Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer
File:                     8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.cer (raw, json)
Hash identifier:          r9GbelagVH9Ql+QZO0kKMXldyKFjX1Fr74sN3DgYmng=
Subject key identifier:   8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2A83CA8742E4FF23FEAAE028E0FAC58764A8A66D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 22:44:23 +0000
Certificate not after:    Wed 02 Apr 2025 22:49:23 +0000
Subordinate resources:    AS: 28639
                          IP: 177.129.68.0/22
                          IP: 191.6.232.0/21
                          IP: 2804:dd0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Jun 2024 05:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:83:ca:87:42:e4:ff:23:fe:aa:e0:28:e0:fa:c5:87:64:a8:a6:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 22:44:23 2024 GMT
            Not After : Apr  2 22:49:23 2025 GMT
        Subject: CN=8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4b:fd:24:e4:ff:84:4d:53:86:8a:ac:3f:2c:
                    57:67:45:3e:01:de:ab:5a:6e:63:b6:2f:e2:16:66:
                    cd:bb:ef:36:fa:76:f5:eb:9b:90:49:cd:bd:4b:e5:
                    7d:a6:fe:56:f3:87:c2:04:b8:c1:12:a5:5c:a4:29:
                    f7:6c:8f:43:5b:a7:d7:d8:24:04:c0:53:4d:7c:b1:
                    82:41:c9:cf:bc:70:6d:d1:54:30:ae:c7:b4:16:22:
                    de:65:94:3c:72:95:b5:47:98:c3:3c:c7:e4:53:81:
                    f6:56:6f:43:09:74:fe:19:f6:3b:d1:a5:32:36:e9:
                    72:32:48:3d:90:e5:f2:a3:4a:2f:f3:af:7c:17:f6:
                    4d:ff:48:13:45:28:1a:63:75:77:d1:d4:82:df:22:
                    dd:33:9b:08:40:0a:02:9c:56:18:f5:c9:6d:2f:54:
                    f2:20:b7:1e:e0:34:3c:87:e8:cd:3c:ae:24:fb:b8:
                    8e:e5:f2:da:eb:48:3d:a1:04:8c:e0:0f:61:38:58:
                    20:b1:c3:90:ea:f7:0a:e4:b1:95:cb:c6:eb:82:27:
                    d3:02:ee:57:56:3a:aa:e8:00:9b:f8:3b:c0:cc:44:
                    66:b1:b0:fb:bf:8c:21:3f:23:ba:d2:9c:ff:ae:91:
                    3c:09:6c:3f:f3:8f:8a:68:b4:79:19:1c:f3:95:ec:
                    61:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:73:16:CA:90:7F:3D:46:92:9A:FF:6D:DF:56:55:DB:B5:3A:BD:C4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/1/8E7316CA907F3D46929AFF6DDF5655DBB53ABDC4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.68.0/22
                  191.6.232.0/21
                IPv6:
                  2804:dd0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28639

    Signature Algorithm: sha256WithRSAEncryption
         8a:42:b7:bc:29:a7:bc:9d:83:5f:38:17:88:0b:96:75:25:70:
         ac:4d:5c:75:4a:56:98:2e:31:cc:cd:14:e5:39:79:ac:8a:b3:
         7f:d6:97:18:28:4f:f5:a4:ca:07:a7:92:6c:d7:b0:b5:43:1e:
         af:45:66:cf:1a:04:6f:59:6d:a7:66:fb:43:25:b0:74:5b:d7:
         51:20:04:41:4b:af:f1:ae:60:07:5f:7d:9a:ac:45:e0:70:99:
         ae:47:ae:17:64:63:4c:8b:98:9c:ad:89:09:45:ee:d0:f4:b0:
         0c:a7:c0:b5:e0:ef:b8:08:46:ee:90:ba:3a:24:8e:b4:6c:d1:
         31:b8:5a:06:58:44:8b:4f:0f:2b:87:37:ee:ef:0b:48:12:f2:
         43:04:bc:88:46:da:45:4b:50:c4:6d:80:16:97:ba:12:cd:53:
         05:a9:33:bb:15:b5:f8:1a:e7:79:1d:3c:d0:22:a1:c7:3b:aa:
         bb:6a:61:ae:9b:fd:c3:ee:ce:d4:a1:b8:8c:6f:2a:14:19:ed:
         6c:1c:e7:11:f8:ff:8c:a4:6c:9b:f4:fd:af:93:04:cc:32:2e:
         c2:78:8e:46:c1:61:11:ff:2f:c9:6e:3a:49:fe:65:ab:b4:09:
         5a:eb:fc:e1:12:35:93:4a:ec:6c:b0:ea:7a:dc:d1:8c:f7:98:
         27:ca:cc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 07:41:04 2024 by rpki-client on console-ams.rpki-client.org