Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0C11919693AE159458997FCDCB251C3E52E0401A.cer
File:                     0C11919693AE159458997FCDCB251C3E52E0401A.cer (raw, json)
Hash identifier:          uRuyCTri8/3qGN5z9oFdQK+DTRU0mvemnGj6cqkh8Hk=
Subject key identifier:   0C:11:91:96:93:AE:15:94:58:99:7F:CD:CB:25:1C:3E:52:E0:40:1A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       40A3C406EFD4D5072B399649AC675C267DB05E33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/0C11919693AE159458997FCDCB251C3E52E0401A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Oct 2025 17:58:34 +0000
Certificate not after:    Tue 27 Oct 2026 18:03:34 +0000
Subordinate resources:    AS: 266399
                          IP: 170.81.92.0/22
                          IP: 2804:3740::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a3:c4:06:ef:d4:d5:07:2b:39:96:49:ac:67:5c:26:7d:b0:5e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 28 17:58:34 2025 GMT
            Not After : Oct 27 18:03:34 2026 GMT
        Subject: CN=0C11919693AE159458997FCDCB251C3E52E0401A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:96:a1:71:11:ea:b5:5b:ed:31:55:2d:86:
                    42:86:33:fb:7d:f8:a7:5c:41:b0:c5:14:b2:5c:0c:
                    49:a1:7c:33:e1:ab:ef:0a:43:95:fc:24:a5:51:ef:
                    62:05:de:95:94:4f:37:23:77:13:e4:b5:ef:bb:3f:
                    cf:d6:da:dd:e3:d3:bb:21:81:61:f0:b7:da:12:17:
                    62:f9:53:a2:a4:60:ce:1e:dc:b5:53:c8:c5:3d:9e:
                    45:a2:54:61:58:76:1e:e0:df:a3:0c:42:36:aa:f4:
                    78:bf:97:04:ba:ca:7a:ae:c8:7f:e0:13:f2:e5:87:
                    57:b5:74:a2:a4:a3:44:17:6d:03:57:58:0e:8b:cd:
                    15:5e:e8:ba:b2:da:6f:dc:80:3c:cf:c6:86:c9:85:
                    6d:09:4e:aa:4b:fb:27:86:3e:ec:80:f0:2b:7e:2b:
                    66:b9:14:f0:01:6b:1a:fa:c5:38:47:ab:69:8d:39:
                    af:b1:9f:f0:ac:be:51:9b:74:c2:60:8a:64:cb:78:
                    6a:b0:0e:22:1b:01:2c:0f:85:a3:87:18:a0:c0:4e:
                    a5:b4:20:6d:28:c0:2f:5a:b4:ce:44:e4:61:3a:73:
                    09:f0:41:f4:49:78:fd:69:20:d6:84:ae:2e:a0:4b:
                    cf:3e:8d:8c:f7:42:45:8b:b3:4f:84:ed:6a:1d:52:
                    6d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:11:91:96:93:AE:15:94:58:99:7F:CD:CB:25:1C:3E:52:E0:40:1A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BriRY3RUXA11wPQUeJNSx8XcXfwXWTAaWJnsHTfrQdxq/0/0C11919693AE159458997FCDCB251C3E52E0401A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.92.0/22
                IPv6:
                  2804:3740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266399

    Signature Algorithm: sha256WithRSAEncryption
         bb:8f:09:01:4b:fa:f8:35:84:15:5a:74:d2:3a:0e:36:8a:54:
         98:64:aa:db:92:14:25:9c:e4:bc:a7:4f:52:38:99:70:41:1a:
         2c:a5:c4:bb:22:29:75:42:6a:13:e3:64:23:d7:08:df:68:2c:
         f3:05:08:37:04:9e:4d:ec:ce:06:6f:c1:82:56:48:7e:49:3a:
         5c:f6:d6:75:8e:2e:55:60:02:cb:68:9d:ac:8d:72:c0:65:32:
         e8:df:50:f0:43:5a:8f:b0:1a:5d:58:f5:dd:a8:0d:42:e0:47:
         ce:85:9c:ab:a9:7e:6e:5f:71:95:e5:ee:db:6f:2a:f6:05:b4:
         e6:73:12:f9:78:94:d4:9a:62:56:b6:36:fd:37:dd:9e:f7:4b:
         c8:0a:9e:59:2d:74:01:7c:d5:ce:96:85:7c:9f:07:6b:28:aa:
         49:ce:87:9f:96:fc:a9:c3:a9:98:6b:fd:bb:d2:7a:dc:e7:7f:
         d9:50:0e:72:38:44:95:9f:76:a5:11:e2:19:14:ae:09:9a:ba:
         ad:80:b9:d3:fc:3e:6b:5b:29:63:fa:c6:8d:70:ec:25:ef:a5:
         41:a5:01:f2:7e:be:7c:ae:f5:32:a6:bc:e5:fe:b6:1c:e1:7d:
         ab:9b:8d:2c:e7:2d:ef:5c:d4:4a:e2:4d:90:c8:ff:e2:00:60:
         2e:c9:bc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:25:04 2025 by rpki-client