Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8E77BC88C5492D8563E5C64470A26FC3D0020706.cer
File:                     8E77BC88C5492D8563E5C64470A26FC3D0020706.cer (raw, json)
Hash identifier:          W9unTw5SIWhFP0Y8aAjv+0jKFIvJ6cn0PS25zi/eZEY=
Subject key identifier:   8E:77:BC:88:C5:49:2D:85:63:E5:C6:44:70:A2:6F:C3:D0:02:07:06
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7CA61949D6E9B7893990C5FBA9CF19D7D4729E96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/1/8E77BC88C5492D8563E5C64470A26FC3D0020706.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:38 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:38 +0000
Subordinate resources:    AS: 271027
                          IP: 168.195.156.0/22
                          IP: 2804:7528::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Apr 2025 20:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a6:19:49:d6:e9:b7:89:39:90:c5:fb:a9:cf:19:d7:d4:72:9e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:38 2025 GMT
            Not After : Mar  4 18:40:38 2026 GMT
        Subject: CN=8E77BC88C5492D8563E5C64470A26FC3D0020706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ad:0b:55:79:7c:c2:7c:9d:1e:48:a9:b0:44:
                    5d:bf:f9:69:cc:f9:90:40:56:3e:a3:f5:ac:e8:d0:
                    89:3f:f3:f3:22:1c:18:62:1a:ae:b7:24:a4:b4:63:
                    b7:5b:5b:1d:52:4c:89:e6:7a:30:4f:90:c6:e7:1f:
                    84:3a:aa:ba:df:d7:8a:03:18:bc:e6:ee:6e:5f:a4:
                    29:d2:d5:5e:67:75:6c:16:e7:97:a8:89:1d:5b:89:
                    67:57:5d:47:55:5e:38:64:d2:99:73:b0:c2:c3:f6:
                    8e:b2:43:bb:8a:bc:b0:70:12:4c:1e:69:aa:6a:3a:
                    95:d3:a8:5a:93:0d:47:13:c1:31:7f:26:5d:c2:61:
                    52:e1:79:52:f1:12:c8:45:14:77:57:d9:33:23:cb:
                    3f:8e:69:02:fd:32:ff:54:44:37:35:cb:7e:13:5f:
                    69:2b:63:33:88:98:67:10:e5:31:f3:bb:47:79:ef:
                    68:24:f2:cb:4c:75:67:d2:f7:63:8b:73:80:99:47:
                    5d:49:b5:8d:7d:36:e5:92:66:0c:61:d8:77:8a:3f:
                    48:ac:6f:2c:3b:db:a4:15:6d:17:6e:15:1f:1e:1e:
                    b2:b1:f3:63:d5:c5:20:2f:0f:6b:13:46:3b:4c:97:
                    d9:9e:a9:7a:71:e5:c3:bb:42:6e:f8:6e:62:50:80:
                    42:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:77:BC:88:C5:49:2D:85:63:E5:C6:44:70:A2:6F:C3:D0:02:07:06
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6zXwMvombKfH19pyvhQC24buLCwCUDP87kV5tS3PbyFc/1/8E77BC88C5492D8563E5C64470A26FC3D0020706.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.156.0/22
                IPv6:
                  2804:7528::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271027

    Signature Algorithm: sha256WithRSAEncryption
         82:5f:51:6e:87:34:1b:72:24:8a:61:ba:53:a0:f4:9f:0e:f2:
         cb:45:77:4f:9f:5e:38:3e:b2:96:40:2d:ff:3e:b9:a3:18:ba:
         f9:f5:a9:28:de:62:f3:66:0d:80:b0:48:a7:38:84:25:e6:a4:
         9f:2d:2d:13:9e:04:54:0c:cc:f1:de:41:d4:c7:88:cf:89:08:
         87:20:e3:fd:9f:74:6b:1f:e5:94:7f:b4:bf:a2:74:6c:54:6d:
         20:24:58:b6:db:a9:75:dd:42:5d:15:2c:ff:f3:78:9a:c2:50:
         40:d7:63:42:fb:19:20:e6:df:9d:b0:26:b4:38:c4:d6:b3:cb:
         16:36:7f:c0:e9:ff:5a:d8:bf:4f:5e:1d:90:7b:65:f8:de:a2:
         9e:94:a2:71:a3:5d:96:b4:23:4a:2e:e3:b3:03:26:06:c8:de:
         01:89:a6:54:25:0a:7f:e8:92:65:27:e7:da:51:7d:da:e2:c6:
         e2:2d:03:55:60:5c:5b:38:cc:db:ec:8d:7e:e6:d6:79:94:81:
         86:39:ed:ae:4d:85:dd:4b:21:25:a0:29:97:c7:93:b7:36:f1:
         68:41:20:a9:37:5d:04:8e:e9:ec:2c:c7:e0:c8:ac:36:3e:54:
         e9:0e:f9:09:49:4b:6a:f3:34:c6:3f:8e:67:e0:31:64:84:c8:
         0c:57:6f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:28:55 2025 by rpki-client