Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8E156E2845BD3097BBB74634CA6CCF129AFEF88D.cer
File:                     8E156E2845BD3097BBB74634CA6CCF129AFEF88D.cer (raw, json)
Hash identifier:          jZGjgv8JOaKzNxhCLUpdsDN+DcevxTecPRTnFnQ9pjw=
Subject key identifier:   8E:15:6E:28:45:BD:30:97:BB:B7:46:34:CA:6C:CF:12:9A:FE:F8:8D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       57F212EDCAB12A7DCF40C96C99C0B8E02E1D4D85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-pp.com/repo/GOOFL/1/8E156E2845BD3097BBB74634CA6CCF129AFEF88D.mft
caRepository:             rsync://rpki-pp.com/repo/GOOFL/1/
Notify URL:               https://rpki-pp.com/rrdp/notification.xml
Certificate not before:   Thu 10 Jul 2025 04:01:49 +0000
Certificate not after:    Thu 09 Jul 2026 04:06:49 +0000
Subordinate resources:    AS: 61574 -- 61576
                          AS: 263842 -- 263844
                          IP: 138.185.228.0/22
                          IP: 2804:269c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 08 Aug 2025 04:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f2:12:ed:ca:b1:2a:7d:cf:40:c9:6c:99:c0:b8:e0:2e:1d:4d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 10 04:01:49 2025 GMT
            Not After : Jul  9 04:06:49 2026 GMT
        Subject: CN=8E156E2845BD3097BBB74634CA6CCF129AFEF88D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fa:36:99:fe:7e:3c:6f:01:b1:46:b6:65:e5:
                    8b:88:5b:ef:b6:35:f1:4b:0f:64:e7:bd:70:bf:71:
                    d6:1b:ba:8c:9a:5b:9c:a6:fe:ff:65:e3:bd:b7:50:
                    fd:52:d0:e7:60:55:ff:65:88:c1:a5:8c:82:83:93:
                    c4:04:de:2c:40:64:72:68:90:f3:91:65:d3:e0:20:
                    5e:2d:09:58:fb:c5:29:b7:19:64:1e:df:44:4b:d3:
                    ec:b7:93:f3:8f:08:86:52:bf:0d:41:85:31:ef:1f:
                    97:f7:4e:5f:a0:43:34:b8:a3:13:e0:8e:01:fb:e3:
                    84:45:d5:2a:cc:8a:52:f5:aa:4d:1f:03:2a:b2:68:
                    a1:c7:c5:c1:d9:e9:cf:66:31:cf:ad:26:5f:14:5c:
                    02:1a:5e:40:a6:b8:69:2a:25:6d:c5:f3:70:76:fc:
                    41:bd:f1:e7:8b:1a:bc:be:4b:47:17:55:2c:2c:02:
                    74:08:a3:f7:35:d8:a1:18:01:de:53:28:3f:50:3a:
                    aa:c6:8d:a0:c8:84:44:3a:c5:0f:9b:ba:fe:fd:13:
                    e9:e4:46:67:5d:71:3d:07:2a:2d:ff:ec:ca:40:11:
                    b5:0f:8e:39:a0:39:41:64:da:e5:a2:af:49:5b:bb:
                    59:de:fb:58:12:f1:95:21:68:c3:e7:17:db:55:27:
                    a9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8E:15:6E:28:45:BD:30:97:BB:B7:46:34:CA:6C:CF:12:9A:FE:F8:8D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-pp.com/repo/GOOFL/1/
                RPKI Manifest - URI:rsync://rpki-pp.com/repo/GOOFL/1/8E156E2845BD3097BBB74634CA6CCF129AFEF88D.mft
                RPKI Notify - URI:https://rpki-pp.com/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.228.0/22
                IPv6:
                  2804:269c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61574-61576
                  263842-263844

    Signature Algorithm: sha256WithRSAEncryption
         2d:67:a3:70:d0:24:78:97:63:d6:c3:d1:c1:51:b6:35:c4:c5:
         b0:56:16:df:2c:ef:bd:83:f7:65:73:01:c4:6b:1f:93:19:28:
         56:97:66:0c:cf:c3:0a:35:36:0b:ac:c2:bf:c9:d8:a9:d9:25:
         1d:07:3b:da:7c:3b:0d:d5:2b:48:cf:29:b9:2c:70:5e:26:2a:
         2e:0e:ea:a5:ef:c8:ed:50:b6:78:0c:83:c3:c0:f1:b2:9a:b1:
         f2:31:a8:97:a4:45:49:3e:d5:bc:7a:58:81:84:ce:44:8d:c8:
         58:ac:0e:75:cf:05:96:b8:8b:2d:c3:6a:6c:17:0e:9a:99:c4:
         42:df:76:99:7e:0b:68:16:bc:60:cf:8b:15:00:0e:b3:95:99:
         d0:82:21:fb:d6:17:c7:1a:7d:e5:b8:8a:8f:60:2f:20:b1:97:
         a5:f3:84:27:a7:f4:10:a2:0b:2f:92:d5:b0:26:b2:45:c7:1c:
         b9:ba:ba:88:34:a1:57:b0:6d:d9:cd:4a:6c:71:3a:4e:1b:2d:
         53:79:c8:dd:03:e5:d9:df:73:ec:3e:eb:5b:6d:2a:a9:58:2a:
         89:e7:0b:42:8a:68:f6:59:e6:c7:15:55:dc:02:6a:64:af:e1:
         a6:26:f3:63:64:ae:49:78:ac:96:c8:d7:4f:5e:80:67:c0:95:
         4e:27:40:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:31:01 2025 by rpki-client