Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
File:                     FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer (raw, json)
Hash identifier:          jEtcgmQWSG8BcsK9m1pVhfC5mA5rlgjA3fIYJ0tlmSs=
Subject key identifier:   FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6E453D77C5E4AF3E3566A98034726821029B4A44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 07 Feb 2026 12:36:09 +0000
Certificate not after:    Sat 06 Feb 2027 12:41:09 +0000
Subordinate resources:    AS: 61805
                          IP: 45.239.224.0/22
                          IP: 131.161.156.0/22
                          IP: 170.246.32.0/22
                          IP: 170.247.80.0/22
                          IP: 200.229.156.0/22
                          IP: 2804:1998::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 12:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:45:3d:77:c5:e4:af:3e:35:66:a9:80:34:72:68:21:02:9b:4a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  7 12:36:09 2026 GMT
            Not After : Feb  6 12:41:09 2027 GMT
        Subject: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1d:e7:4d:c4:37:cb:99:34:1f:54:2d:99:b2:
                    4c:d2:9c:dd:3c:92:99:ac:1e:e3:67:1f:ab:fa:d5:
                    d9:2e:b1:91:cb:69:7a:a9:aa:10:4e:61:6f:e6:38:
                    76:54:d8:54:fd:9e:ae:1c:77:07:76:ed:c1:ec:a6:
                    3c:b7:f6:c4:fb:b4:a7:af:8e:fe:2d:82:7d:fc:19:
                    12:9d:90:fe:e2:e2:03:22:c3:60:e9:d6:a3:68:5f:
                    96:f4:9a:4e:06:11:e1:a5:df:27:36:86:ae:bc:f5:
                    0d:fe:9f:3d:f4:58:40:89:2a:39:7b:79:c9:f2:7e:
                    b5:eb:20:19:b0:87:cd:4a:40:98:bd:ec:7c:a9:65:
                    69:56:f9:ec:5c:87:02:64:b7:d2:9e:a0:42:40:83:
                    71:a2:49:2b:55:a4:8d:b6:f0:e7:d6:ee:79:4a:f5:
                    5c:5a:47:6a:34:53:b0:47:5a:54:24:9d:4e:0f:92:
                    82:2e:fc:27:e8:09:69:a8:dd:2f:8e:1e:6d:55:44:
                    5e:b6:ce:93:50:17:4f:bc:b9:6d:0e:a5:88:68:03:
                    3f:b9:06:7a:eb:26:e5:6a:4d:3c:b7:22:6b:3a:21:
                    e9:8e:3e:48:f5:ca:07:bf:bd:af:a5:93:4d:d4:42:
                    36:ba:3d:50:50:cc:9c:fe:9d:84:40:81:34:ad:38:
                    a7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.224.0/22
                  131.161.156.0/22
                  170.246.32.0/22
                  170.247.80.0/22
                  200.229.156.0/22
                IPv6:
                  2804:1998::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61805

    Signature Algorithm: sha256WithRSAEncryption
         b7:0d:5b:32:bb:c7:13:1a:e3:83:81:8f:38:0a:59:ab:63:89:
         d4:58:b0:8f:85:57:57:1f:fe:e8:dc:a6:5d:dd:7d:0d:24:45:
         6d:01:73:9f:6a:ba:6b:4f:e9:c1:7e:40:f5:2b:cf:57:44:d0:
         32:89:3e:14:a5:c5:1d:27:fe:cd:3d:3e:7d:a0:14:0c:7e:70:
         86:00:57:0a:fa:6b:3c:f8:8c:01:e9:df:52:b3:a4:18:c7:2a:
         ff:b2:88:f2:12:2b:02:87:62:ea:25:ab:07:78:ea:77:a8:5e:
         72:dd:ff:67:34:6a:fe:e7:79:b9:cd:11:db:ca:47:84:94:31:
         dc:85:9b:87:3b:53:6c:ea:a0:4d:ea:d1:fd:d1:9c:3b:88:1e:
         c0:e1:18:41:d0:b1:33:36:1f:53:7e:79:ff:00:d3:b1:ac:40:
         08:bf:c8:9a:24:99:13:23:f7:60:ff:05:da:32:bf:72:6e:48:
         cb:79:f5:78:63:44:18:98:fe:a8:aa:d3:80:d4:43:18:bc:52:
         15:93:6e:75:5c:07:ba:29:1b:79:5d:ec:dc:6f:af:21:88:d4:
         8e:ef:90:de:04:e1:f7:90:2c:a6:b4:6f:a5:5c:f7:f0:37:c9:
         b1:7c:29:c3:45:1f:dd:21:11:8d:8d:2a:89:e0:d1:1c:ff:2c:
         0f:ec:c5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:37:24 2026 by rpki-client