Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E8B8CDA5314C0516CAAAB451F88C47B629DC4500.cer
File:                     E8B8CDA5314C0516CAAAB451F88C47B629DC4500.cer (raw, json)
Hash identifier:          vmvLerBS++dF9cl9fc6bZANo5Vqgm8uWmi2p0At1uDQ=
Subject key identifier:   E8:B8:CD:A5:31:4C:05:16:CA:AA:B4:51:F8:8C:47:B6:29:DC:45:00
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F5880C79269CD8ACB079ECDE1AFEEC234CF547C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/E8B8CDA5314C0516CAAAB451F88C47B629DC4500.mft
caRepository:             rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 May 2024 13:07:20 +0000
Certificate not after:    Fri 23 May 2025 13:12:20 +0000
Subordinate resources:    AS: 270757
                          IP: 200.39.132.0/22
                          IP: 2804:70f0::/32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Oct 2024 05:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:58:80:c7:92:69:cd:8a:cb:07:9e:cd:e1:af:ee:c2:34:cf:54:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: May 24 13:07:20 2024 GMT
            Not After : May 23 13:12:20 2025 GMT
        Subject: CN=E8B8CDA5314C0516CAAAB451F88C47B629DC4500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4d:01:c3:eb:29:6e:11:38:ee:39:d1:35:bd:
                    fc:fd:f1:c8:d5:66:e2:27:c5:eb:05:6d:1c:22:24:
                    dd:b0:50:48:a5:3e:18:3b:33:9d:36:a6:bd:c6:4b:
                    01:5e:7a:e0:b9:f2:6a:9c:1b:2e:28:ac:81:b3:d8:
                    5f:bc:07:3d:d6:85:50:1e:d2:05:84:65:e4:3a:3f:
                    8b:fd:03:a2:60:e0:86:21:b2:68:db:88:bc:37:bf:
                    29:8d:9b:e4:18:82:14:10:64:d6:59:69:a9:66:87:
                    1a:02:a4:52:47:6a:67:29:d8:c9:5b:df:1e:8c:64:
                    ad:b7:aa:05:b5:5c:c4:9d:b4:db:c5:d7:33:19:f4:
                    3a:e1:32:8b:1f:d0:5f:f7:c8:1e:83:22:11:90:de:
                    0c:88:11:ab:7b:db:b1:ae:33:e7:a1:d7:d3:fa:e3:
                    41:a5:b9:4e:8a:d7:8f:11:05:a8:3d:17:98:be:da:
                    bc:3a:fe:82:e5:9c:be:6b:ef:dc:19:2c:62:8e:98:
                    7f:0b:51:6e:ea:ac:6c:6c:a0:24:c1:10:53:f5:68:
                    15:8b:79:a7:36:03:2f:cf:98:e7:eb:e9:35:63:6b:
                    d9:41:27:bf:50:72:11:22:af:68:60:03:5a:b1:cb:
                    48:37:8f:f1:a4:8c:07:77:cf:dc:34:7a:98:f7:eb:
                    f8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E8:B8:CD:A5:31:4C:05:16:CA:AA:B4:51:F8:8C:47:B6:29:DC:45:00
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/89YA5URBwzcfU7YpR6MXYz7UEWdJFmcqQFJJaMW5BSUg/0/E8B8CDA5314C0516CAAAB451F88C47B629DC4500.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.132.0/22
                IPv6:
                  2804:70f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270757

    Signature Algorithm: sha256WithRSAEncryption
         0e:4f:9a:a5:9a:70:c0:b2:19:52:39:bd:1b:23:4e:53:bd:af:
         fb:8c:fd:1c:0f:83:93:ef:b7:ea:b2:79:69:d0:a3:82:91:c1:
         52:2f:21:8d:18:d3:56:ea:01:d3:b1:74:68:70:3d:09:d8:16:
         1f:9e:5d:1e:5d:a8:d5:9d:69:1a:67:46:06:7f:4e:0e:9a:17:
         c5:dc:88:3d:a5:29:25:a3:09:5f:50:bb:99:d5:f6:8c:de:e9:
         4f:26:d4:d9:8d:59:41:7c:c5:90:63:f8:08:d6:26:6f:ac:98:
         f7:0c:36:10:98:57:e1:be:b8:ec:51:97:6d:64:f1:6c:d3:e1:
         a1:63:ac:ba:0d:3b:91:ec:a0:c8:db:f1:c4:ce:6c:15:39:3e:
         b6:82:4c:00:d3:a2:ce:aa:ea:6f:00:ec:0f:8b:09:df:31:28:
         fe:7d:10:5c:f4:52:6d:96:52:e2:74:78:26:55:77:30:e7:3b:
         a4:be:66:bc:da:1f:2e:6e:6b:01:65:09:54:dd:3f:3a:0e:87:
         00:66:f4:de:8c:1a:44:42:42:01:b3:b7:ba:3b:e7:62:56:6a:
         95:b0:72:db:69:5b:1e:f4:fe:f8:71:fd:b9:39:6f:67:ba:10:
         87:5f:c8:06:b5:49:0f:e2:95:61:f2:61:93:7d:b3:10:31:33:
         cc:ee:4d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 06:37:20 2024 by rpki-client on console.sobornost.net