Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FE2ED7096D82C455B93F804D0ACF61CDF723EC0B.cer
File:                     FE2ED7096D82C455B93F804D0ACF61CDF723EC0B.cer (raw, json)
Hash identifier:          /NFAgweNirp2aG8iKr29VES43/X1FsqSVE4raV8nwDc=
Subject key identifier:   FE:2E:D7:09:6D:82:C4:55:B9:3F:80:4D:0A:CF:61:CD:F7:23:EC:0B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       28CCD1ECF9CEA04C98BD10C361166FFC9964353E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5dNydveE4y3KFg7xj1DixZMyrGWxUgGZMdojviDMSU43/0/FE2ED7096D82C455B93F804D0ACF61CDF723EC0B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5dNydveE4y3KFg7xj1DixZMyrGWxUgGZMdojviDMSU43/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Nov 2024 13:37:16 +0000
Certificate not after:    Thu 27 Nov 2025 13:42:16 +0000
Subordinate resources:    AS: 61763
                          IP: 201.159.72.0/21
                          IP: 2804:18ec::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 02:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:cc:d1:ec:f9:ce:a0:4c:98:bd:10:c3:61:16:6f:fc:99:64:35:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 28 13:37:16 2024 GMT
            Not After : Nov 27 13:42:16 2025 GMT
        Subject: CN=FE2ED7096D82C455B93F804D0ACF61CDF723EC0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ae:1c:c0:1b:40:52:3e:98:76:75:46:14:61:
                    d6:64:48:09:0f:61:7c:88:a2:d5:28:50:7d:5b:25:
                    53:72:e6:f4:99:7e:9d:82:34:2d:ab:c1:65:a4:22:
                    47:a3:b1:55:96:72:fd:f1:f4:be:17:8f:98:41:f3:
                    a2:be:39:d3:6e:20:6c:5d:76:05:44:68:42:5a:b4:
                    ea:e7:47:07:a7:5e:60:3c:c4:11:94:40:65:1e:b9:
                    07:f3:91:45:db:12:18:6a:91:66:49:d4:44:4a:9b:
                    c6:ae:d6:1d:3c:96:fd:d8:ba:49:8d:b9:c0:0c:38:
                    77:82:de:60:99:af:93:49:22:08:39:53:70:7b:ca:
                    cb:e6:bc:5f:03:dc:ab:d5:be:70:3e:70:db:5a:49:
                    5d:35:e4:c2:90:37:e2:f9:95:7b:a4:65:89:39:8c:
                    a1:a4:dc:56:84:52:46:04:20:b1:19:c8:c3:f6:63:
                    3b:17:15:55:3c:af:d1:18:30:19:8c:8c:85:ba:b6:
                    0e:22:a1:c4:8b:99:c2:01:02:15:e9:06:da:27:53:
                    0c:dd:71:f7:16:3f:21:ef:29:0d:f9:2e:6f:7f:29:
                    83:65:74:8c:98:aa:14:ad:97:da:0b:6c:c2:8a:90:
                    4f:eb:c0:01:ef:20:0a:e4:4d:40:4f:0d:e8:7e:5a:
                    11:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FE:2E:D7:09:6D:82:C4:55:B9:3F:80:4D:0A:CF:61:CD:F7:23:EC:0B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5dNydveE4y3KFg7xj1DixZMyrGWxUgGZMdojviDMSU43/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5dNydveE4y3KFg7xj1DixZMyrGWxUgGZMdojviDMSU43/0/FE2ED7096D82C455B93F804D0ACF61CDF723EC0B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.72.0/21
                IPv6:
                  2804:18ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61763

    Signature Algorithm: sha256WithRSAEncryption
         8d:d2:cc:67:c6:b9:e5:cc:4a:a4:ce:46:dd:f6:df:1c:34:68:
         c3:af:dd:1e:a9:4f:9e:e8:3b:d4:fd:b0:f1:74:f3:36:61:0f:
         3c:95:23:0c:6d:76:84:5f:9a:5d:3b:05:86:ef:3b:5e:d5:e8:
         64:52:b7:0b:ee:5f:fd:66:6e:f2:4a:3d:93:b5:b2:d7:65:59:
         00:80:35:dc:96:07:99:ec:46:41:e6:8d:17:c5:a6:b8:6f:ab:
         2e:92:bc:f9:cf:aa:76:8f:aa:91:50:b6:5f:6d:76:2d:f4:0d:
         64:58:42:a7:0c:7a:9b:09:95:34:e5:45:00:18:fd:c9:fe:6c:
         a7:4a:0a:d7:3b:00:6a:da:54:32:48:16:aa:26:81:be:31:da:
         b6:c4:27:6c:a7:fe:06:c2:35:d7:a8:43:a5:2e:25:60:98:0b:
         ba:78:99:38:a2:3f:33:c3:93:a5:9f:b0:f9:63:30:8d:21:50:
         d9:0d:7a:5c:72:a8:1a:f2:8f:86:84:96:2b:ea:c0:82:87:a1:
         0b:f2:65:7c:b5:14:e3:8c:1b:81:8a:42:56:cf:12:e9:d6:68:
         a5:24:4a:b5:92:5b:e1:c5:7c:b8:a3:49:ba:27:96:68:02:f6:
         b5:00:c4:e4:f7:0f:40:2a:07:67:ab:16:73:67:39:0d:97:49:
         b4:df:c9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:29:55 2025 by rpki-client