Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/659E92F5914C997CC52D83DD0F162368DAC18EA2.cer
File:                     659E92F5914C997CC52D83DD0F162368DAC18EA2.cer (raw, json)
Hash identifier:          2p1ED2mzPySAOaibeKT0X1s/ruRIwMwX+xsYrXeVUM0=
Subject key identifier:   65:9E:92:F5:91:4C:99:7C:C5:2D:83:DD:0F:16:23:68:DA:C1:8E:A2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       632FBD137BE601E4BDCF16D1775F8298F8A600AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Oct 2025 00:09:25 +0000
Certificate not after:    Wed 21 Oct 2026 00:14:25 +0000
Subordinate resources:    AS: 268914
                          IP: 45.174.4.0/22
                          IP: 2804:5c88::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 00:09:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2f:bd:13:7b:e6:01:e4:bd:cf:16:d1:77:5f:82:98:f8:a6:00:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 22 00:09:25 2025 GMT
            Not After : Oct 21 00:14:25 2026 GMT
        Subject: CN=659E92F5914C997CC52D83DD0F162368DAC18EA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c9:ff:9f:6c:c6:8d:d8:ad:f4:8e:37:d6:24:
                    43:e9:58:7f:9e:0f:23:53:93:b6:43:cf:31:9d:5d:
                    85:c6:c9:19:60:f7:3a:04:dd:fe:7d:d2:ae:f9:1e:
                    37:b9:38:14:d8:51:59:71:68:09:20:0f:b6:3b:cb:
                    3e:da:e4:2f:ab:1f:49:72:49:f9:84:d9:0a:0c:96:
                    42:f4:a5:31:ad:4d:7b:e5:7c:f8:f0:75:90:87:6d:
                    4a:df:56:43:03:be:d7:65:1a:71:fe:f2:1e:e1:e5:
                    5b:2f:02:78:f3:78:e1:2b:53:92:67:09:3a:1a:cb:
                    6f:a2:06:ed:14:38:ff:c6:d0:80:31:40:77:41:07:
                    fe:eb:09:8b:17:58:54:95:97:cb:4a:6f:11:7a:22:
                    32:99:32:69:29:57:74:16:79:82:3e:f1:46:45:ef:
                    67:0d:00:bc:26:f1:15:1f:3a:dc:d9:96:dd:aa:ce:
                    c8:f8:79:57:ce:9b:16:cc:e1:a4:79:01:67:75:25:
                    d8:37:08:90:82:98:48:74:f3:2a:0d:b6:eb:45:7b:
                    c6:b1:9c:81:b5:ed:9f:25:42:8e:e7:4b:cb:98:ad:
                    04:9f:6b:55:d1:15:f2:f9:35:40:e6:08:0c:8d:2c:
                    28:9f:eb:5c:d8:c6:f5:59:ed:1e:b3:93:bc:7e:f3:
                    d8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:9E:92:F5:91:4C:99:7C:C5:2D:83:DD:0F:16:23:68:DA:C1:8E:A2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/62pERL7Kke964WpvWhB66Gas5by2VNCEC9uAUNZQxdt9/0/659E92F5914C997CC52D83DD0F162368DAC18EA2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.4.0/22
                IPv6:
                  2804:5c88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268914

    Signature Algorithm: sha256WithRSAEncryption
         04:3d:68:47:d4:ba:35:6d:e8:46:a2:8e:82:d8:74:19:bb:5b:
         17:e8:fe:db:fd:cd:c3:2b:e5:71:9e:99:b4:de:d8:d9:99:6c:
         72:66:7a:fb:93:23:15:63:70:be:5a:69:9b:0c:20:96:85:ae:
         d7:72:99:57:8d:b9:da:4a:ce:b2:ad:d1:38:21:87:14:6a:92:
         1b:e7:c4:d3:c5:e5:17:3f:16:c5:fa:51:a0:c0:23:0b:db:32:
         89:2a:f8:e7:6d:33:ae:93:6c:54:3f:c3:0a:c8:d9:51:e6:a8:
         04:51:be:36:72:4c:ff:4a:d2:5e:8e:c5:a3:85:5a:c2:ea:71:
         f8:96:ca:07:95:d6:2b:33:a0:fb:5b:fe:f9:9f:65:71:b4:ae:
         f5:e3:87:3b:a4:10:2c:bc:91:65:c4:d5:95:82:6d:fd:63:ec:
         ff:8a:bb:cd:bb:ff:38:68:e0:e5:1f:76:b5:93:fc:05:10:04:
         17:ff:a0:57:c7:6f:07:51:a8:c7:b1:2d:8c:0a:1d:67:37:5c:
         4c:ab:b6:14:4f:61:03:45:20:a1:c7:6c:64:f9:78:66:36:e7:
         b2:89:48:ad:ac:79:76:c8:b8:54:de:67:c6:fc:c6:3a:5d:60:
         d4:75:35:84:91:3b:20:58:09:3c:72:78:a2:b4:3e:69:e4:e5:
         9c:ce:06:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 23:04:06 2025 by rpki-client