Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8AE4EB207A648990E78CA113D88B9704FE8BCC31.cer
File:                     8AE4EB207A648990E78CA113D88B9704FE8BCC31.cer (raw, json)
Hash identifier:          +om9Rca/bzaIt7GYr945s1ZPXkHnxFf1krqd4RAzuok=
Subject key identifier:   8A:E4:EB:20:7A:64:89:90:E7:8C:A1:13:D8:8B:97:04:FE:8B:CC:31
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0A4F81B525B295E7368B6DAAC62D8575C1429C32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/1/8AE4EB207A648990E78CA113D88B9704FE8BCC31.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 09:32:31 +0000
Certificate not after:    Thu 03 Apr 2025 09:37:31 +0000
Subordinate resources:    AS: 270600
                          IP: 189.36.128.0/22
                          IP: 2804:6e7c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 12:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4f:81:b5:25:b2:95:e7:36:8b:6d:aa:c6:2d:85:75:c1:42:9c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 09:32:31 2024 GMT
            Not After : Apr  3 09:37:31 2025 GMT
        Subject: CN=8AE4EB207A648990E78CA113D88B9704FE8BCC31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:df:08:f1:25:bd:f9:67:1e:f0:07:56:81:69:
                    15:97:97:fd:8f:a5:da:b8:dc:81:86:76:74:cc:e0:
                    8b:2d:e0:0b:d1:03:61:72:a0:60:39:f2:76:3b:92:
                    ad:55:a9:df:6c:d9:1b:01:84:87:1f:f4:c6:14:06:
                    4d:e2:4b:d8:f1:29:3c:01:46:68:e0:64:0b:63:94:
                    db:ab:04:2b:5a:47:a9:51:91:1f:77:d8:6f:38:cb:
                    7b:73:5a:5a:55:7d:83:3e:00:fb:aa:af:5b:54:58:
                    7e:83:08:e4:ef:38:69:92:d1:72:45:d3:13:64:37:
                    25:2f:47:5a:aa:8b:c5:47:42:78:ca:a1:b0:b3:d7:
                    2c:aa:93:3c:22:ee:c6:9c:ca:45:99:f9:7e:4b:b2:
                    16:2f:ac:c7:45:da:1f:96:2a:d5:46:81:0d:c6:f9:
                    44:28:72:25:b4:f4:33:06:62:63:f5:10:9e:62:33:
                    bb:47:de:57:d7:0e:9f:b5:03:13:45:8d:93:7f:a3:
                    29:68:3b:4b:db:ab:87:c9:85:77:2c:52:8a:75:0a:
                    df:f2:a9:f3:3b:4e:17:ec:09:91:7e:a2:c7:7b:db:
                    ef:d3:71:97:4d:3e:37:f3:af:2d:34:7f:fb:06:79:
                    d3:75:a2:18:c9:4e:75:54:e0:5d:e6:12:e1:4e:98:
                    d5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:E4:EB:20:7A:64:89:90:E7:8C:A1:13:D8:8B:97:04:FE:8B:CC:31
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CV4pEouD8qTHDFpAodHM8AVEn54Q1nYABXfrk3sUGEs8/1/8AE4EB207A648990E78CA113D88B9704FE8BCC31.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.128.0/22
                IPv6:
                  2804:6e7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270600

    Signature Algorithm: sha256WithRSAEncryption
         b9:a0:5a:f9:50:69:9e:2f:c8:f3:b8:de:ed:94:5f:5d:93:0f:
         41:ce:38:83:e4:5b:b2:a7:5e:6a:63:2c:8d:83:14:7c:50:57:
         47:e4:0e:eb:52:bb:30:a2:8e:9e:fc:c6:17:67:b8:17:e5:dc:
         53:0f:50:a7:10:f6:74:86:ce:56:8d:28:bb:6d:35:e9:7a:7c:
         9d:c6:37:b9:22:5a:b0:88:c4:df:50:cb:90:b0:7d:de:2b:54:
         24:95:c0:2d:8e:97:9c:91:75:44:7d:ab:64:2a:0c:ee:b1:99:
         47:ee:33:4e:a8:ad:be:ce:63:cf:3d:5b:8d:9e:60:1d:fc:3e:
         33:96:93:30:7c:1b:68:6c:45:1e:1f:bd:37:40:1f:0e:fb:2e:
         2d:68:76:eb:c8:00:8d:ed:78:bb:3f:b4:06:78:f5:7d:f2:b0:
         57:8f:1d:b2:74:75:bc:6b:63:9c:51:44:23:15:c5:fa:b5:6d:
         f1:81:bf:bb:7a:60:75:1b:7e:ea:19:80:de:f4:1f:29:9b:77:
         45:9b:ac:c7:7d:4b:f7:9e:b2:79:44:d1:2e:3f:09:fd:b3:19:
         c5:c3:d1:f1:f4:7f:7e:ec:4d:fe:e4:23:cf:94:a2:b3:0d:a6:
         cd:03:ef:1e:2f:c0:ef:d7:87:7f:92:48:20:a9:06:d4:53:6c:
         97:d6:3f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 10:26:56 2024 by rpki-client on console-ams.rpki-client.org