Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.cer
File:                     890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.cer (raw, json)
Hash identifier:          S9itWSKQB0x2DrjudFKFMstQKh4hAmV5qFDXVefBaRg=
Subject key identifier:   89:0E:8D:1D:9F:D9:70:E2:E4:A5:FA:8C:40:DB:EB:CE:AA:F5:90:0E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1AF3CA9D128FF577886BF0CB67E998B04819743F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 10:02:52 +0000
Certificate not after:    Thu 03 Apr 2025 10:07:52 +0000
Subordinate resources:    AS: 269342
                          IP: 45.184.196.0/22
                          IP: 2804:6328::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f3:ca:9d:12:8f:f5:77:88:6b:f0:cb:67:e9:98:b0:48:19:74:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 10:02:52 2024 GMT
            Not After : Apr  3 10:07:52 2025 GMT
        Subject: CN=890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4d:f2:c7:46:27:b7:85:f8:ff:5c:7f:88:f6:
                    03:78:ac:f5:26:9d:52:57:39:7f:45:c2:3c:01:e2:
                    ef:21:27:46:de:a0:0e:45:a0:72:90:38:d5:af:8d:
                    4e:77:36:13:ae:70:bd:de:3c:29:32:fc:3d:a5:77:
                    af:81:64:2e:f1:4a:50:ab:d1:f5:9c:48:2d:b6:a2:
                    ba:cc:2c:de:d7:9f:ac:24:df:f7:d9:cb:1e:aa:2a:
                    d6:d2:df:9a:4c:2c:f2:ae:84:b0:55:aa:0b:af:2e:
                    68:f0:24:da:60:f6:38:ee:ec:1d:d9:cf:48:4a:07:
                    cb:c6:e7:17:96:cc:ec:73:80:c4:d6:81:05:cb:3d:
                    15:a7:9e:ec:4e:66:07:99:40:f6:43:24:22:84:0b:
                    8b:41:e2:92:8e:b7:46:a9:3c:4a:cf:37:22:db:70:
                    82:42:83:b5:ef:b0:1b:ca:e5:a6:2e:74:2f:2e:ae:
                    5c:1c:94:1d:87:c0:a3:eb:ec:38:c6:82:f8:32:04:
                    05:94:dd:ff:90:3d:ba:a6:80:2f:bd:e6:7e:76:f6:
                    a1:57:d0:69:af:6d:f8:29:cd:5a:07:ac:82:5b:d4:
                    e1:e2:31:dc:5b:a5:a9:c4:0f:cc:50:d5:b6:b0:b5:
                    a3:a2:3b:2f:c5:fb:5d:82:e9:77:0b:9d:0d:a7:be:
                    e7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:0E:8D:1D:9F:D9:70:E2:E4:A5:FA:8C:40:DB:EB:CE:AA:F5:90:0E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4CNxyGAmp4jRYGAPeVei4NitxkpieS2tg78Xnuy1WfjM/1/890E8D1D9FD970E2E4A5FA8C40DBEBCEAAF5900E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.196.0/22
                IPv6:
                  2804:6328::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269342

    Signature Algorithm: sha256WithRSAEncryption
         56:8e:56:cb:e6:dd:75:d2:26:a4:c4:23:cf:a2:72:cb:94:55:
         a6:45:c8:5c:1d:a7:5a:40:6f:44:2e:a2:b4:12:e0:32:09:ac:
         c7:98:9b:60:2c:c9:89:3e:65:fd:0a:4b:bb:5c:a7:7e:97:13:
         7a:e8:8f:0c:d5:68:43:15:39:f8:df:f7:1a:af:8a:1f:ce:fa:
         70:2b:59:01:96:64:d5:fe:f7:c2:8f:23:a6:26:09:0a:41:98:
         95:99:fb:c7:44:49:ea:55:f7:db:83:09:33:b5:da:7f:70:62:
         08:81:0f:1d:c5:8a:f3:6e:f1:ee:fe:13:a9:fa:db:84:d9:3d:
         5f:93:75:38:ff:59:1b:eb:13:e1:8b:68:42:f6:e2:ec:bb:9e:
         96:6b:b4:97:c8:9f:c0:27:d4:e9:dd:84:19:66:e2:8e:77:c4:
         9e:2c:1b:37:2d:d4:75:e3:cb:d9:1c:25:e1:a2:2b:ee:36:9e:
         97:18:c7:89:5e:c9:6f:08:0c:1d:9a:95:f8:13:1c:f3:db:ce:
         2e:f2:99:8a:f1:4d:9c:19:2d:f0:0c:64:f2:4e:01:58:f2:34:
         63:64:dc:c1:32:03:f6:de:61:49:61:3e:85:ec:42:d5:c8:06:
         62:61:b6:82:05:07:60:f8:f8:ef:ff:ac:95:87:9c:b9:0b:f0:
         1e:e1:2f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:44 2024 by rpki-client on console-fra.rpki-client.org