Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8E77BC88C5492D8563E5C64470A26FC3D0020706.cer
File:                     8E77BC88C5492D8563E5C64470A26FC3D0020706.cer (raw, json)
Hash identifier:          r7FqoNGCMDmPczYOnWANNgtjKDCTQqbSs00KCPUUj3Q=
Subject key identifier:   8E:77:BC:88:C5:49:2D:85:63:E5:C6:44:70:A2:6F:C3:D0:02:07:06
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1209DA87BC365207161213BEA793BF938FA82044
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/1/8E77BC88C5492D8563E5C64470A26FC3D0020706.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:31 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:31 +0000
Subordinate resources:    AS: 271027
                          IP: 168.195.156.0/22
                          IP: 2804:7528::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:09:da:87:bc:36:52:07:16:12:13:be:a7:93:bf:93:8f:a8:20:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:31 2024 GMT
            Not After : Apr  2 18:31:31 2025 GMT
        Subject: CN=8E77BC88C5492D8563E5C64470A26FC3D0020706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ad:0b:55:79:7c:c2:7c:9d:1e:48:a9:b0:44:
                    5d:bf:f9:69:cc:f9:90:40:56:3e:a3:f5:ac:e8:d0:
                    89:3f:f3:f3:22:1c:18:62:1a:ae:b7:24:a4:b4:63:
                    b7:5b:5b:1d:52:4c:89:e6:7a:30:4f:90:c6:e7:1f:
                    84:3a:aa:ba:df:d7:8a:03:18:bc:e6:ee:6e:5f:a4:
                    29:d2:d5:5e:67:75:6c:16:e7:97:a8:89:1d:5b:89:
                    67:57:5d:47:55:5e:38:64:d2:99:73:b0:c2:c3:f6:
                    8e:b2:43:bb:8a:bc:b0:70:12:4c:1e:69:aa:6a:3a:
                    95:d3:a8:5a:93:0d:47:13:c1:31:7f:26:5d:c2:61:
                    52:e1:79:52:f1:12:c8:45:14:77:57:d9:33:23:cb:
                    3f:8e:69:02:fd:32:ff:54:44:37:35:cb:7e:13:5f:
                    69:2b:63:33:88:98:67:10:e5:31:f3:bb:47:79:ef:
                    68:24:f2:cb:4c:75:67:d2:f7:63:8b:73:80:99:47:
                    5d:49:b5:8d:7d:36:e5:92:66:0c:61:d8:77:8a:3f:
                    48:ac:6f:2c:3b:db:a4:15:6d:17:6e:15:1f:1e:1e:
                    b2:b1:f3:63:d5:c5:20:2f:0f:6b:13:46:3b:4c:97:
                    d9:9e:a9:7a:71:e5:c3:bb:42:6e:f8:6e:62:50:80:
                    42:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:77:BC:88:C5:49:2D:85:63:E5:C6:44:70:A2:6F:C3:D0:02:07:06
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/1/8E77BC88C5492D8563E5C64470A26FC3D0020706.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.156.0/22
                IPv6:
                  2804:7528::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271027

    Signature Algorithm: sha256WithRSAEncryption
         44:db:c5:24:32:e5:7a:3d:af:a1:42:60:b8:96:4d:7d:49:7a:
         a8:5f:b3:9a:3a:fb:d0:1c:b4:41:ca:b6:fc:05:9d:54:58:f7:
         d5:f2:23:46:6a:b8:33:5e:e5:f6:74:83:48:20:e3:4d:f1:aa:
         ee:66:25:ac:e3:4b:7b:4c:e2:70:e4:5f:ac:24:6c:85:16:7a:
         8f:1c:82:a3:45:52:2d:4d:df:db:2b:5f:1a:e3:0d:97:68:4b:
         f8:e3:fa:62:e2:73:aa:8a:8e:a6:93:93:10:fb:36:18:fb:46:
         e3:c6:2c:00:79:83:8b:ee:39:af:8e:14:7e:04:ea:92:72:e0:
         ad:12:c5:c5:c4:eb:6d:d4:fb:d8:2f:70:83:77:cc:25:b3:5b:
         c9:70:15:d5:d1:37:63:60:73:63:fa:ae:99:3b:49:b9:11:1f:
         b7:c6:ef:f7:22:c3:25:35:31:52:bf:8e:1f:48:d1:03:5a:a8:
         11:53:38:c5:4e:ad:f7:7b:fa:ca:27:d1:10:cd:75:85:d9:b0:
         00:43:43:ed:0f:cb:1c:a6:97:5b:57:a7:18:dd:05:db:8b:f5:
         bf:94:8e:12:71:32:52:49:40:5a:57:7d:d4:f4:09:7c:76:4d:
         97:81:03:35:3e:41:a5:3d:b2:5d:19:44:b4:bd:94:57:ac:ef:
         11:79:ef:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:41 2024 by rpki-client on console-fra.rpki-client.org