Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/515E4F86EF96B558933F09E30E96D3B5DFC5CB59.cer
File:                     515E4F86EF96B558933F09E30E96D3B5DFC5CB59.cer (raw, json)
Hash identifier:          NOMU51Z3oC5NP72l/qYMUB3oP+sHCmNzcOUPbcyd7E0=
Subject key identifier:   51:5E:4F:86:EF:96:B5:58:93:3F:09:E3:0E:96:D3:B5:DF:C5:CB:59
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7C925652AB00175776921C4478EE415E3A10EE0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/515E4F86EF96B558933F09E30E96D3B5DFC5CB59.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 31 Oct 2025 18:17:28 +0000
Certificate not after:    Fri 30 Oct 2026 18:22:28 +0000
Subordinate resources:    AS: 264402
                          IP: 131.161.68.0/22
                          IP: 2804:1dec::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:92:56:52:ab:00:17:57:76:92:1c:44:78:ee:41:5e:3a:10:ee:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 31 18:17:28 2025 GMT
            Not After : Oct 30 18:22:28 2026 GMT
        Subject: CN=515E4F86EF96B558933F09E30E96D3B5DFC5CB59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:72:c1:6e:c1:be:69:ff:58:d7:ec:ee:22:
                    21:b7:69:dc:60:11:1e:b7:b2:7e:28:49:d9:2a:50:
                    c8:6c:cd:b0:e0:f5:24:df:96:98:eb:c6:74:e5:a4:
                    c2:14:c5:2a:03:ed:62:98:b1:82:82:f2:a5:73:dc:
                    34:78:6b:06:90:92:96:e1:7e:d0:d9:37:23:37:08:
                    67:0c:70:de:d0:df:a4:4f:2b:2f:51:62:53:7a:54:
                    12:b6:3b:91:1d:0a:8c:8b:f2:1e:aa:d1:da:7b:6c:
                    e5:71:7f:fa:45:2b:f1:8f:bc:25:aa:66:3c:82:be:
                    a1:86:72:43:be:41:91:a0:86:a9:1b:94:b1:21:ec:
                    63:19:3d:56:4f:65:c0:f7:2d:3c:95:f6:6e:4f:7f:
                    fa:49:7b:0d:c7:d4:f1:c0:5d:d7:11:57:df:f9:e9:
                    b7:84:3b:90:5f:dd:91:80:b2:b5:09:84:38:da:8a:
                    cf:00:43:69:8b:d6:69:82:c4:94:7d:4b:1d:ca:4e:
                    86:3f:62:e7:24:2a:18:73:7b:aa:e9:67:93:08:e9:
                    7d:61:9e:c1:5a:5d:4c:7d:6f:47:52:8a:57:19:09:
                    ff:1f:36:b4:53:29:8b:c5:fd:72:f6:cb:bd:2e:59:
                    46:a8:b4:e7:a2:44:bc:96:88:1d:c9:19:77:aa:35:
                    b7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:5E:4F:86:EF:96:B5:58:93:3F:09:E3:0E:96:D3:B5:DF:C5:CB:59
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/515E4F86EF96B558933F09E30E96D3B5DFC5CB59.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.68.0/22
                IPv6:
                  2804:1dec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264402

    Signature Algorithm: sha256WithRSAEncryption
         68:2c:e3:a5:bc:a8:9d:a0:41:85:2b:39:0d:eb:4d:3a:35:a6:
         29:0a:c6:f5:84:a9:70:df:02:12:b0:21:0b:2f:78:89:4b:c3:
         7c:f6:35:33:e5:8f:3a:4d:b4:35:9b:e1:1d:ba:4a:9a:6b:bb:
         4b:ab:de:bc:d9:65:83:dd:76:b0:40:65:1f:c1:14:98:5f:30:
         e3:55:5b:55:91:56:4d:76:53:7a:48:7b:ad:00:b0:8f:f9:ac:
         65:f3:24:1f:a6:c6:10:ea:91:52:70:60:0b:26:9c:a4:a6:70:
         63:25:a5:23:c8:8e:ca:bc:47:9b:58:3c:d3:f4:a1:84:0b:d6:
         98:01:dd:fd:b3:63:3d:2f:4b:d0:a8:b3:ec:a3:19:3e:a3:6f:
         68:94:29:a2:18:e3:cb:01:ba:c8:fb:d2:b4:73:34:d8:39:c2:
         af:d8:07:97:15:9b:7d:be:f3:41:4e:e4:17:6f:fb:5e:80:0c:
         92:04:22:0a:c1:b1:54:d1:b8:b0:64:20:13:ff:d0:eb:1c:c1:
         fe:51:16:30:79:66:2d:0a:72:e9:de:e7:64:fe:a3:d7:17:bf:
         ce:a6:14:72:fc:aa:f6:d2:b6:15:e9:33:94:31:3c:22:1f:99:
         83:9b:92:91:3a:7a:34:2b:27:66:47:7f:d7:11:b7:ea:50:ab:
         c4:72:f6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:22:55 2025 by rpki-client