Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8B4136D64CC0039806002C711E0AD6370739900D.cer
File:                     8B4136D64CC0039806002C711E0AD6370739900D.cer (raw, json)
Hash identifier:          Tf7vO5cAVxKoWnxexwZzJu3VdT+RdzP5GipN2JsoRGQ=
Subject key identifier:   8B:41:36:D6:4C:C0:03:98:06:00:2C:71:1E:0A:D6:37:07:39:90:0D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5865272CA32FA7304852E4138D8D377C29CABDE9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/8B4136D64CC0039806002C711E0AD6370739900D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 02 Oct 2024 19:16:43 +0000
Certificate not after:    Wed 01 Oct 2025 19:21:43 +0000
Subordinate resources:    AS: 266470
                          IP: 170.83.152.0/22
                          IP: 2804:3854::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:65:27:2c:a3:2f:a7:30:48:52:e4:13:8d:8d:37:7c:29:ca:bd:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  2 19:16:43 2024 GMT
            Not After : Oct  1 19:21:43 2025 GMT
        Subject: CN=8B4136D64CC0039806002C711E0AD6370739900D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5d:17:0c:e5:3f:78:4f:ec:23:a7:0a:b3:11:
                    f4:cb:64:75:e0:5a:e6:28:92:42:98:29:46:e5:cb:
                    ab:80:90:26:42:c0:fd:3e:b3:77:f2:e7:98:f6:5b:
                    38:24:42:ef:fc:ee:ef:1c:e9:f7:55:77:f8:f8:1e:
                    43:74:66:a1:35:68:59:1c:68:d3:a7:a4:ba:0e:c2:
                    87:e9:fe:15:44:b2:85:b3:5c:26:c3:d7:39:1e:ee:
                    42:1d:9e:00:ce:a1:5b:92:75:31:77:d3:5a:e0:80:
                    8e:52:9d:1a:80:d9:61:2c:68:47:6e:a9:33:38:e0:
                    f4:f1:67:71:4a:be:6e:95:65:b6:3a:fa:99:62:58:
                    3c:db:1e:e2:21:18:54:49:2f:20:64:70:3a:97:5f:
                    1f:f3:2c:a2:9d:d3:43:ea:85:13:d4:ca:9a:60:c6:
                    55:d7:12:88:49:4b:b2:32:ed:c0:77:08:00:80:f6:
                    ea:d7:42:26:51:07:5a:9b:d2:00:6b:03:8a:80:2a:
                    bb:3f:4a:71:21:61:94:ae:9f:59:0f:15:c5:86:e6:
                    0b:a5:98:73:e8:7c:38:d9:c9:2b:fb:fd:4b:a7:b8:
                    55:fc:00:60:f3:ec:fa:fe:48:95:22:5c:f3:c9:19:
                    ac:9d:33:0b:24:62:a7:f9:f9:91:e6:e8:61:b7:17:
                    08:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8B:41:36:D6:4C:C0:03:98:06:00:2C:71:1E:0A:D6:37:07:39:90:0D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J1DgAoYvM3DGrA4xn1wpjXgA2Ln3bUqKsHsoRhiFPx3c/0/8B4136D64CC0039806002C711E0AD6370739900D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.152.0/22
                IPv6:
                  2804:3854::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266470

    Signature Algorithm: sha256WithRSAEncryption
         af:7a:b3:e5:e1:74:3c:66:7a:ee:4c:f7:80:98:d2:f0:30:7f:
         58:d8:92:83:a9:17:2d:83:28:2e:71:b7:4f:a8:13:2c:d2:2e:
         fd:db:5a:6e:4d:3b:45:17:3b:d0:46:1a:ae:52:ca:1b:43:78:
         6b:0f:fe:e2:6b:b7:fa:63:6e:f6:84:59:1f:f0:fb:e4:c6:75:
         a2:b5:07:d4:10:4d:28:c2:2b:bb:84:af:d6:6e:06:83:99:4f:
         93:2c:a8:d9:56:97:42:86:75:bf:ff:93:13:20:37:8b:1b:af:
         7d:63:68:5d:a6:81:9a:e1:9b:77:70:67:c2:2f:7d:4d:34:3e:
         2e:23:97:1a:05:45:e9:1f:8f:4a:f6:36:39:8b:e0:f5:96:73:
         93:b8:06:ee:7a:85:22:5d:f0:d5:4c:29:9b:1a:a0:2a:41:4d:
         73:57:de:ac:43:b3:c8:30:3b:b9:ad:6e:e0:64:6a:01:7a:c4:
         97:a8:38:39:19:9a:1c:26:23:f8:86:e6:31:53:d5:f0:05:21:
         99:79:01:31:89:d2:da:4c:38:7a:09:71:c8:fc:5c:6a:17:70:
         39:7a:e8:64:e0:19:db:35:ce:9d:5d:27:1f:7a:27:8b:f2:36:
         b7:18:af:90:84:ce:de:74:4e:e2:be:9e:0e:d8:e8:c7:16:68:
         b0:5e:04:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:44:11 2024 by rpki-client on console-ams.rpki-client.org