Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.cer
File:                     6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.cer (raw, json)
Hash identifier:          3sYgmAQEuGGDiaG8YVdRNio3/zk2UMf0Q/maKxQcPpg=
Subject key identifier:   6D:FF:8D:77:9C:90:7C:4E:2E:AB:49:68:5D:35:DD:3B:D2:C3:7B:85
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3381DABAA3A100B15A966E37C099786050B6F004
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Oct 2025 13:20:48 +0000
Certificate not after:    Tue 27 Oct 2026 13:25:48 +0000
Subordinate resources:    AS: 268439
                          IP: 45.161.12.0/22
                          IP: 2804:513c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:81:da:ba:a3:a1:00:b1:5a:96:6e:37:c0:99:78:60:50:b6:f0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 28 13:20:48 2025 GMT
            Not After : Oct 27 13:25:48 2026 GMT
        Subject: CN=6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:17:e8:06:13:4a:7a:29:43:c5:30:55:3f:88:
                    d9:ba:f9:70:28:02:a3:0f:cb:52:cd:d9:8d:44:84:
                    ee:86:b0:ac:7b:b7:ad:31:95:94:4b:81:9c:c7:94:
                    ac:6e:53:fc:1b:de:28:0e:08:0d:05:25:d6:45:9d:
                    19:95:1d:b6:18:07:ec:52:ab:00:ed:24:25:a2:6e:
                    59:79:df:91:ff:e0:99:d8:bf:bc:64:6b:fb:e4:2e:
                    64:e9:12:18:60:c0:2c:3d:e9:e0:88:88:d1:cc:e9:
                    a7:6f:a3:6f:5f:41:44:cb:1f:0d:ae:38:dc:75:6d:
                    e1:2e:da:6e:c8:61:0d:9b:6b:c1:52:35:f9:c5:09:
                    60:04:6c:a3:77:ef:04:ad:0a:a6:5e:14:38:61:69:
                    b5:93:de:ca:66:6b:17:6e:2e:d2:6f:9e:aa:90:fa:
                    10:5a:14:96:58:08:d8:44:53:0a:cc:99:a0:a6:bc:
                    16:a4:83:0b:3f:c8:54:93:db:2a:66:d3:7c:7e:82:
                    cf:17:db:48:bb:af:35:52:0c:50:bf:df:4c:d1:93:
                    ed:2f:a0:9a:85:c4:dd:82:9d:7a:a1:f6:53:c8:40:
                    44:61:f6:4b:3e:a3:7f:6d:0f:3e:1b:81:84:d5:22:
                    3d:2d:96:7b:8f:1a:d9:be:40:e7:a5:fe:3c:04:7c:
                    f2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                6D:FF:8D:77:9C:90:7C:4E:2E:AB:49:68:5D:35:DD:3B:D2:C3:7B:85
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4f8gC33Zn6pj5ZfTcmXB3ah5jdoELqTU2MHzdvpvXLeX/0/6DFF8D779C907C4E2EAB49685D35DD3BD2C37B85.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.12.0/22
                IPv6:
                  2804:513c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268439

    Signature Algorithm: sha256WithRSAEncryption
         67:e6:61:ce:3e:4a:47:93:84:30:45:96:a9:70:5c:6c:de:71:
         72:5e:da:43:ee:0c:fd:00:a1:b1:b6:95:bb:8f:d9:ea:f0:2c:
         f9:46:dd:b0:71:70:f8:ae:da:84:37:d5:5a:38:96:2c:2b:da:
         45:a4:92:0d:6b:09:68:d7:bf:b8:5a:b8:2a:d8:a9:6e:f6:e3:
         f7:36:f2:63:6e:86:ba:41:74:26:61:5f:9e:f9:4f:a9:35:d9:
         2b:a3:0e:a1:52:bd:52:a7:b1:65:24:c0:66:90:df:9e:20:e0:
         ca:07:13:f7:81:ad:c1:b1:66:e0:19:88:ec:2d:3f:da:cc:5b:
         8e:15:fb:a7:89:12:7d:1a:e2:ad:d7:ad:61:f9:0a:f2:f2:87:
         02:ba:37:0f:f9:62:56:d4:21:b5:60:ba:06:1d:c6:54:db:4a:
         eb:dc:9c:43:2d:fa:2d:14:27:04:49:7c:e3:e2:79:2d:47:58:
         92:a7:36:29:33:c0:f8:eb:1e:8b:99:2c:df:2b:d5:f0:c7:7f:
         a3:5a:89:9a:bb:68:ab:74:4a:44:44:45:18:82:2d:a3:a6:da:
         0c:33:8b:05:e0:f5:0c:e2:96:ac:fb:a3:3b:54:89:d6:9c:96:
         bd:a0:e8:83:e4:5c:cf:94:43:41:a1:d9:bc:97:07:73:64:d8:
         1f:ec:68:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:20:42 2025 by rpki-client