Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer
File:                     CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.cer (raw, json)
Hash identifier:          lFa3LqYXcVSOIbKsG6hdIGSY6q8Hp44z+0/1UiLXskM=
Subject key identifier:   CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       77A7571A6FD4BF443E43E22FD1B482B75EFE96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 04:12:45 +0000
Certificate not after:    Thu 05 Mar 2026 04:17:45 +0000
Subordinate resources:    AS: 266410
                          IP: 170.80.80.0/22
                          IP: 2804:3768::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 15:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a7:57:1a:6f:d4:bf:44:3e:43:e2:2f:d1:b4:82:b7:5e:fe:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 04:12:45 2025 GMT
            Not After : Mar  5 04:17:45 2026 GMT
        Subject: CN=CBFE93769DDBFCA704F8360407F55B0D8FA86CC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:82:15:e8:f7:ad:9f:71:2c:56:66:b7:f6:d8:
                    fe:9b:b8:8b:79:4f:5c:fc:1c:68:ac:c5:e5:8e:f5:
                    5a:6e:3b:2e:95:0d:e2:32:f3:c0:60:21:25:bb:a6:
                    25:82:5e:d3:bb:14:e3:7d:12:3d:dd:cd:71:06:17:
                    3d:09:41:3a:16:76:dc:89:65:98:fd:56:f8:09:73:
                    1e:8b:4f:e4:cb:ad:fc:12:fb:f4:e8:94:0b:af:3c:
                    b8:ee:f8:a5:26:a5:3e:c6:9b:95:86:95:7e:d5:20:
                    cc:17:79:43:2c:b9:94:f4:7b:ed:a1:1e:a8:c6:5e:
                    aa:ab:ca:d6:cb:12:2d:6d:72:94:d4:0a:1a:d3:fc:
                    05:f4:ae:1a:1d:07:e2:8f:f2:19:99:54:b9:fa:1c:
                    a4:f3:49:ab:b6:45:06:f6:1f:25:b2:6c:f5:44:d4:
                    0c:48:0e:a4:4d:61:61:2e:c9:c9:87:1b:4e:34:65:
                    93:45:ac:07:95:d5:4f:6b:98:06:85:61:55:b6:3a:
                    d7:71:99:24:6a:87:af:10:00:c6:f8:a6:6e:3c:92:
                    0e:0b:2f:f5:48:9e:a1:ec:e2:6b:76:b4:76:0b:f8:
                    40:9e:82:fe:75:f5:5c:8f:1b:52:5b:f9:f5:88:eb:
                    a3:5e:82:34:31:53:6d:d2:fa:c1:0b:a0:6b:fe:55:
                    3e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:FE:93:76:9D:DB:FC:A7:04:F8:36:04:07:F5:5B:0D:8F:A8:6C:C7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/33RsBNscK5Vj6EG2inx4jLivkQGp87eQh3K9tHegzVne/1/CBFE93769DDBFCA704F8360407F55B0D8FA86CC7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.80.0/22
                IPv6:
                  2804:3768::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266410

    Signature Algorithm: sha256WithRSAEncryption
         58:7a:cb:dc:bc:19:d6:b9:33:12:98:ab:e5:2f:0c:ea:4d:64:
         73:9f:74:c8:29:ac:d2:d6:f2:f7:ca:be:d7:05:7b:3b:41:fa:
         cd:9c:9b:b4:53:57:2a:9b:9b:5b:f3:02:01:95:39:48:37:8f:
         85:0c:51:d9:c1:49:fc:7a:52:61:ee:7e:eb:e3:94:f7:b5:26:
         85:56:10:ee:d1:ce:dc:da:af:3b:c8:a7:2a:27:ef:2f:c5:a7:
         37:9c:6f:c9:da:7b:af:b2:3e:e6:68:a9:26:31:7d:dc:a4:86:
         11:e5:d4:40:83:5a:a0:0e:29:8d:0b:74:7b:9c:30:3b:4d:07:
         51:7f:94:48:4a:ce:43:80:23:df:97:17:cf:dc:0c:56:4d:bf:
         d4:62:53:f8:d3:64:fe:18:9f:3d:b0:2e:c8:b0:2d:98:2b:47:
         10:d7:82:18:b4:5f:78:24:d0:57:50:4a:27:95:92:82:b7:6d:
         f5:94:ac:ed:32:ec:69:d8:df:62:e6:cb:20:47:c9:8b:50:ae:
         b3:7c:43:3f:77:96:8f:bb:02:2f:ef:a8:0d:3b:97:46:87:f6:
         71:dd:5c:fe:d5:f9:64:cb:fd:96:d6:81:44:24:3f:a0:20:08:
         6c:26:73:28:b9:2f:05:09:c3:d4:f3:b4:a4:36:fe:70:05:48:
         08:77:38:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:05 2025 by rpki-client