Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.cer
File:                     D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.cer (raw, json)
Hash identifier:          hD8sqUeo0FNZM3vZhZ/lSfN+1mFImkaF1lhw7h1+meM=
Subject key identifier:   D6:85:4E:FC:5E:F8:C9:3C:EA:3A:87:7B:7B:DC:4B:19:6D:81:81:C0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       491D73E42FB8D7760E80C99CFC961BA958F63658
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 30 Oct 2025 17:31:05 +0000
Certificate not after:    Thu 29 Oct 2026 17:36:05 +0000
Subordinate resources:    AS: 271617
                          IP: 45.162.202.0/23
                          IP: 2804:7e54::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:1d:73:e4:2f:b8:d7:76:0e:80:c9:9c:fc:96:1b:a9:58:f6:36:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 30 17:31:05 2025 GMT
            Not After : Oct 29 17:36:05 2026 GMT
        Subject: CN=D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:01:29:aa:62:21:f7:95:e1:04:85:e0:04:
                    9a:d3:c7:26:5c:45:c8:80:15:b0:d1:2d:44:3e:5b:
                    e6:63:48:a6:73:a6:dc:e8:c9:1a:71:a0:d3:57:4a:
                    64:20:75:c8:5d:6e:a4:a3:94:23:0e:0b:c1:b3:a1:
                    e6:2a:8e:e5:9a:c9:e4:79:69:6f:90:c0:1a:0e:7b:
                    c2:2c:3f:a4:38:9c:18:18:1a:be:d7:bb:e6:7f:e0:
                    80:14:e3:53:ea:3f:82:9e:41:74:70:92:41:7d:00:
                    c5:2e:31:3e:61:ec:39:f2:e2:3f:0f:75:b0:c3:3b:
                    f7:96:9a:5a:49:82:01:14:15:46:73:ce:66:f9:55:
                    cd:89:72:5a:be:c4:a2:2e:fb:d2:4e:c4:22:0a:b8:
                    c3:17:c5:ae:c0:65:dc:ea:57:40:a6:ae:3a:79:87:
                    8e:41:21:37:4a:f2:1f:67:24:a1:77:5e:58:62:ba:
                    6a:eb:ae:be:c0:4d:a9:0a:4e:c6:2e:f8:e2:0d:a2:
                    6b:a7:55:d2:2d:eb:10:08:fd:90:dc:83:21:93:23:
                    a9:36:fa:6c:b3:ab:ba:b6:68:3c:86:fb:26:e7:96:
                    cb:01:75:46:ef:71:55:d5:db:fa:47:24:8e:f0:9e:
                    6a:23:a8:db:5f:0d:8a:74:05:e3:99:9d:5d:5f:64:
                    38:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:85:4E:FC:5E:F8:C9:3C:EA:3A:87:7B:7B:DC:4B:19:6D:81:81:C0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/31nwE4cUS51cDYsqY663bK9cpMQ4sWDXrALAUeeQ9FR3/0/D6854EFC5EF8C93CEA3A877B7BDC4B196D8181C0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.202.0/23
                IPv6:
                  2804:7e54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271617

    Signature Algorithm: sha256WithRSAEncryption
         1f:a5:3d:c1:56:b1:4f:29:ff:e5:ae:5d:fe:5c:ff:bd:9a:51:
         d9:07:1a:b7:2e:b4:44:85:ae:bb:08:34:14:ec:7b:01:f8:33:
         a5:04:7f:b8:4d:c0:c1:ca:e2:0d:1a:e7:a2:a0:73:3a:f9:90:
         90:ae:04:d2:fa:ba:d9:59:87:6e:5f:3b:36:bc:17:33:db:96:
         2d:bb:c6:59:6c:73:b4:71:2c:4a:64:9b:67:24:c6:93:0a:1a:
         b7:e4:fb:ac:e5:d3:7e:ce:1b:a8:06:61:fb:98:41:51:1b:d3:
         43:6e:77:3d:81:08:fd:0e:de:ee:80:f9:ae:ed:5d:ef:ac:19:
         22:c5:5e:7b:9f:3c:62:0b:ef:a7:aa:e4:0a:4c:12:e8:5f:80:
         f6:20:65:39:2d:5c:be:20:3f:c4:39:f1:61:05:37:b5:a7:cf:
         0d:40:c6:d0:10:4a:30:7c:bc:1a:b8:0d:0f:19:0d:44:37:91:
         02:98:83:41:37:46:a1:0e:a3:7a:0e:e1:57:58:f8:92:26:38:
         5b:44:2c:2a:21:00:f6:5f:c8:c9:3d:79:a2:2d:fd:8a:33:ae:
         85:f2:95:36:16:2e:a8:d8:3a:c2:9b:28:39:07:68:0f:48:27:
         eb:cc:92:39:38:e6:b1:38:b9:b8:9d:d1:12:8a:5b:27:f6:6a:
         9b:76:69:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:19:18 2025 by rpki-client