Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2B02C5E01B8D20D8650057563E069CD85110D041.cer
File:                     2B02C5E01B8D20D8650057563E069CD85110D041.cer (raw, json)
Hash identifier:          yzlqS3xKSAH9zUioI02GhjqHdKyY0YxLouOUuDPSdok=
Subject key identifier:   2B:02:C5:E0:1B:8D:20:D8:65:00:57:56:3E:06:9C:D8:51:10:D0:41
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0B0B05EDD457BE77FFBD1A91EFDD5EE838A20FE6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8SHMmdWSmKcuybksu3ErYWNvQbbq5KJpqsa9iAADH7La/0/2B02C5E01B8D20D8650057563E069CD85110D041.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8SHMmdWSmKcuybksu3ErYWNvQbbq5KJpqsa9iAADH7La/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Oct 2025 17:44:15 +0000
Certificate not after:    Mon 26 Oct 2026 17:49:15 +0000
Subordinate resources:    AS: 267979
                          IP: 45.166.168.0/22
                          IP: 2804:5624::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 11:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:0b:05:ed:d4:57:be:77:ff:bd:1a:91:ef:dd:5e:e8:38:a2:0f:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 27 17:44:15 2025 GMT
            Not After : Oct 26 17:49:15 2026 GMT
        Subject: CN=2B02C5E01B8D20D8650057563E069CD85110D041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:28:63:90:bd:17:bc:f1:7f:33:65:ab:e5:4d:
                    13:d5:d1:5f:14:51:5a:9a:f9:82:f9:2d:35:8b:6c:
                    87:c9:4f:1a:67:6f:1f:d6:5e:f5:8c:85:52:f0:0a:
                    d1:15:49:d5:a6:52:3c:e1:74:69:e3:68:e4:6e:a1:
                    c3:bf:56:b2:e0:71:99:27:60:0c:00:ec:78:9e:b1:
                    64:3e:de:82:9b:fa:9c:4e:a4:ad:7f:81:34:01:18:
                    b1:94:47:1c:c1:a2:69:11:4c:be:b2:d9:8f:16:e5:
                    47:78:d5:9e:17:bd:cc:62:40:28:a3:04:06:cc:07:
                    05:8e:64:c6:66:bf:07:8a:0f:a2:09:ef:7c:b5:13:
                    9c:2c:d0:9d:c0:50:90:a3:2c:15:f8:d0:11:7f:f4:
                    cd:d6:1c:f8:1c:7f:44:ad:7d:d8:9c:d8:31:96:96:
                    e5:61:e6:41:01:ed:cf:b7:7e:42:06:82:07:4c:9f:
                    77:1f:52:98:9d:b1:03:9d:e0:c1:a2:31:c8:1e:0e:
                    5b:36:2b:81:c4:3b:05:20:ff:97:5e:b6:19:cb:3f:
                    52:7c:ab:b3:a4:fc:86:25:4c:7d:f2:ad:4f:6a:71:
                    ed:1e:d0:02:97:ef:55:b8:fb:e3:2f:9e:10:67:48:
                    69:5e:b5:73:3b:85:92:01:cc:c9:bb:9f:57:25:87:
                    93:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:02:C5:E0:1B:8D:20:D8:65:00:57:56:3E:06:9C:D8:51:10:D0:41
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8SHMmdWSmKcuybksu3ErYWNvQbbq5KJpqsa9iAADH7La/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8SHMmdWSmKcuybksu3ErYWNvQbbq5KJpqsa9iAADH7La/0/2B02C5E01B8D20D8650057563E069CD85110D041.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.168.0/22
                IPv6:
                  2804:5624::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267979

    Signature Algorithm: sha256WithRSAEncryption
         13:f6:d2:15:c8:9d:eb:bb:8a:95:ac:f0:f6:90:ff:ea:7c:52:
         01:09:14:64:c1:1c:bf:76:cf:3a:d7:c2:41:8c:93:3d:c3:59:
         ad:5f:55:25:cb:9d:89:32:dc:b3:e7:ab:ea:04:6a:cc:6f:b0:
         d9:6d:f3:82:4f:94:3f:da:96:61:54:aa:39:8c:fb:26:e5:60:
         ab:0e:3d:7f:76:0c:7a:d7:18:2c:0e:4e:23:b2:39:42:5c:4b:
         e3:20:83:0d:55:36:7f:9e:cc:81:7e:92:53:c8:6a:6e:c9:59:
         87:59:a6:d3:6c:51:34:02:01:04:39:31:7c:8d:b1:1f:69:64:
         5e:c4:f4:9c:7b:41:7b:6a:46:a7:45:8a:da:1c:f5:fd:3a:26:
         f8:eb:01:4a:4c:f7:9b:bc:7a:f9:11:44:1c:7a:61:63:b8:5c:
         d1:2b:2f:6b:9e:d8:97:82:8f:11:27:1a:44:f1:3a:86:f3:38:
         74:52:8c:21:59:de:33:c7:56:f1:aa:41:4d:f4:26:6d:6f:48:
         d3:0c:9a:7c:91:53:10:6f:eb:db:b1:63:22:3a:3b:12:7f:59:
         bc:b5:4a:f1:29:63:84:06:b3:e5:33:99:08:01:0f:8c:fa:73:
         1d:b9:16:ce:30:0c:87:84:d3:e1:62:41:df:b0:8a:88:6f:ef:
         37:5e:56:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 11:57:18 2025 by rpki-client