Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.cer
File:                     8EAA572CDAB740A56977FFFC602F113E473F2E77.cer (raw, json)
Hash identifier:          Ay/Gl/01FSroZWEViAr3hXbCtDcJhLhCr/+BJsHDV4w=
Subject key identifier:   8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       791E4515DA6191E5E4FD8A35E640CCE20ABAA142
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 20:58:55 +0000
Certificate not after:    Wed 02 Apr 2025 21:03:55 +0000
Subordinate resources:    AS: 53154
                          IP: 186.209.224.0/20

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:1e:45:15:da:61:91:e5:e4:fd:8a:35:e6:40:cc:e2:0a:ba:a1:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 20:58:55 2024 GMT
            Not After : Apr  2 21:03:55 2025 GMT
        Subject: CN=8EAA572CDAB740A56977FFFC602F113E473F2E77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ce:86:9e:70:3f:ea:7c:29:46:30:9f:b2:6d:
                    54:bc:f2:d2:86:a9:cf:2d:d8:eb:c0:72:b8:94:dd:
                    aa:9d:b5:1d:3a:6b:10:98:32:93:58:13:39:ef:05:
                    1b:65:19:6c:f0:cd:08:14:5c:22:5c:0a:64:af:0e:
                    c2:d7:29:c7:77:ca:88:bd:1b:21:7a:79:10:c5:c9:
                    08:e1:6a:b0:d6:f7:9e:27:5c:af:9c:06:a7:2a:1d:
                    7f:16:c5:42:7a:c1:c8:4e:47:2b:61:10:80:c9:fe:
                    7e:34:bd:d5:3d:c0:6d:08:4f:7d:bf:16:d4:31:c5:
                    f8:ed:35:07:0b:cc:c9:a9:3e:4a:ca:e3:73:30:39:
                    0e:2b:3f:dd:70:2f:46:7c:93:c0:26:c4:c1:01:70:
                    ca:ee:02:c0:83:de:47:ea:79:94:3a:f6:a7:51:7e:
                    82:e1:43:72:ea:39:2f:e9:01:ac:cb:52:76:fa:56:
                    b5:44:ef:43:61:fc:a6:a7:59:c3:be:73:31:8d:e1:
                    ec:db:89:7b:b7:11:f7:e3:4c:d9:e4:fa:30:66:49:
                    dd:47:d8:80:d0:08:b2:d5:a3:46:6a:31:13:14:3e:
                    ef:c7:e0:52:af:79:ff:6c:14:01:05:30:2f:2b:a5:
                    87:67:d9:20:cb:03:60:0f:db:fe:f0:da:d3:5e:3c:
                    67:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:AA:57:2C:DA:B7:40:A5:69:77:FF:FC:60:2F:11:3E:47:3F:2E:77
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FpNKRrF8KLJr9Y4mY6W5L19FnUcW2Ztq49FuCUfUq3JW/1/8EAA572CDAB740A56977FFFC602F113E473F2E77.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.224.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53154

    Signature Algorithm: sha256WithRSAEncryption
         6f:dc:63:3d:89:e4:8a:cd:e6:50:e1:13:73:e8:c5:1c:cf:e5:
         83:b2:7e:89:a2:2e:fe:6d:b2:c6:91:c8:60:49:af:ef:fe:ff:
         94:2c:a4:0d:b8:f7:13:88:92:33:37:80:71:62:bb:46:fe:a9:
         71:c3:98:6d:28:54:80:5e:29:da:77:c1:7c:88:42:10:23:6d:
         34:fa:42:00:9b:c1:08:69:5c:7c:75:6f:04:15:78:fb:1a:f5:
         72:46:db:89:e8:c3:33:9c:09:51:6e:3b:f1:9e:b6:c9:cf:b0:
         9c:f4:a9:9a:72:60:b5:2b:6a:ad:83:17:fd:9e:a9:cc:c3:75:
         10:27:72:55:82:3d:c6:03:df:00:20:37:7f:ee:5a:53:7d:7f:
         25:89:d0:c9:b8:12:61:e3:36:48:14:3e:ce:55:5d:44:da:d8:
         61:09:0a:e6:3a:b1:54:94:0c:b0:c1:dd:93:35:5e:50:17:b8:
         0c:8f:1c:6b:d6:b9:d7:6b:b7:8c:f3:06:17:74:2a:46:89:1c:
         e7:c0:69:9b:37:41:71:c4:cd:b1:c4:fa:f7:b7:97:36:ad:64:
         7c:b2:d8:6b:35:5d:d3:aa:4e:1a:39:22:10:c9:d8:37:ba:fe:
         9f:0b:42:12:5b:e1:c2:2d:ea:a6:61:fc:7d:32:b7:55:03:00:
         63:33:d0:56
-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIUeR5FFdphkeXk/Yo15kDM4gq6oUIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNDA0MDMyMDU4NTVaFw0yNTA0MDIyMTAzNTVaMDMxMTAvBgNV
BAMTKDhFQUE1NzJDREFCNzQwQTU2OTc3RkZGQzYwMkYxMTNFNDczRjJFNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQzoaecD/qfClGMJ+ybVS88tKG
qc8t2OvAcriU3aqdtR06axCYMpNYEznvBRtlGWzwzQgUXCJcCmSvDsLXKcd3yoi9
GyF6eRDFyQjharDW954nXK+cBqcqHX8WxUJ6wchORythEIDJ/n40vdU9wG0IT32/
FtQxxfjtNQcLzMmpPkrK43MwOQ4rP91wL0Z8k8AmxMEBcMruAsCD3kfqeZQ69qdR
foLhQ3LqOS/pAazLUnb6VrVE70Nh/KanWcO+czGN4ezbiXu3EffjTNnk+jBmSd1H
2IDQCLLVo0ZqMRMUPu/H4FKvef9sFAEFMC8rpYdn2SDLA2AP2/7w2tNePGd3AgMB
AAGjggMqMIIDJjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSOqlcs2rdApWl3
//xgLxE+Rz8udzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRnBO
S1JyRjhLTEpyOVk0bVk2VzVMMTlGblVjVzJadHE0OUZ1Q1VmVXEzSlcvMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRnBO
S1JyRjhLTEpyOVk0bVk2VzVMMTlGblVjVzJadHE0OUZ1Q1VmVXEzSlcvMS84RUFB
NTcyQ0RBQjc0MEE1Njk3N0ZGRkM2MDJGMTEzRTQ3M0YyRTc3Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAS60eAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAM+i
MA0GCSqGSIb3DQEBCwUAA4IBAQBv3GM9ieSKzeZQ4RNz6MUcz+WDsn6Joi7+bbLG
kchgSa/v/v+ULKQNuPcTiJIzN4BxYrtG/qlxw5htKFSAXinad8F8iEIQI200+kIA
m8EIaVx8dW8EFXj7GvVyRtuJ6MMznAlRbjvxnrbJz7Cc9KmacmC1K2qtgxf9nqnM
w3UQJ3JVgj3GA98AIDd/7lpTfX8lidDJuBJh4zZIFD7OVV1E2thhCQrmOrFUlAyw
wd2TNV5QF7gMjxxr1rnXa7eM8wYXdCpGiRznwGmbN0FxxM2xxPr3t5c2rWR8sthr
NV3Tqk4aOSIQydg3uv6fC0ISW+HCLeqmYfx9MrdVAwBjM9BW
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:06:20 2024 by rpki-client on console-ams.rpki-client.org