Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/67F27968B2623AE45716B41A7C397D600B3D2686.cer
File:                     67F27968B2623AE45716B41A7C397D600B3D2686.cer (raw, json)
Hash identifier:          sw6xZ/fVGYUluaak3Ph6cu6A/fqGnysG6QfyVEkPoec=
Subject key identifier:   67:F2:79:68:B2:62:3A:E4:57:16:B4:1A:7C:39:7D:60:0B:3D:26:86
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0CB6D74D85020B18ABE3CEE282ECE77749CE8C94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/67F27968B2623AE45716B41A7C397D600B3D2686.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Aug 2025 18:21:01 +0000
Certificate not after:    Wed 26 Aug 2026 18:26:01 +0000
Subordinate resources:    AS: 268078
                          IP: 45.168.176.0/22
                          IP: 2804:57a8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 07:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b6:d7:4d:85:02:0b:18:ab:e3:ce:e2:82:ec:e7:77:49:ce:8c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 27 18:21:01 2025 GMT
            Not After : Aug 26 18:26:01 2026 GMT
        Subject: CN=67F27968B2623AE45716B41A7C397D600B3D2686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:da:fe:43:e2:c0:5e:c9:7a:1d:1c:74:16:f5:
                    83:1e:7d:ac:c5:f1:6f:be:97:84:3a:b3:72:29:e6:
                    ef:e6:8e:b3:b9:82:5d:12:37:00:16:58:a4:5f:03:
                    b0:0e:ac:3c:c7:16:e6:96:bb:18:97:19:85:58:a4:
                    bb:e1:7b:31:0a:4d:8b:d3:cc:5e:97:5c:60:23:43:
                    7c:a2:7a:f5:5d:ff:45:7a:cc:af:35:42:b3:d5:b6:
                    95:05:9c:1b:ff:53:36:06:6e:84:de:47:b1:98:ec:
                    9c:b2:d9:5e:3b:05:45:39:8a:6a:a9:8f:22:47:72:
                    07:ce:4a:7a:65:81:16:8f:28:09:f5:1d:12:c0:7f:
                    c5:f6:a7:0c:12:ed:fe:13:65:9c:b9:4c:eb:64:9d:
                    da:57:26:c3:1a:c0:d3:e3:51:8b:7a:e1:62:c4:06:
                    4a:f3:6f:3b:2c:02:c5:70:d3:56:19:d5:ad:7f:a8:
                    27:1d:31:1b:60:4e:bf:5c:e0:78:70:f9:ee:f0:9f:
                    6a:41:a2:e2:66:b4:72:cc:06:7c:3f:08:c6:b6:62:
                    91:7e:b4:8d:90:2e:d6:34:47:51:9f:5c:2b:d4:99:
                    36:ab:60:bb:b5:5b:89:0b:11:cd:af:88:8e:d2:78:
                    87:43:a3:4e:f7:2a:68:e6:ee:58:53:c7:47:8b:88:
                    82:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:F2:79:68:B2:62:3A:E4:57:16:B4:1A:7C:39:7D:60:0B:3D:26:86
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EapKRF7pu8vofpVWMm2c9Xkuv3Cp221TMNKVEDKLyDXK/0/67F27968B2623AE45716B41A7C397D600B3D2686.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.176.0/22
                IPv6:
                  2804:57a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268078

    Signature Algorithm: sha256WithRSAEncryption
         6b:e9:4d:5f:37:5c:52:36:d9:50:9b:72:58:35:13:98:00:6e:
         57:25:62:bc:20:55:bf:0c:af:00:5c:5e:89:89:f2:1a:48:c4:
         b2:dd:b3:2c:e3:79:d2:c3:cd:be:8d:4e:c8:a8:66:bb:48:90:
         be:d1:f6:d9:ad:a9:14:77:ee:c5:63:98:5e:20:d3:f1:e1:c5:
         5a:e0:22:05:2d:a9:74:57:68:c8:49:81:12:f9:fe:67:24:b7:
         48:87:14:59:47:b3:a1:81:0f:2f:f7:3a:73:06:f9:1b:c8:d0:
         e2:04:ff:25:df:7e:05:ad:ee:e2:b3:77:62:88:6e:2b:8a:76:
         d6:cb:32:fa:b9:09:fa:42:c6:bd:9f:5e:d0:50:4d:f5:b2:a4:
         30:cd:74:89:3f:72:0d:1c:0f:21:9d:1a:cf:cf:dc:59:97:9a:
         57:43:9d:d1:db:9a:01:6f:c7:59:86:d0:6c:cc:d9:1d:42:92:
         df:92:7b:44:ad:cb:54:74:07:b1:a6:ce:a5:c9:0c:2a:89:c8:
         e9:16:09:cb:a7:5e:b3:c3:58:06:8e:10:b7:1b:f1:b4:d2:b4:
         ce:c9:c2:74:5a:e6:d3:fc:90:04:83:77:9b:81:e5:d0:ae:b4:
         9d:d0:40:97:51:c6:04:3e:15:08:69:be:84:43:b9:2e:f5:ce:
         a2:63:59:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 06:23:38 2025 by rpki-client