Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer
File:                     8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer (raw, json)
Hash identifier:          EPujFSJIOH4Q886YIPaL+bxwobU1TaqyAsy0TAFv0GE=
Subject key identifier:   8B:8B:4E:1F:32:9B:88:F7:0D:E3:5D:A3:30:FC:1F:9C:A2:B9:20:84
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2E532731EDD4ECDC296FDF7DFC4FAC7254A3E7DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft
caRepository:             rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 01:33:06 +0000
Certificate not after:    Fri 04 Apr 2025 01:38:06 +0000
Subordinate resources:    AS: 271623
                          IP: 138.121.36.0/22
                          IP: 2804:7e6c::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:53:27:31:ed:d4:ec:dc:29:6f:df:7d:fc:4f:ac:72:54:a3:e7:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 01:33:06 2024 GMT
            Not After : Apr  4 01:38:06 2025 GMT
        Subject: CN=8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c7:4c:54:da:cb:56:20:f8:11:96:c9:5e:53:
                    7e:79:79:68:61:b2:30:14:1e:c4:36:f1:2c:63:dd:
                    ae:2f:4b:4c:78:26:7c:aa:5f:f3:64:87:30:1f:21:
                    3a:9b:af:e0:8e:1f:92:e2:2d:cf:c4:7b:b4:d8:58:
                    52:3c:c5:de:04:54:1b:1f:24:ab:eb:9f:47:80:26:
                    72:1b:85:8e:98:07:26:79:1c:c1:cd:eb:ac:95:13:
                    4b:8b:aa:30:1c:9c:80:ec:29:92:f4:9b:74:af:1a:
                    a1:28:53:dd:2e:26:e1:2c:2d:0f:f6:cb:89:a3:e0:
                    99:41:58:8e:a2:d1:1c:c3:a3:60:53:22:3d:ba:a0:
                    e3:05:53:08:7a:71:b7:bc:07:b7:c6:9b:7e:2f:56:
                    ee:c2:d7:60:c5:47:08:b0:6e:c7:d1:0b:44:98:ef:
                    46:83:a6:b5:71:f4:d4:ac:98:01:6f:c6:56:85:0b:
                    4d:bd:6e:b5:a1:4a:97:47:6f:12:b8:d7:1c:a0:62:
                    99:50:28:38:b8:e4:59:c3:c9:f8:af:36:a4:70:c9:
                    63:77:ea:0c:ef:ff:7b:be:d6:43:fe:3c:b5:09:59:
                    2e:ff:8c:81:52:7c:5a:fd:a0:8a:0f:7f:89:8a:11:
                    c9:02:40:3c:38:c4:42:db:7f:a7:70:1c:dd:bb:36:
                    46:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8B:8B:4E:1F:32:9B:88:F7:0D:E3:5D:A3:30:FC:1F:9C:A2:B9:20:84
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.36.0/22
                IPv6:
                  2804:7e6c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271623

    Signature Algorithm: sha256WithRSAEncryption
         58:08:dc:d1:4e:0d:4a:11:c4:a8:f5:15:16:19:5f:03:f0:3b:
         45:a9:09:89:42:67:4e:f5:44:e0:fa:fa:4f:a2:c9:9d:78:dd:
         e6:c0:c7:80:65:3b:b7:21:48:a2:dc:77:7c:91:aa:b9:e2:03:
         38:71:8d:79:ab:93:d7:86:af:f4:1d:26:43:9b:39:2d:cc:52:
         26:22:dc:b4:bc:4e:34:51:dd:19:ce:77:3f:57:51:02:cc:ad:
         2c:54:8b:32:46:1d:11:b0:96:4a:c2:83:63:60:8d:d6:0b:90:
         d9:35:78:7c:04:bb:5c:0b:ee:a1:77:93:24:fd:f0:36:04:c6:
         fd:c1:ff:fb:62:9e:0a:e1:8b:14:84:58:96:a2:45:d3:39:42:
         a6:43:ff:a4:aa:37:94:4f:4a:b2:2b:15:2c:fe:d9:51:f4:0d:
         ba:1a:8a:7c:ad:1a:9f:f5:ba:2a:ca:bc:23:51:66:d2:4d:48:
         b9:8b:91:57:93:fc:e3:75:31:0b:0d:38:60:eb:30:c7:f1:1d:
         8f:79:8b:9b:f4:ca:ff:c9:1c:76:68:07:eb:4c:c2:b3:42:d0:
         b3:bd:4f:d2:89:90:ed:3d:b0:d6:28:6a:9d:a6:85:67:17:f9:
         c9:34:58:0a:40:77:9e:d8:1d:7b:ad:0f:f1:0c:f3:e6:66:42:
         b4:78:8c:56
-----BEGIN CERTIFICATE-----
MIIGLTCCBRWgAwIBAgIULlMnMe3U7Nwpb999/E+sclSj59wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDUwMTMzMDZaFw0yNTA0MDQwMTM4MDZaMDMxMTAvBgNV
BAMTKDhCOEI0RTFGMzI5Qjg4RjcwREUzNURBMzMwRkMxRjlDQTJCOTIwODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQx0xU2stWIPgRlsleU355eWhh
sjAUHsQ28Sxj3a4vS0x4JnyqX/NkhzAfITqbr+COH5LiLc/Ee7TYWFI8xd4EVBsf
JKvrn0eAJnIbhY6YByZ5HMHN66yVE0uLqjAcnIDsKZL0m3SvGqEoU90uJuEsLQ/2
y4mj4JlBWI6i0RzDo2BTIj26oOMFUwh6cbe8B7fGm34vVu7C12DFRwiwbsfRC0SY
70aDprVx9NSsmAFvxlaFC029brWhSpdHbxK41xygYplQKDi45FnDyfivNqRwyWN3
6gzv/3u+1kP+PLUJWS7/jIFSfFr9oIoPf4mKEckCQDw4xELbf6dwHN27NkbzAgMB
AAGjggM3MIIDMzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSLi04fMpuI9w3j
XaMw/B+corkghDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT0GCCsGAQUFBwELBIIBLzCCASswXAYI
KwYBBQUHMAWGUHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbUFE
WDQ3QUVEeG81U1c1SHlTUTV5dmdta1Y4VDc0anFrejJYdEUxZU1qOC8xMIGJBggr
BgEFBQcwCoZ9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9tQURY
NDdBRUR4bzVTVzVIeVNRNXl2Z21rVjhUNzRqcWt6Mlh0RTFlTWo4LzEvOEI4QjRF
MUYzMjlCODhGNzBERTM1REEzMzBGQzFGOUNBMkI5MjA4NC5tZnQwPwYIKwYBBQUH
MA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZpY2F0
aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/
BB8wHTAMBAIAATAGAwQCinkkMA0EAgACMAcDBQAoBH5sMBoGCCsGAQUFBwEIAQH/
BAswCaAHMAUCAwQlBzANBgkqhkiG9w0BAQsFAAOCAQEAWAjc0U4NShHEqPUVFhlf
A/A7RakJiUJnTvVE4Pr6T6LJnXjd5sDHgGU7tyFIotx3fJGqueIDOHGNeauT14av
9B0mQ5s5LcxSJiLctLxONFHdGc53P1dRAsytLFSLMkYdEbCWSsKDY2CN1guQ2TV4
fAS7XAvuoXeTJP3wNgTG/cH/+2KeCuGLFIRYlqJF0zlCpkP/pKo3lE9KsisVLP7Z
UfQNuhqKfK0an/W6Ksq8I1Fm0k1IuYuRV5P843UxCw04YOswx/Edj3mLm/TK/8kc
dmgH60zCs0LQs71P0omQ7T2w1ihqnaaFZxf5yTRYCkB3ntgde60P8Qzz5mZCtHiM
Vg==
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:53 2024 by rpki-client on console-fra.rpki-client.org