Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C8232E7ADA2149C400868144F5DA83930BC26309.cer
File:                     C8232E7ADA2149C400868144F5DA83930BC26309.cer (raw, json)
Hash identifier:          o69YkBse6NcssCIPAlLDSsyOjm7NkNKmsgJhNOgVyeo=
Subject key identifier:   C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       672D7E6BE0045D6C5628F088F4D9E22EFB35171A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 04:24:43 +0000
Certificate not after:    Thu 03 Apr 2025 04:29:43 +0000
Subordinate resources:    AS: 262566
                          IP: 177.73.72.0/22
                          IP: 177.129.184.0/21
                          IP: 2804:3f10::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:2d:7e:6b:e0:04:5d:6c:56:28:f0:88:f4:d9:e2:2e:fb:35:17:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 04:24:43 2024 GMT
            Not After : Apr  3 04:29:43 2025 GMT
        Subject: CN=C8232E7ADA2149C400868144F5DA83930BC26309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1b:93:f0:ab:3a:79:14:d6:c5:68:0d:d1:fe:
                    49:e3:9c:e3:a6:8f:3a:76:8a:59:e4:42:50:03:f8:
                    4d:54:98:6f:1c:28:aa:df:71:6c:e6:2d:0d:9e:06:
                    56:32:39:bb:a7:92:38:42:0c:8b:11:c5:d9:c8:36:
                    b2:34:52:69:37:df:55:41:2a:c9:66:2e:15:93:66:
                    18:42:0e:28:59:0c:48:f2:90:c7:8c:c7:72:02:96:
                    02:1c:c8:a6:d2:a6:3a:c8:cd:11:d8:57:57:e9:0f:
                    8b:e9:54:8b:be:ef:31:40:b5:1c:cc:17:fe:d2:38:
                    d5:54:29:eb:a6:e6:5c:81:17:51:af:4c:20:99:40:
                    5b:96:11:0c:19:44:53:f0:d6:26:74:6c:66:40:c5:
                    6a:5d:c1:28:3b:ee:2a:32:ee:68:e4:18:13:2d:7b:
                    97:0d:58:72:de:06:ea:e3:3c:90:e5:40:ff:af:37:
                    89:43:ed:b5:9d:b3:93:3b:d7:d7:33:7d:11:6a:22:
                    f1:10:f6:f7:bc:12:22:14:38:eb:99:13:89:d6:0d:
                    a5:80:4a:7a:22:8b:e0:b5:18:ff:30:3c:41:a8:49:
                    4c:d1:c4:25:73:cc:b6:74:f9:1f:9e:f0:da:86:1f:
                    f1:58:1b:58:b0:4d:a2:a6:29:19:2f:55:13:fb:85:
                    0c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:23:2E:7A:DA:21:49:C4:00:86:81:44:F5:DA:83:93:0B:C2:63:09
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HumhZFgDSozKPvSBf1juD5f8NgKAVCKJsYMhcTPsoFTw/1/C8232E7ADA2149C400868144F5DA83930BC26309.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.72.0/22
                  177.129.184.0/21
                IPv6:
                  2804:3f10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262566

    Signature Algorithm: sha256WithRSAEncryption
         7a:b1:86:35:dd:99:98:fd:fd:80:bd:a1:78:4e:79:7b:f4:73:
         a9:e4:20:ae:08:ec:1b:40:6d:c3:bd:3a:90:26:2b:c3:df:49:
         40:c6:a3:53:42:16:57:a9:6b:ed:4c:82:39:54:78:46:3a:c6:
         3f:c8:a3:e3:4e:3f:b9:e4:dd:a7:ab:98:dd:3a:69:11:fd:1c:
         2d:71:05:6d:38:f5:c1:5d:f9:78:7d:48:a8:2f:bb:84:97:c4:
         0b:ad:75:c4:c5:5e:fb:29:6e:d8:d7:12:43:54:23:5a:e0:21:
         dd:16:08:98:6a:80:0e:04:59:94:a1:35:21:28:66:b1:e1:28:
         3e:8b:22:46:da:6e:66:d5:96:a6:6d:fa:63:f0:45:f2:8d:1c:
         cb:05:49:67:af:32:93:02:22:86:33:ec:f4:8d:d7:3a:71:71:
         c5:af:fe:17:11:a9:c4:ea:c4:dd:d9:bf:fd:f7:26:57:99:5d:
         1d:60:4b:0f:f5:27:ec:21:b5:e2:87:65:0f:74:24:44:64:c9:
         44:17:83:8a:b8:9f:9e:c4:53:8c:94:c7:a8:e6:a1:62:ab:ed:
         55:bc:87:d3:c0:34:2f:f5:75:a1:c2:eb:e4:c1:00:66:f9:86:
         69:e3:8a:96:38:ca:96:15:a9:70:a8:74:48:50:79:72:7a:07:
         98:b4:c4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:30:54 2024 by rpki-client on console-fra.rpki-client.org