Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
File:                     5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer (raw, json)
Hash identifier:          6S9NmpmjgCnPg42h+Z8hMfs7UH1HXY43mfXFfqCl4iE=
Subject key identifier:   5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       63A139046341C7E6F17153F5B4B28112D0EC3D79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Jan 2025 20:05:10 +0000
Certificate not after:    Thu 08 Jan 2026 20:10:10 +0000
Subordinate resources:    AS: 28351
                          AS: 28573
                          IP: 177.32.0.0/14
                          IP: 177.64.0.0/15
                          IP: 177.80.0.0/14
                          IP: 177.100.0.0/16
                          IP: 177.127.0.0/16
                          IP: 177.140.0.0/14
                          IP: 177.180.0.0/14
                          IP: 177.192.0.0/14
                          IP: 177.235.0.0/16
                          IP: 179.105.0.0/16
                          IP: 179.136.0.0/13
                          IP: 179.152.0.0/13
                          IP: 179.208.0.0/12
                          IP: 179.232.0.0/14
                          IP: 181.213.0.0/16
                          IP: 181.216.0.0/13
                          IP: 186.204.0.0/14
                          IP: 186.218.0.0/16
                          IP: 186.220.0.0/14
                          IP: 187.2.0.0/15
                          IP: 187.20.0.0/14
                          IP: 187.36.0.0/14
                          IP: 187.64.0.0/14
                          IP: 187.104.0.0/14
                          IP: 187.122.0.0/15
                          IP: 187.180.0.0/14
                          IP: 187.255.0.0/16
                          IP: 189.4.0.0/14
                          IP: 189.14.128.0/18
                          IP: 189.29.0.0/16
                          IP: 189.32.0.0/14
                          IP: 189.39.144.0/20
                          IP: 189.51.176.0/20
                          IP: 189.54.0.0/15
                          IP: 189.60.0.0/14
                          IP: 189.100.0.0/14
                          IP: 189.120.0.0/14
                          IP: 189.126.16.0/20
                          IP: 191.176.0.0/12
                          IP: 200.155.192.0/18
                          IP: 200.160.96.0/20
                          IP: 200.170.0.0/18
                          IP: 200.189.80.0/20
                          IP: 200.218.32.0/19
                          IP: 201.6.0.0/16
                          IP: 201.17.0.0/16
                          IP: 201.21.0.0/16
                          IP: 201.37.0.0/16
                          IP: 201.46.240.0/20
                          IP: 201.52.0.0/15
                          IP: 201.55.224.0/20
                          IP: 201.62.96.0/19
                          IP: 201.74.0.0/15
                          IP: 201.76.16.0/20
                          IP: 201.76.64.0/19
                          IP: 201.77.64.0/20
                          IP: 201.80.0.0/14
                          IP: 201.94.160.0/19
                          IP: 2804:14c::/31
                          IP: 2804:698::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a1:39:04:63:41:c7:e6:f1:71:53:f5:b4:b2:81:12:d0:ec:3d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  9 20:05:10 2025 GMT
            Not After : Jan  8 20:10:10 2026 GMT
        Subject: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2b:45:7c:92:0a:93:37:fe:86:ed:e6:32:60:
                    d1:78:5c:eb:26:2f:28:77:37:f3:c8:ce:39:fb:a6:
                    90:ff:64:97:a6:e8:fb:e1:21:f4:17:fa:fa:85:7d:
                    ed:34:c8:c1:41:30:1a:0e:93:00:dc:72:51:45:00:
                    1b:d9:68:78:49:f9:db:b9:e6:87:7e:ca:6b:91:6b:
                    d5:20:0a:b2:6e:8d:63:c0:51:4f:1a:72:af:ee:70:
                    52:b2:5c:da:f7:ff:ff:88:bc:d6:a3:47:db:f3:4c:
                    58:a0:3b:cb:bc:6c:5c:ae:70:a6:87:08:28:7a:d2:
                    53:55:3a:c5:db:f9:85:89:3a:d6:74:15:97:88:3a:
                    2e:53:49:a6:10:ec:0c:3d:3d:07:29:fc:06:38:de:
                    02:74:b3:a1:70:e0:02:10:57:d4:52:e2:ad:6c:93:
                    e7:d7:1a:83:3b:09:43:62:6e:c0:cd:4c:60:b1:f9:
                    dc:73:22:e6:a2:0e:d8:4f:56:ba:63:6c:25:01:a3:
                    6b:7c:2b:ca:60:ff:d6:6d:28:5b:61:b2:54:58:3d:
                    f8:fe:df:3d:6d:53:c3:fc:fe:89:0a:bb:ae:ff:43:
                    f5:c2:8a:d4:de:7a:74:11:60:14:23:1c:1d:c4:20:
                    55:fc:43:71:3f:25:fb:32:11:a0:36:19:9b:8b:0f:
                    7f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.32.0.0/14
                  177.64.0.0/15
                  177.80.0.0/14
                  177.100.0.0/16
                  177.127.0.0/16
                  177.140.0.0/14
                  177.180.0.0/14
                  177.192.0.0/14
                  177.235.0.0/16
                  179.105.0.0/16
                  179.136.0.0/13
                  179.152.0.0/13
                  179.208.0.0/12
                  179.232.0.0/14
                  181.213.0.0/16
                  181.216.0.0/13
                  186.204.0.0/14
                  186.218.0.0/16
                  186.220.0.0/14
                  187.2.0.0/15
                  187.20.0.0/14
                  187.36.0.0/14
                  187.64.0.0/14
                  187.104.0.0/14
                  187.122.0.0/15
                  187.180.0.0/14
                  187.255.0.0/16
                  189.4.0.0/14
                  189.14.128.0/18
                  189.29.0.0/16
                  189.32.0.0/14
                  189.39.144.0/20
                  189.51.176.0/20
                  189.54.0.0/15
                  189.60.0.0/14
                  189.100.0.0/14
                  189.120.0.0/14
                  189.126.16.0/20
                  191.176.0.0/12
                  200.155.192.0/18
                  200.160.96.0/20
                  200.170.0.0/18
                  200.189.80.0/20
                  200.218.32.0/19
                  201.6.0.0/16
                  201.17.0.0/16
                  201.21.0.0/16
                  201.37.0.0/16
                  201.46.240.0/20
                  201.52.0.0/15
                  201.55.224.0/20
                  201.62.96.0/19
                  201.74.0.0/15
                  201.76.16.0/20
                  201.76.64.0/19
                  201.77.64.0/20
                  201.80.0.0/14
                  201.94.160.0/19
                IPv6:
                  2804:14c::/31
                  2804:698::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28351
                  28573

    Signature Algorithm: sha256WithRSAEncryption
         32:d0:75:36:fa:fd:40:a7:d1:c8:6b:a5:ed:04:0e:8f:31:c4:
         97:cf:af:cd:b1:1a:25:3c:ca:1e:3a:0b:5a:aa:dd:0f:b7:bc:
         8e:30:cb:df:94:03:a8:f2:86:c8:bd:56:0d:fa:df:63:3f:63:
         65:d4:28:01:89:42:c5:56:59:ed:ab:e2:fe:b0:a3:aa:fa:63:
         97:ed:f4:b8:6d:97:f9:b1:60:b2:d3:84:6e:4f:be:5c:5c:af:
         c8:ef:c8:5a:a8:4d:67:b1:fa:7d:b0:5e:e3:ca:a7:47:b4:6a:
         7b:c7:2b:ae:97:4b:72:27:6d:2a:50:1c:c4:5f:48:a0:9b:ef:
         30:6e:bc:df:09:a0:fb:9e:51:84:62:5a:12:c9:85:ca:25:05:
         18:6c:f3:78:0d:55:f2:cf:18:d8:e2:b3:bb:e4:91:b4:ab:a1:
         3d:4a:87:07:4d:0b:3d:9d:df:d6:e1:88:f2:c2:a0:91:0f:83:
         19:e6:d2:93:e2:9b:09:c8:28:51:80:86:da:99:a0:62:a5:68:
         f3:6f:4f:29:de:a6:b1:5e:48:ad:48:99:80:c3:a9:44:1d:48:
         be:fc:6f:9f:d6:89:a7:61:ec:0e:ba:d1:f9:d1:79:f6:21:fa:
         fa:38:e3:97:b9:1b:35:f0:d1:d4:de:b8:05:79:24:55:d6:de:
         4a:93:0f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:59:30 2025 by rpki-client