Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer
File:                     8AD497903AB3566443C9C794694A61EFE427FA7A.cer (raw, json)
Hash identifier:          Z/nzEh+Q2yRmNcy6are8/uj89zPwq+d9Y2KFa+JBtkQ=
Subject key identifier:   8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       442CC8586693A22B8B9AC0575F6A02F20C142F8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 05:39:53 +0000
Certificate not after:    Thu 03 Apr 2025 05:44:53 +0000
Subordinate resources:    AS: 272614
                          IP: 2804:8604::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Jul 2024 09:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:2c:c8:58:66:93:a2:2b:8b:9a:c0:57:5f:6a:02:f2:0c:14:2f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 05:39:53 2024 GMT
            Not After : Apr  3 05:44:53 2025 GMT
        Subject: CN=8AD497903AB3566443C9C794694A61EFE427FA7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f5:ff:89:89:5f:d0:af:81:3d:89:56:94:40:
                    a8:1d:d4:eb:84:47:51:59:99:41:45:11:60:fe:73:
                    99:77:c6:99:2c:35:d6:6f:60:02:04:13:1c:16:a7:
                    2a:65:0d:7f:53:b7:dd:32:4c:24:e0:ac:ac:0f:e1:
                    82:ec:51:4c:eb:66:1d:bf:b2:06:88:29:bb:0c:ce:
                    80:16:f2:fa:13:f2:10:3a:4c:2c:7d:4d:d5:92:65:
                    ba:fc:50:14:70:44:69:59:cc:d3:9a:4f:c7:e9:44:
                    b0:cf:e9:63:a3:c5:95:d3:32:b2:e6:93:19:ae:a2:
                    6f:1c:8f:45:67:be:4e:d0:5a:34:0c:b1:b1:80:8e:
                    9e:db:ca:eb:6d:55:bd:06:df:21:e1:f1:8f:b9:d1:
                    6d:00:d8:ed:a8:9f:27:68:f2:12:b7:6f:7c:61:fc:
                    85:8e:9f:d0:ed:54:26:c9:dc:97:3d:4b:5e:c1:7e:
                    14:fd:ea:48:4a:4d:8e:d9:1c:62:86:6b:32:ca:f7:
                    67:be:89:dc:39:ad:1d:cf:65:71:7d:27:6e:d5:a1:
                    1d:53:d9:b9:82:9b:87:2b:63:61:85:6d:dc:83:f9:
                    20:37:f2:41:d1:5d:c1:1e:ef:c8:de:4c:c0:13:b7:
                    fa:a0:ea:1c:6f:b9:aa:3c:a3:a2:94:a1:b0:38:a1:
                    a9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8604::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272614

    Signature Algorithm: sha256WithRSAEncryption
         1f:e0:a5:b7:f9:c4:c4:1e:9f:b8:b5:4a:87:f0:73:5e:12:9f:
         69:5d:62:71:03:46:fd:1d:ef:e9:fa:7d:8d:dc:55:ca:7d:4f:
         b0:90:31:75:b4:60:43:4c:06:55:79:dc:c9:04:d8:4c:d8:d8:
         fc:7e:49:e0:27:4d:b5:49:8b:30:51:21:39:a7:2a:5b:5f:78:
         c3:39:49:22:50:ee:2a:cc:03:c0:64:55:a0:c3:30:a0:3e:70:
         00:14:5b:91:5d:ae:c6:6f:ab:14:6e:40:73:b5:8a:3b:1c:ba:
         6d:39:e7:f6:50:66:4e:ee:f3:0a:40:d1:dc:5c:22:9e:0a:90:
         da:fa:a9:bb:02:97:7d:b0:90:51:01:92:11:b9:b7:6e:a9:43:
         26:b4:ff:9e:f9:80:ea:dd:d1:28:74:1d:ba:ea:0b:ab:d6:e7:
         d1:33:9b:ec:bc:be:d3:a8:e3:d6:ce:ba:f4:85:b7:b0:4b:66:
         18:3a:dc:db:d6:1a:14:dd:30:07:c2:5f:b0:c2:97:af:ac:57:
         08:1a:0d:dc:37:ed:75:3e:55:f4:b0:ca:5e:00:6e:19:24:b4:
         d1:fe:0e:97:e1:53:cd:ac:a3:ee:43:a3:d9:4e:d8:47:c1:8c:
         0f:3a:98:da:91:86:7e:20:d1:dd:b5:fe:36:d1:37:ae:dc:09:
         ca:61:c8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 11:03:54 2024 by rpki-client on console-ams.rpki-client.org