Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.cer
File:                     EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.cer (raw, json)
Hash identifier:          9o3Kg7mCogb5ldEUwpIH+UKrZi6PEyoLh1RkruVRvHY=
Subject key identifier:   ED:A8:87:0B:B9:4E:24:D2:52:07:95:A4:7B:FD:F7:B5:E0:BD:D9:35
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3E93686A2DD1CCA0F2F6B62479A216C6720FD768
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Aug 2024 20:44:52 +0000
Certificate not after:    Wed 13 Aug 2025 20:49:52 +0000
Subordinate resources:    AS: 271479
                          IP: 200.4.108.0/22
                          IP: 2804:7c28::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:93:68:6a:2d:d1:cc:a0:f2:f6:b6:24:79:a2:16:c6:72:0f:d7:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 14 20:44:52 2024 GMT
            Not After : Aug 13 20:49:52 2025 GMT
        Subject: CN=EDA8870BB94E24D2520795A47BFDF7B5E0BDD935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4e:95:24:8b:48:56:f1:6d:ba:b9:d4:3a:e8:
                    6b:c9:90:68:46:3c:f4:9a:00:90:38:ad:e0:9d:27:
                    f0:30:ba:0d:67:fa:f0:de:15:4e:1a:cd:4a:e0:32:
                    46:99:b3:52:6c:7e:d7:fb:fa:3d:43:d2:b8:9f:db:
                    c1:02:86:f5:62:6a:2b:63:86:ae:90:57:dc:14:2c:
                    00:d8:27:71:e8:fd:b0:15:e4:7d:d7:cf:c7:dd:36:
                    a4:02:e7:dc:ff:27:73:96:a2:f1:7a:2f:39:72:01:
                    9e:de:b8:03:aa:b6:97:55:20:f7:61:22:f9:8c:22:
                    42:19:cb:27:c4:19:fa:b3:48:cc:da:bb:5d:3e:2d:
                    42:2a:72:a7:02:54:82:09:14:30:4e:62:1d:e5:4c:
                    dc:9d:a3:0b:9c:c0:73:d0:16:83:ca:60:9f:ac:41:
                    ce:b7:bd:33:4b:21:ea:81:a4:2a:83:cc:ef:8a:0d:
                    02:e5:78:7f:47:56:57:9f:76:d6:07:01:95:db:d0:
                    27:9e:0c:0a:1b:19:54:9f:bd:c2:ae:80:5b:14:95:
                    13:8a:5e:8e:0c:68:04:81:12:a7:92:3d:fb:18:e0:
                    c7:75:6c:07:13:6c:bc:bc:ba:b1:05:69:8a:83:44:
                    41:0a:50:83:d9:5b:34:e4:2e:da:d1:83:49:95:d1:
                    e1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                ED:A8:87:0B:B9:4E:24:D2:52:07:95:A4:7B:FD:F7:B5:E0:BD:D9:35
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/EDA8870BB94E24D2520795A47BFDF7B5E0BDD935.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.4.108.0/22
                IPv6:
                  2804:7c28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271479

    Signature Algorithm: sha256WithRSAEncryption
         c1:b7:22:d9:69:fa:cb:12:e5:db:2b:6e:45:3e:89:fd:42:4a:
         04:f5:cc:30:3b:a4:11:8c:4f:22:c8:cb:52:f6:8a:f8:9b:c1:
         70:b5:c1:44:8a:dd:b6:9f:90:59:85:a7:92:f8:26:9a:aa:a3:
         e0:26:93:31:82:e8:04:8b:c9:2d:a9:5c:d1:77:e7:0b:af:6c:
         d3:f0:34:4a:72:1a:af:16:c1:68:fc:ce:d5:e9:0d:65:2f:02:
         9c:0f:76:43:96:f6:75:5d:f0:25:47:c2:e7:eb:e0:a0:b4:33:
         9a:73:cf:8a:45:33:d2:fc:56:51:7a:5e:9b:bf:19:46:e2:6f:
         8e:ea:d3:e9:38:3e:e8:f3:ac:34:b7:93:25:f5:cd:65:1a:44:
         9d:6c:ef:d0:62:ea:81:1f:bc:7d:02:91:4a:ce:89:61:db:2d:
         bd:85:6c:25:64:ef:0a:41:69:2b:2d:de:20:df:c4:7b:b4:ed:
         c6:e3:c8:59:91:b9:c0:ff:f1:c3:4b:66:53:5e:a9:4d:e7:1e:
         df:83:17:79:e8:3b:40:ef:2d:7a:73:00:83:11:70:c2:b1:cf:
         e3:aa:13:47:a5:4b:dc:17:ab:61:ad:db:7a:ab:52:03:e3:98:
         8e:a8:27:67:c6:c5:12:52:5f:b7:f3:18:dc:b2:04:f4:39:ea:
         f0:9f:43:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:55 2025 by rpki-client