Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
File:                     FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer (raw, json)
Hash identifier:          wK5JIy1Gq/hwoAgyNeSWQm77IdnnLMLRc0tgUdBFGb8=
Subject key identifier:   FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1FA3880372E138D71616040597612B838E504A2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 09:06:35 +0000
Certificate not after:    Fri 06 Mar 2026 09:11:35 +0000
Subordinate resources:    AS: 61805
                          IP: 45.239.224.0/22
                          IP: 131.161.156.0/22
                          IP: 170.246.32.0/22
                          IP: 170.247.80.0/22
                          IP: 200.229.156.0/22
                          IP: 2804:1998::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 07:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a3:88:03:72:e1:38:d7:16:16:04:05:97:61:2b:83:8e:50:4a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 09:06:35 2025 GMT
            Not After : Mar  6 09:11:35 2026 GMT
        Subject: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1d:e7:4d:c4:37:cb:99:34:1f:54:2d:99:b2:
                    4c:d2:9c:dd:3c:92:99:ac:1e:e3:67:1f:ab:fa:d5:
                    d9:2e:b1:91:cb:69:7a:a9:aa:10:4e:61:6f:e6:38:
                    76:54:d8:54:fd:9e:ae:1c:77:07:76:ed:c1:ec:a6:
                    3c:b7:f6:c4:fb:b4:a7:af:8e:fe:2d:82:7d:fc:19:
                    12:9d:90:fe:e2:e2:03:22:c3:60:e9:d6:a3:68:5f:
                    96:f4:9a:4e:06:11:e1:a5:df:27:36:86:ae:bc:f5:
                    0d:fe:9f:3d:f4:58:40:89:2a:39:7b:79:c9:f2:7e:
                    b5:eb:20:19:b0:87:cd:4a:40:98:bd:ec:7c:a9:65:
                    69:56:f9:ec:5c:87:02:64:b7:d2:9e:a0:42:40:83:
                    71:a2:49:2b:55:a4:8d:b6:f0:e7:d6:ee:79:4a:f5:
                    5c:5a:47:6a:34:53:b0:47:5a:54:24:9d:4e:0f:92:
                    82:2e:fc:27:e8:09:69:a8:dd:2f:8e:1e:6d:55:44:
                    5e:b6:ce:93:50:17:4f:bc:b9:6d:0e:a5:88:68:03:
                    3f:b9:06:7a:eb:26:e5:6a:4d:3c:b7:22:6b:3a:21:
                    e9:8e:3e:48:f5:ca:07:bf:bd:af:a5:93:4d:d4:42:
                    36:ba:3d:50:50:cc:9c:fe:9d:84:40:81:34:ad:38:
                    a7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.224.0/22
                  131.161.156.0/22
                  170.246.32.0/22
                  170.247.80.0/22
                  200.229.156.0/22
                IPv6:
                  2804:1998::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61805

    Signature Algorithm: sha256WithRSAEncryption
         0c:9d:98:09:79:b4:8c:c3:5d:0e:d2:dd:1f:48:ce:69:c2:86:
         a4:49:1f:ec:e9:8a:f7:e5:00:c9:a2:86:b1:7f:e5:39:85:d4:
         66:58:d7:45:27:3f:06:4c:8f:fb:4c:88:7d:66:d9:c0:dd:00:
         9f:57:b8:c2:d5:99:a9:c9:3b:0f:7a:d9:62:be:4f:64:b5:7a:
         85:54:a6:67:94:74:8d:cf:16:4a:48:5b:46:19:cd:2c:06:59:
         f5:2f:20:89:b3:7a:f7:b0:14:18:f8:a6:ff:43:22:74:75:9b:
         40:a3:f4:0b:b9:43:7e:b3:4e:22:97:c8:a2:95:b6:d5:f3:ec:
         0f:a6:55:7a:29:0a:23:16:8f:5f:10:ed:70:23:e2:e8:de:6a:
         6f:d3:04:15:a5:ba:2e:db:1e:3b:43:d5:03:9c:cc:40:96:97:
         ea:dc:a6:ca:80:40:a6:d4:65:41:56:6a:cb:31:06:dd:2f:a5:
         83:bb:c5:2c:29:ee:ea:ae:5f:25:90:e2:3a:c9:3f:6d:af:a4:
         7f:9c:a2:28:ab:71:38:21:a2:c2:71:61:c1:5f:da:8d:9f:b8:
         3c:18:3f:3d:da:16:8d:e2:0b:c4:af:15:be:86:05:dd:23:e3:
         a7:97:6f:06:af:73:ba:05:c7:d6:56:ff:75:50:41:45:72:66:
         b7:6b:9a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:37:20 2025 by rpki-client