki-client.org