Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8E7FF2325D6F6F6BE8865F82FF4D999C33D31887.cer
File:                     8E7FF2325D6F6F6BE8865F82FF4D999C33D31887.cer (raw, json)
Hash identifier:          jF1SeDAorrr/ETzS1kPM/5tM8EjRHW7tMTgfvnqAwHc=
Subject key identifier:   8E:7F:F2:32:5D:6F:6F:6B:E8:86:5F:82:FF:4D:99:9C:33:D3:18:87
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7EB7221895F8427714134D6F3ABD2AC8AB8B0EC7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/8E7FF2325D6F6F6BE8865F82FF4D999C33D31887.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Nov 2024 13:54:26 +0000
Certificate not after:    Tue 04 Nov 2025 13:59:26 +0000
Subordinate resources:    AS: 268669
                          IP: 45.164.100.0/22
                          IP: 2804:54c4::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b7:22:18:95:f8:42:77:14:13:4d:6f:3a:bd:2a:c8:ab:8b:0e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  5 13:54:26 2024 GMT
            Not After : Nov  4 13:59:26 2025 GMT
        Subject: CN=8E7FF2325D6F6F6BE8865F82FF4D999C33D31887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ab:99:01:2c:e0:fb:18:df:76:7e:19:e4:be:
                    9a:6a:ee:6d:34:16:f0:de:5c:26:30:78:ba:44:9e:
                    4d:3f:2b:01:88:3d:9b:c6:35:d8:ea:8a:cb:81:1a:
                    5c:bf:5f:e3:d8:1d:8b:a5:9e:aa:22:33:1e:c2:fa:
                    aa:10:bb:77:e7:ab:51:3a:98:79:4c:cf:3b:3f:02:
                    22:f9:22:98:a6:ed:40:90:3f:04:18:c6:cc:63:66:
                    d5:ad:b4:90:8c:94:4c:5d:7b:3c:10:38:f7:b9:91:
                    21:6e:43:8b:8e:72:69:16:b3:01:81:ee:e4:e2:d3:
                    52:f3:6d:6b:5d:27:b8:f9:21:ba:2b:ea:74:b2:20:
                    d7:db:25:1a:79:0e:b5:7e:20:03:71:dd:b9:e2:2a:
                    3b:d4:7c:28:39:4b:30:b3:ab:08:b3:0d:ea:4f:38:
                    5e:4c:34:c8:98:13:44:2f:53:d1:48:cd:d9:c6:c7:
                    ab:d0:6d:39:02:ca:4b:6e:19:a1:db:5f:0a:e6:3a:
                    e4:01:f7:51:d6:9e:81:33:6c:eb:35:66:66:df:e5:
                    e2:c1:82:19:40:40:bf:33:36:34:3a:d9:9b:a3:94:
                    d8:7e:4f:3e:ef:32:b6:81:7d:9f:19:41:27:98:50:
                    d7:a9:65:57:e1:55:4e:08:fe:ef:95:ba:89:06:5a:
                    8a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:7F:F2:32:5D:6F:6F:6B:E8:86:5F:82:FF:4D:99:9C:33:D3:18:87
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3h7hWFrjYGL9RL7gqkksZFh2ZDFRuhpqZ1U6MVNyVsuC/0/8E7FF2325D6F6F6BE8865F82FF4D999C33D31887.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.100.0/22
                IPv6:
                  2804:54c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268669

    Signature Algorithm: sha256WithRSAEncryption
         6e:ef:bb:3d:1d:14:ae:4a:f2:72:4b:94:7f:2a:11:5a:95:d9:
         1f:f8:b8:23:13:c0:de:f9:dd:f3:04:f0:0a:ef:7b:a9:a5:c2:
         d5:8e:da:63:7a:44:ff:65:83:51:18:a2:d8:de:4a:cd:46:aa:
         71:c8:59:bb:ac:2b:6a:50:33:92:34:1f:13:91:00:0e:38:ea:
         ab:8b:13:a5:88:0d:1c:b8:29:e6:97:b2:23:0f:30:4c:e9:81:
         f7:4f:4b:1e:7c:f5:7c:e1:c9:84:3e:5a:fc:91:5d:14:a3:9e:
         f9:88:a2:03:d3:9c:05:a8:8b:24:93:18:43:ed:f6:60:f2:a5:
         a1:60:76:53:67:98:cf:01:f5:5e:cb:00:15:ca:81:b2:34:fb:
         b0:53:c0:8b:c0:1c:b8:78:d7:19:59:71:96:05:db:07:ae:dd:
         f9:f5:f3:6e:4e:f0:f0:83:48:f8:89:c9:77:c3:2e:aa:2e:19:
         51:85:1f:69:40:65:9e:57:bf:72:8b:a4:64:2a:8d:08:a3:0c:
         c5:6a:44:e8:01:c8:6d:78:19:e5:23:58:76:fe:23:d1:16:38:
         87:d4:8d:ed:c7:3b:70:6f:33:04:1d:6e:f6:d4:cf:4e:2d:9f:
         d3:4d:f8:3e:7c:28:43:cd:6b:76:15:13:c5:0c:8d:0f:f6:db:
         46:3a:25:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:11:02 2024 by rpki-client on console-ams.rpki-client.org