Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/070DABECFB42042C93E7CE2E0C16E12287C806B7.cer
File:                     070DABECFB42042C93E7CE2E0C16E12287C806B7.cer (raw, json)
Hash identifier:          PqZ/u1DKGb6f5XF3VpSljT3SUjPgdCNMxEhzQPNWu/0=
Subject key identifier:   07:0D:AB:EC:FB:42:04:2C:93:E7:CE:2E:0C:16:E1:22:87:C8:06:B7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0CF2D010E8E586CE76ABA3F8C93302CB45E8C062
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/0/070DABECFB42042C93E7CE2E0C16E12287C806B7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Oct 2025 19:41:16 +0000
Certificate not after:    Wed 21 Oct 2026 19:46:16 +0000
Subordinate resources:    AS: 61594
                          IP: 45.160.216.0/22
                          IP: 2804:510c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f2:d0:10:e8:e5:86:ce:76:ab:a3:f8:c9:33:02:cb:45:e8:c0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 22 19:41:16 2025 GMT
            Not After : Oct 21 19:46:16 2026 GMT
        Subject: CN=070DABECFB42042C93E7CE2E0C16E12287C806B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2b:6b:8b:da:e8:84:46:65:f7:81:d9:bd:9f:
                    63:cf:26:c0:b1:ef:5d:64:e1:5e:95:49:a4:81:39:
                    ec:cf:78:c0:4a:d8:ca:80:27:f6:87:0a:62:b3:15:
                    41:8c:6b:1d:fb:b5:48:e6:31:a0:c4:c4:75:c7:44:
                    c6:7b:41:4f:4d:20:d9:af:a8:88:17:a4:15:04:89:
                    f0:2c:3a:ac:7c:74:a4:58:ce:9d:4a:02:39:34:48:
                    c7:47:eb:de:46:d6:4e:1a:f0:6e:3a:6a:4c:62:d2:
                    9f:21:04:60:42:ab:92:a1:4d:b0:94:29:dd:19:69:
                    c1:d8:02:d7:f0:2a:dc:46:41:d4:a8:89:ee:c1:56:
                    37:3a:4a:04:80:f6:47:01:04:51:3c:e4:fc:7e:d0:
                    3b:0f:fa:dd:f9:42:1e:e8:1d:ef:16:5b:12:9d:a1:
                    24:92:52:3c:f3:be:59:b8:03:1c:6f:cc:26:b6:9e:
                    04:98:15:29:a2:dd:73:c8:d3:44:11:70:ea:99:10:
                    7a:fa:f8:69:3e:5f:94:9a:d7:c5:26:3a:e9:a4:86:
                    10:52:9d:c7:b5:9e:5c:bb:9a:b6:80:84:b6:cf:87:
                    82:97:c8:a1:1f:fe:7e:b4:53:d3:14:0e:45:c6:94:
                    5a:d4:45:f6:38:1e:e7:43:ba:5d:bd:81:c6:51:57:
                    e1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                07:0D:AB:EC:FB:42:04:2C:93:E7:CE:2E:0C:16:E1:22:87:C8:06:B7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8tYofYtqSAiCtdqz7MDAigJF6AieTbiUsW2ztDyPtV91/0/070DABECFB42042C93E7CE2E0C16E12287C806B7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.216.0/22
                IPv6:
                  2804:510c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61594

    Signature Algorithm: sha256WithRSAEncryption
         1d:25:32:47:32:24:d7:57:d1:32:27:41:c1:4a:cf:32:45:e5:
         d4:79:b4:19:e0:70:c0:d5:a0:1f:b8:2b:43:3e:d5:1c:21:70:
         6a:78:34:9c:75:a2:8f:4d:30:65:e0:e1:30:d7:cb:12:1b:0b:
         3f:42:49:81:5f:b3:ce:8f:dd:44:7e:79:b7:89:bb:96:9d:54:
         c1:97:4b:25:fc:dc:a9:84:37:6e:ea:22:85:10:12:4f:2f:41:
         d4:80:31:70:f2:0c:83:e4:01:75:e5:51:f3:87:ba:16:3e:be:
         8c:00:2a:f2:99:f4:bb:f6:eb:16:2e:a2:5b:06:ec:20:8e:f6:
         c5:19:c7:f6:be:56:1c:32:2e:12:a7:8e:9d:d2:5f:7d:59:8c:
         65:56:36:4d:af:c8:b2:97:c7:2a:95:9d:70:38:e6:52:9d:ea:
         60:68:ee:77:7c:7b:f0:bd:a1:ac:d1:0e:18:76:86:32:18:5b:
         13:20:02:99:87:4f:dc:e4:15:2f:7c:04:c6:a1:20:b6:8d:cd:
         f6:16:17:d7:9c:59:89:fa:a5:be:08:49:55:0d:8e:4c:53:fe:
         6f:7b:2b:a6:7c:1f:83:56:a3:ad:28:01:38:35:80:91:e7:60:
         19:8e:f0:df:4e:a9:c9:d8:d8:46:a6:5f:4c:98:8f:57:2f:71:
         1f:39:5c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:21:01 2025 by rpki-client