Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8E78E6F7BEE3C25AC94360A02ECD6545F59D6575.cer
File:                     8E78E6F7BEE3C25AC94360A02ECD6545F59D6575.cer (raw, json)
Hash identifier:          emdztUeBmOD48K3gzAmbg5szC5ad1wWWq54pfH4lvPg=
Subject key identifier:   8E:78:E6:F7:BE:E3:C2:5A:C9:43:60:A0:2E:CD:65:45:F5:9D:65:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5D077F14B259A66F9580036D4476D7D28EBFD7D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AxbvZHtnSg9S89B2aV5RdzTc6LERpZxGd6xA7bBDajjG/0/8E78E6F7BEE3C25AC94360A02ECD6545F59D6575.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AxbvZHtnSg9S89B2aV5RdzTc6LERpZxGd6xA7bBDajjG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Jan 2025 16:41:08 +0000
Certificate not after:    Mon 26 Jan 2026 16:46:08 +0000
Subordinate resources:    AS: 270948
                          IP: 143.137.172.0/22
                          IP: 2804:73f4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Apr 2025 14:59:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:07:7f:14:b2:59:a6:6f:95:80:03:6d:44:76:d7:d2:8e:bf:d7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 27 16:41:08 2025 GMT
            Not After : Jan 26 16:46:08 2026 GMT
        Subject: CN=8E78E6F7BEE3C25AC94360A02ECD6545F59D6575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4c:aa:f9:a0:5f:ac:8a:53:af:19:39:80:41:
                    63:71:77:c2:12:4a:17:68:78:b8:28:fc:31:24:d2:
                    d7:46:79:0a:d2:bb:76:35:c9:3c:94:ee:bc:89:6f:
                    a5:e5:80:e2:df:38:39:a3:d1:a3:a2:f8:20:35:c7:
                    5e:37:d6:34:b9:cb:5d:3c:5b:6e:6d:f4:2d:9f:9b:
                    a1:b9:4b:15:c8:e5:25:fa:bb:2b:73:c5:fd:91:8b:
                    b5:d9:aa:1c:f8:42:c0:53:57:39:aa:f1:3e:8d:26:
                    ab:4d:93:23:53:66:11:58:7d:3b:fc:65:4a:fd:cc:
                    34:e9:8b:d4:23:41:78:cb:7e:b6:cb:d1:87:4b:5c:
                    7f:b2:89:28:20:88:2a:ae:c7:52:b0:33:55:32:2b:
                    2a:c4:ce:a8:70:99:74:df:be:5a:05:0d:66:5b:71:
                    22:e2:b3:76:a2:a6:8e:49:bf:3a:9d:84:5a:b1:4c:
                    da:87:d0:73:90:e3:0e:8d:74:fb:04:17:71:be:17:
                    3f:4c:ce:80:d1:d7:bc:59:ee:0d:d0:48:33:4d:81:
                    03:2e:cb:2c:23:f5:54:1d:43:5a:ac:68:f2:ef:72:
                    65:25:fa:e6:b2:97:39:32:57:ef:c9:d1:6f:0b:8b:
                    9f:e5:70:49:81:0f:62:0f:13:6f:82:73:9b:bf:71:
                    78:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:78:E6:F7:BE:E3:C2:5A:C9:43:60:A0:2E:CD:65:45:F5:9D:65:75
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AxbvZHtnSg9S89B2aV5RdzTc6LERpZxGd6xA7bBDajjG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AxbvZHtnSg9S89B2aV5RdzTc6LERpZxGd6xA7bBDajjG/0/8E78E6F7BEE3C25AC94360A02ECD6545F59D6575.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.172.0/22
                IPv6:
                  2804:73f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270948

    Signature Algorithm: sha256WithRSAEncryption
         1e:fb:27:e9:46:57:20:24:41:cf:86:91:5d:dd:45:b3:2e:b5:
         85:5d:78:66:c9:1d:8d:4b:79:06:d7:8d:0d:28:42:fa:56:7b:
         8d:9f:b3:d3:0f:8c:fa:0b:4d:09:43:58:d5:c7:e8:11:60:18:
         ec:a9:71:4c:25:11:0f:e8:28:c8:77:31:b4:35:00:85:fd:da:
         a8:98:e6:de:4d:5d:e2:d0:fd:a9:ed:b3:33:f6:c4:88:f7:ef:
         76:d8:f8:3d:d0:93:bb:4e:ba:7d:d4:be:50:4e:08:dd:ac:32:
         7d:d1:3a:b8:89:da:25:0f:b1:86:9f:ea:a0:5c:71:79:ba:9c:
         20:80:49:ae:77:58:cf:37:f0:d0:07:c9:a2:c0:63:8b:a9:e5:
         4d:27:65:fd:64:66:ce:ac:6c:7b:e3:a3:00:3b:6f:32:43:1a:
         08:ea:30:d5:5c:31:ae:0d:03:d0:38:e1:4f:38:34:a3:f1:1b:
         1f:bf:1d:f1:b9:20:ef:ac:6c:be:cc:18:46:41:5f:4c:40:56:
         de:2f:ff:8c:5f:47:08:09:d0:03:3f:39:0b:a8:7e:b3:d4:fb:
         c8:e3:1f:e1:88:f3:ed:41:36:ef:5d:75:93:b2:69:d4:97:4e:
         01:f0:23:09:43:9d:66:69:0b:1b:1f:b4:46:eb:0d:4a:db:02:
         0f:d4:8f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:36:40 2025 by rpki-client