Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8E4B2F03150374B75EF6EA86D73B6950B75B49AC.cer
File:                     8E4B2F03150374B75EF6EA86D73B6950B75B49AC.cer (raw, json)
Hash identifier:          7QPdLRcjsph5BafqjvrTZYmMh/YmwknwmCeHXerXesM=
Subject key identifier:   8E:4B:2F:03:15:03:74:B7:5E:F6:EA:86:D7:3B:69:50:B7:5B:49:AC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2E20D98846C9C644E996E89D603A04C02B7ABB0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/1/8E4B2F03150374B75EF6EA86D73B6950B75B49AC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 20:07:37 +0000
Certificate not after:    Thu 03 Apr 2025 20:12:37 +0000
Subordinate resources:    AS: 262758
                          IP: 186.224.240.0/20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 02 Jul 2024 05:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:20:d9:88:46:c9:c6:44:e9:96:e8:9d:60:3a:04:c0:2b:7a:bb:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 20:07:37 2024 GMT
            Not After : Apr  3 20:12:37 2025 GMT
        Subject: CN=8E4B2F03150374B75EF6EA86D73B6950B75B49AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:94:36:53:e0:62:8f:c8:d0:a1:b9:41:2a:57:
                    43:a7:d6:7c:52:d6:d8:4a:ed:ca:34:14:5a:76:ea:
                    7c:d1:6a:4e:a1:4f:49:75:f1:c6:56:a8:e2:55:1e:
                    23:79:72:37:5e:aa:b7:fc:73:87:a1:d0:55:26:3a:
                    77:c0:60:83:f5:a9:40:92:ea:1a:db:32:ba:f5:7b:
                    24:16:d6:88:2c:09:86:7c:3e:f8:76:c8:ee:27:5a:
                    79:13:72:ec:8f:0a:7f:c0:5a:6c:62:48:96:b5:05:
                    01:f6:c0:70:3e:53:a6:60:6c:53:26:48:6f:cb:2a:
                    28:cf:56:f3:e2:4a:eb:a0:0a:4e:0a:9b:b1:4c:95:
                    d9:cd:de:3e:d6:12:a0:7a:be:6b:07:bf:25:d4:0f:
                    49:37:fa:14:14:26:99:fc:3f:e7:96:49:cc:20:51:
                    dc:b7:56:7d:b8:93:33:dc:ff:dc:0e:87:c9:01:57:
                    57:85:4f:37:a1:e4:ac:98:56:db:2e:d0:5c:49:1d:
                    92:4d:74:e6:42:82:26:56:15:d4:47:ba:fa:50:16:
                    9c:96:c4:8d:f7:36:e8:33:f7:3f:6d:21:90:83:0b:
                    25:b9:53:b8:b1:39:f3:20:63:19:12:a3:1b:60:75:
                    60:67:bb:76:13:14:3e:d4:4f:64:59:8b:e2:27:e3:
                    e3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:4B:2F:03:15:03:74:B7:5E:F6:EA:86:D7:3B:69:50:B7:5B:49:AC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/vLH8KDuaNSxHUvzcskqyjyEpripEDeGuVeRbGPRdGp6/1/8E4B2F03150374B75EF6EA86D73B6950B75B49AC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.240.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262758

    Signature Algorithm: sha256WithRSAEncryption
         56:0c:39:44:bd:68:ae:66:15:7c:e7:eb:60:50:c6:eb:09:c8:
         6d:8d:ac:8a:02:00:7e:0b:2c:c9:a9:d8:b8:a2:b1:e8:c7:de:
         91:b8:f4:fd:e2:6a:39:c4:75:39:5e:60:34:9c:8b:61:aa:21:
         4d:b1:2c:6f:2d:07:b1:f6:51:1e:31:92:9d:c8:2a:38:4a:d7:
         be:54:62:b3:da:ea:c9:39:5a:fe:e2:a8:ab:95:e0:f4:38:3c:
         69:d7:27:5b:ab:d8:b5:14:45:c6:a1:39:b0:a0:63:85:83:47:
         fd:27:78:38:bc:f7:a1:e3:ff:88:75:e9:2a:51:94:7e:93:55:
         7d:bf:55:39:0c:1b:95:4c:6f:cc:fc:e9:38:4c:36:b1:1c:b0:
         30:9b:0c:c5:b9:60:f9:1c:db:ed:a4:4b:68:47:16:bc:b1:0c:
         b0:9b:4b:70:81:69:48:e4:aa:33:ba:f9:be:d9:0e:b6:57:43:
         81:78:f8:e2:8c:a5:9a:b9:8d:ef:d0:74:eb:c1:32:cf:ac:32:
         d1:4b:10:55:0d:3d:25:ce:64:fb:f3:59:9b:8b:b5:b9:24:f4:
         62:85:03:83:05:5a:c1:32:dc:64:33:0e:b5:51:ab:87:b0:b4:
         0b:a2:68:db:d0:57:0e:0e:06:e8:ff:54:b1:1d:91:4d:50:c3:
         4b:bf:e8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 03:56:59 2024 by rpki-client on console-ams.rpki-client.org