Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.cer
File:                     2F06CE8D6B240792E0670AB75AB370A8A63C8F59.cer (raw, json)
Hash identifier:          FGFWqcP9J1aPQTR83wE/p6w1t/ZJsKreo8tZXVxwVGw=
Subject key identifier:   2F:06:CE:8D:6B:24:07:92:E0:67:0A:B7:5A:B3:70:A8:A6:3C:8F:59
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5D0E310BD846579E409A9A45EDBAD49A5FA24009
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Oct 2025 18:03:35 +0000
Certificate not after:    Mon 26 Oct 2026 18:08:35 +0000
Subordinate resources:    AS: 267238
                          IP: 45.232.4.0/22
                          IP: 2804:4a68::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 12:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:0e:31:0b:d8:46:57:9e:40:9a:9a:45:ed:ba:d4:9a:5f:a2:40:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 27 18:03:35 2025 GMT
            Not After : Oct 26 18:08:35 2026 GMT
        Subject: CN=2F06CE8D6B240792E0670AB75AB370A8A63C8F59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9d:ed:f1:0c:9a:79:58:13:30:12:ac:a3:03:
                    38:f7:db:8f:b7:dd:8a:df:44:93:3a:62:1c:19:20:
                    93:57:5e:01:75:dd:af:c3:89:c7:6f:ad:f5:a4:02:
                    9b:76:17:86:16:30:11:b6:b0:13:8c:ff:28:63:bf:
                    21:c3:34:72:e9:e6:c7:22:b9:8c:80:42:58:b3:57:
                    a8:a8:5b:47:69:c3:97:1a:0b:83:dd:c8:6b:27:04:
                    1b:bd:b7:5a:4a:7d:d4:8b:a4:f3:dd:e7:f8:ac:ac:
                    1d:c7:72:51:61:5c:7d:4b:0c:f5:97:c3:2d:7b:1f:
                    b0:69:46:d4:17:dc:24:57:cf:90:19:06:ea:f1:58:
                    db:a1:46:17:33:78:78:ab:77:4f:94:4f:ff:9b:fe:
                    55:21:4a:e0:12:72:af:cb:4f:58:ac:79:7d:60:56:
                    12:44:dd:23:3b:dd:23:81:66:75:dc:fa:97:e9:38:
                    f4:ad:19:8a:73:bc:92:ba:4e:2c:1b:e3:68:2d:81:
                    ec:20:ec:a0:07:47:59:77:6e:28:ac:c1:35:c8:c0:
                    ed:5b:c7:bd:76:1d:63:5b:b0:2f:e1:73:bd:90:33:
                    28:83:91:56:6f:2f:07:f0:35:e2:66:3b:6f:38:a4:
                    13:0d:4b:51:c0:44:6e:a9:79:71:4e:d6:bc:dc:f6:
                    fc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:06:CE:8D:6B:24:07:92:E0:67:0A:B7:5A:B3:70:A8:A6:3C:8F:59
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BEt8xEXunptSHwu4ZWpegqPSRyUo1yMx4oAzwoQdTVm3/0/2F06CE8D6B240792E0670AB75AB370A8A63C8F59.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.4.0/22
                IPv6:
                  2804:4a68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267238

    Signature Algorithm: sha256WithRSAEncryption
         31:77:dc:f6:1c:b2:d1:fa:78:4d:b6:ec:80:ce:13:0b:80:74:
         7f:7f:11:c2:b7:85:e5:f4:bd:35:42:ae:3b:93:14:b2:bb:66:
         4d:f6:9f:73:23:2d:84:17:6a:fd:96:f8:ca:03:33:6f:b8:b2:
         98:a1:1e:95:9e:a1:52:fe:df:e0:e0:cb:80:1f:e5:d6:cd:19:
         a4:dc:26:aa:f0:16:92:e2:34:7e:a5:fd:40:50:31:84:3c:4f:
         1d:b6:4f:00:e1:ef:e1:e6:70:dd:e0:39:1c:cd:51:ed:6b:fa:
         7f:d6:8e:1c:23:b3:66:1a:76:14:e4:ff:9c:e2:7e:76:47:23:
         b9:36:1f:ea:34:93:89:b8:b5:15:dd:c8:76:ba:ae:66:57:93:
         44:a3:e9:b9:34:91:12:05:c1:61:37:10:a1:ca:c7:8d:c6:aa:
         1c:0c:ae:60:77:29:c8:fb:5b:c4:22:d7:0d:6b:04:ed:d3:c8:
         64:74:4c:43:ad:67:a8:11:3d:53:ff:13:5a:e7:f2:af:ce:2a:
         e7:ae:fb:8e:db:49:91:62:8f:ee:53:47:d0:04:41:39:8c:b2:
         19:1c:26:a4:0f:3e:71:38:a3:0f:bb:89:4d:b0:5c:99:53:0d:
         9a:ae:0a:37:7c:f6:27:11:da:95:40:d5:32:7b:e9:a4:36:34:
         db:bb:d6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 11:58:03 2025 by rpki-client