Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8DEACA987A0D22568015F0352EA866AA5BEF9DBD.cer
File:                     8DEACA987A0D22568015F0352EA866AA5BEF9DBD.cer (raw, json)
Hash identifier:          QpGkGBVSLBGf5iqWJSKWY9fXuYkjtbgFA9VcAAvNy28=
Subject key identifier:   8D:EA:CA:98:7A:0D:22:56:80:15:F0:35:2E:A8:66:AA:5B:EF:9D:BD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       32BB1C8096CB6E1B47DC1A77826EB433C79D9199
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/1/8DEACA987A0D22568015F0352EA866AA5BEF9DBD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 15:56:52 +0000
Certificate not after:    Thu 03 Apr 2025 16:01:52 +0000
Subordinate resources:    AS: 263601
                          IP: 177.10.172.0/22
                          IP: 2804:fc0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:bb:1c:80:96:cb:6e:1b:47:dc:1a:77:82:6e:b4:33:c7:9d:91:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 15:56:52 2024 GMT
            Not After : Apr  3 16:01:52 2025 GMT
        Subject: CN=8DEACA987A0D22568015F0352EA866AA5BEF9DBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:08:e8:01:7f:16:ca:25:c0:50:b8:3d:ce:09:
                    2b:4e:40:ae:af:25:48:d7:1a:05:de:3d:fd:a1:96:
                    ba:9f:4f:d2:ec:72:8d:76:30:a1:8f:3d:2c:04:b3:
                    ab:d8:99:43:60:78:75:e1:a9:b7:77:eb:eb:2b:41:
                    93:db:93:fb:84:8d:53:89:62:70:34:21:83:d2:03:
                    d5:56:98:cd:b9:dd:f8:d7:5f:16:78:96:eb:bf:0b:
                    53:1f:45:e4:9a:de:ab:a3:a5:87:3b:55:dd:d8:51:
                    b7:03:65:da:4c:10:b2:7c:c9:37:d4:f7:d2:d4:a7:
                    46:63:f4:27:11:21:e4:fc:64:b9:68:ab:62:1b:ca:
                    84:cb:82:ca:40:3a:a0:89:ec:70:25:70:0f:c9:3e:
                    7b:69:6f:8c:4a:57:1e:96:7b:d1:f1:24:92:c0:71:
                    4c:51:be:f1:13:37:6e:a6:86:37:e8:31:c7:44:f4:
                    65:73:5c:00:ed:cc:1a:91:04:e6:a0:c6:8c:2b:f3:
                    59:7b:4b:ae:e8:07:99:71:8f:0e:95:70:5c:06:fa:
                    07:9f:4e:1f:4b:bf:aa:08:9c:b8:a8:c5:a7:8e:76:
                    d8:81:31:3c:10:07:08:6c:a2:c0:1d:a3:70:75:cc:
                    58:86:8d:4a:e5:b0:34:f1:d1:54:f6:7c:86:3a:ac:
                    07:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:EA:CA:98:7A:0D:22:56:80:15:F0:35:2E:A8:66:AA:5B:EF:9D:BD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ho9itMmbVRkdfabDh6QZCH4bemFEXp7EGBQ68Wyunbyc/1/8DEACA987A0D22568015F0352EA866AA5BEF9DBD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.172.0/22
                IPv6:
                  2804:fc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263601

    Signature Algorithm: sha256WithRSAEncryption
         0a:7d:a1:c2:cf:f1:90:75:3c:f7:3d:f0:ff:37:2d:32:5f:9d:
         a3:e7:b0:07:20:d3:3c:e9:4d:e8:dd:8e:30:76:bf:b4:6f:14:
         90:de:24:bd:26:ef:1e:f2:3d:94:01:7e:9a:e1:68:7f:f4:5b:
         b3:47:ba:df:22:6b:9b:01:5b:16:a5:da:f0:70:64:94:87:72:
         97:41:99:68:2e:bc:7e:3b:cf:53:bb:84:61:80:90:6c:80:0b:
         0d:76:42:3f:d2:07:25:81:ad:b9:a3:db:a4:c8:fb:98:b4:f4:
         7d:66:90:70:c6:20:ac:fa:c5:3f:0d:3f:33:4b:1f:bf:0f:14:
         04:62:7b:cc:97:b9:63:53:00:a2:19:08:2f:60:18:89:00:c4:
         df:af:a8:94:d8:93:b2:f8:33:89:12:78:66:82:61:d7:f5:65:
         af:ec:d4:fe:07:d3:c0:31:1c:55:3b:d3:00:1c:64:39:35:6d:
         45:c3:fb:ce:17:8e:02:9c:83:0e:5b:60:b3:15:e0:4d:40:88:
         2b:0b:4b:e0:60:a2:16:cd:e3:87:72:c4:9d:a4:44:25:2a:6f:
         18:2e:9f:20:be:e4:31:9c:00:ff:a9:47:3d:05:9e:2b:42:52:
         93:82:dd:7e:df:33:72:d9:89:39:db:b8:0d:f4:32:93:2e:1a:
         2d:08:81:43
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUMrscgJbLbhtH3Bp3gm60M8edkZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDQxNTU2NTJaFw0yNTA0MDMxNjAxNTJaMDMxMTAvBgNV
BAMTKDhERUFDQTk4N0EwRDIyNTY4MDE1RjAzNTJFQTg2NkFBNUJFRjlEQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLCOgBfxbKJcBQuD3OCStOQK6v
JUjXGgXePf2hlrqfT9Lsco12MKGPPSwEs6vYmUNgeHXhqbd36+srQZPbk/uEjVOJ
YnA0IYPSA9VWmM253fjXXxZ4luu/C1MfReSa3qujpYc7Vd3YUbcDZdpMELJ8yTfU
99LUp0Zj9CcRIeT8ZLloq2IbyoTLgspAOqCJ7HAlcA/JPntpb4xKVx6We9HxJJLA
cUxRvvETN26mhjfoMcdE9GVzXADtzBqRBOagxowr81l7S67oB5lxjw6VcFwG+gef
Th9Lv6oInLioxaeOdtiBMTwQBwhsosAdo3B1zFiGjUrlsDTx0VT2fIY6rAd/AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSN6sqYeg0iVoAV
8DUuqGaqW++dvTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSG85
aXRNbWJWUmtkZmFiRGg2UVpDSDRiZW1GRVhwN0VHQlE2OFd5dW5ieWMvMS8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hv
OWl0TW1iVlJrZGZhYkRoNlFaQ0g0YmVtRkVYcDdFR0JRNjhXeXVuYnljLzEvOERF
QUNBOTg3QTBEMjI1NjgwMTVGMDM1MkVBODY2QUE1QkVGOURCRC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCsQqsMA0EAgACMAcDBQAoBA/AMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQFsTANBgkqhkiG9w0BAQsFAAOCAQEACn2hws/xkHU89z3w
/zctMl+do+ewByDTPOlN6N2OMHa/tG8UkN4kvSbvHvI9lAF+muFof/Rbs0e63yJr
mwFbFqXa8HBklIdyl0GZaC68fjvPU7uEYYCQbIALDXZCP9IHJYGtuaPbpMj7mLT0
fWaQcMYgrPrFPw0/M0sfvw8UBGJ7zJe5Y1MAohkIL2AYiQDE36+olNiTsvgziRJ4
ZoJh1/Vlr+zU/gfTwDEcVTvTABxkOTVtRcP7zheOApyDDltgsxXgTUCIKwtL4GCi
Fs3jh3LEnaREJSpvGC6fIL7kMZwA/6lHPQWeK0JSk4Ldft8zctmJOdu4DfQyky4a
LQiBQw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:45 2024 by rpki-client on console-fra.rpki-client.org