Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
File:                     8ABC084B53F9798714C06A642B698DD90EC2F25E.cer (raw, json)
Hash identifier:          60Y3xb0iYsmHZNA/SYxova67khRau8JZs+hc3bEhfOA=
Subject key identifier:   8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       020DAD19A7A1ADE872A733FD3E7490D075D29AC0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Apr 2024 18:58:19 +0000
Certificate not after:    Tue 22 Apr 2025 19:03:19 +0000
Subordinate resources:    AS: 28276
                          IP: 186.249.96.0/19
                          IP: 187.102.96.0 -- 187.102.110.255
                          IP: 189.14.64.0/20
                          IP: 2804:56a4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:0d:ad:19:a7:a1:ad:e8:72:a7:33:fd:3e:74:90:d0:75:d2:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 23 18:58:19 2024 GMT
            Not After : Apr 22 19:03:19 2025 GMT
        Subject: CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:56:6b:05:79:73:2e:bb:8a:f1:c4:2c:35:79:
                    b6:1e:45:8e:f6:98:18:9c:d3:87:0b:e6:10:16:d0:
                    99:83:8f:f8:8f:5b:4d:35:5a:9f:61:7e:25:8f:73:
                    24:fd:70:8d:c9:eb:58:6f:96:2e:85:02:bd:34:56:
                    9b:75:0f:a2:fe:b5:ab:c8:99:32:b2:fe:74:80:1a:
                    45:bf:8f:76:e6:76:68:87:ee:23:1a:81:47:0c:25:
                    fb:43:e7:54:a7:42:d7:ea:80:24:42:b0:b2:c0:4d:
                    4e:61:bf:2f:ed:c2:73:d5:99:6c:81:51:e0:0c:0e:
                    3e:47:b7:06:31:35:0e:3a:89:d4:85:71:1a:76:4f:
                    f5:29:4a:69:99:62:20:34:e3:25:91:64:3e:ca:2d:
                    53:88:82:b1:66:b0:83:ff:bc:86:69:97:bf:6c:ba:
                    e8:47:3b:5b:24:4b:0e:dd:9e:ab:21:53:40:0c:5c:
                    ca:86:2c:de:e4:b1:25:72:72:83:7b:72:12:b3:34:
                    3c:31:94:f9:ac:ad:ff:20:4b:a8:2f:62:e0:42:06:
                    86:b2:c1:89:0e:34:b5:fc:7b:a3:5a:6c:85:fc:dc:
                    7d:38:9f:67:23:17:f8:bf:e9:ee:5f:a1:ec:cc:37:
                    49:b9:1c:bd:ec:6b:ae:d8:db:40:e0:99:aa:cf:99:
                    2a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.96.0/19
                  187.102.96.0-187.102.110.255
                  189.14.64.0/20
                IPv6:
                  2804:56a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28276

    Signature Algorithm: sha256WithRSAEncryption
         05:22:97:67:f3:45:91:07:34:0e:46:12:83:1c:96:fc:b7:0b:
         74:45:9c:12:a1:8c:51:c2:c2:98:9e:0e:ee:c3:b2:96:4c:34:
         47:79:d9:02:3f:5f:31:ec:0b:29:cf:64:cf:ca:f6:a3:34:f1:
         5d:c9:21:11:69:49:36:73:b8:c9:cc:5e:26:18:a0:ec:02:9f:
         80:6a:d5:6b:eb:65:78:14:97:f1:1c:3c:c8:0a:a5:11:1c:1a:
         bb:df:0a:73:a8:43:c7:ca:ee:56:c1:4c:e4:7a:aa:be:3e:64:
         db:8b:79:64:42:d2:03:37:04:a1:71:2b:a8:23:1f:f2:9c:1f:
         de:64:1f:cc:59:1d:9d:09:5d:59:e6:d5:1d:07:f3:44:7a:70:
         e2:91:66:eb:53:b3:74:2e:18:d7:9e:ca:5a:79:5b:41:3c:0c:
         a9:bc:a1:33:a6:2a:3d:72:86:9d:d8:df:6f:da:12:40:43:cd:
         ac:7b:a1:8d:39:e8:f3:22:a9:f3:af:eb:1d:41:32:f6:d6:b1:
         32:5e:ba:d1:5d:6d:5a:e4:40:2a:be:ac:4f:50:d0:7c:bb:52:
         47:54:d7:ae:c3:63:5f:09:11:2e:4d:95:47:f7:6b:50:50:ed:
         fd:ce:b1:87:41:22:0f:6e:43:8a:b5:7f:a1:0c:81:5f:a9:be:
         6f:94:d1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:45:11 2024 by rpki-client on console-ams.rpki-client.org