Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer
File:                     8EAA354A58DA25563FA50D71839B6A66106FB7D8.cer (raw, json)
Hash identifier:          UmFV6QHA6CQAb8V2lzFeIzxDo+UpNQnkhP4ZuFQz1UA=
Subject key identifier:   8E:AA:35:4A:58:DA:25:56:3F:A5:0D:71:83:9B:6A:66:10:6F:B7:D8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7D9BD24A81BD850A3BC1B4D6C4BCBCFA0CACCD93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 16:35:20 +0000
Certificate not after:    Thu 03 Apr 2025 16:40:20 +0000
Subordinate resources:    AS: 271557
                          IP: 181.233.188.0/22
                          IP: 2804:7d60::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:9b:d2:4a:81:bd:85:0a:3b:c1:b4:d6:c4:bc:bc:fa:0c:ac:cd:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 16:35:20 2024 GMT
            Not After : Apr  3 16:40:20 2025 GMT
        Subject: CN=8EAA354A58DA25563FA50D71839B6A66106FB7D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3d:d0:cc:38:66:f2:c1:5a:7b:75:27:c3:f6:
                    32:ae:ac:01:1c:a5:23:9b:e4:52:9f:4b:66:fe:0a:
                    a1:3c:ad:dd:47:6d:5e:16:9f:26:58:97:78:2e:35:
                    33:98:20:15:dd:d9:90:ec:68:86:d7:f2:2a:ca:70:
                    53:f9:73:70:dc:d4:b6:a6:51:cc:04:49:a6:e9:41:
                    a5:af:87:bd:9b:4d:ea:e4:33:7f:d5:99:d9:ff:98:
                    c1:b6:83:f1:0d:01:62:d2:30:63:56:51:a5:ea:5b:
                    4f:27:8e:b9:ae:54:3d:0c:b1:1e:8e:f9:81:18:aa:
                    ff:89:a6:c3:ea:92:13:0d:5f:fc:97:42:50:02:37:
                    03:fc:79:81:b1:ac:d4:67:e1:1c:69:0c:b5:9a:07:
                    db:e8:9e:b8:8e:1b:68:b2:9e:9a:5e:fc:de:18:f2:
                    f0:a8:18:a4:e0:b6:97:40:f0:77:bb:5c:21:4b:6f:
                    01:16:f7:e0:bc:d4:00:94:ae:9b:aa:65:85:d3:f3:
                    69:08:b1:c3:a1:47:4a:4a:ff:21:a0:a5:81:71:0e:
                    0f:59:5e:6b:a9:ae:d1:e5:36:a3:10:a6:cf:16:f8:
                    37:20:ad:65:3e:37:31:1c:bd:00:f1:8f:ca:9f:b0:
                    c3:69:ac:ae:f9:ea:ee:ad:b5:1f:21:fb:a2:7e:f8:
                    21:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:AA:35:4A:58:DA:25:56:3F:A5:0D:71:83:9B:6A:66:10:6F:B7:D8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BMEPDvmqW9xJKF8iSWhcjedNv9aNNXWvMT23JJgBV1KR/1/8EAA354A58DA25563FA50D71839B6A66106FB7D8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.188.0/22
                IPv6:
                  2804:7d60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271557

    Signature Algorithm: sha256WithRSAEncryption
         35:a9:fd:29:96:91:b5:02:a3:5d:31:fc:12:e4:58:3d:88:0e:
         b4:1c:bf:7a:d8:bd:5a:7b:a3:53:70:4d:e3:9c:b7:d2:0f:09:
         9f:4a:1e:5f:74:e5:d0:b7:e2:70:de:d8:4f:96:3a:b8:08:3a:
         fc:05:f7:d1:e4:5c:51:34:a4:8e:8e:a3:14:16:36:4a:36:26:
         a0:f2:4e:7c:7a:25:6e:98:64:ac:01:25:3b:6c:4d:b1:fc:a9:
         f8:c3:2e:66:17:f4:21:8e:df:56:7a:6f:92:d0:02:25:e2:e6:
         2a:cc:09:74:9d:33:a4:b9:10:86:46:dd:67:9c:ac:46:9b:24:
         b0:0c:8a:dd:0a:76:0e:06:23:40:17:46:b3:a0:a5:5a:7a:2e:
         3a:80:5a:f8:e8:90:43:f0:f9:9a:76:13:c1:41:0a:ce:6b:6d:
         76:c5:d8:d6:d0:88:bf:61:23:a9:4a:10:5f:64:66:f4:23:18:
         e5:de:91:bb:a0:54:b0:83:68:72:50:e3:b8:0e:cf:91:1e:5c:
         1d:31:8d:d6:d5:96:69:32:fd:68:58:f6:1e:13:6d:9a:84:40:
         fd:a3:38:a1:a3:74:64:4d:42:4f:9f:3f:fb:78:91:6f:8a:62:
         fa:e8:a8:af:29:7a:f6:a2:f8:42:a6:33:36:d4:70:10:d3:22:
         09:9d:fc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:06:20 2024 by rpki-client on console-ams.rpki-client.org