Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D71B242F0E743C443E8FBA587735676FC26F8546.cer
File:                     D71B242F0E743C443E8FBA587735676FC26F8546.cer (raw, json)
Hash identifier:          Vj4/QunwpvnT+P3r2l6eSAbxbpRJBa9/3QtAug6i9uU=
Subject key identifier:   D7:1B:24:2F:0E:74:3C:44:3E:8F:BA:58:77:35:67:6F:C2:6F:85:46
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       66319793DE84776C830985F7C47774BCFA0789BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cya58ELxTmRUDGHGH5THE7B2dhvA4HgyzoBbNZnFQ522/0/D71B242F0E743C443E8FBA587735676FC26F8546.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cya58ELxTmRUDGHGH5THE7B2dhvA4HgyzoBbNZnFQ522/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Oct 2025 10:56:55 +0000
Certificate not after:    Tue 27 Oct 2026 11:01:55 +0000
Subordinate resources:    AS: 270464
                          IP: 200.81.52.0/22
                          IP: 2804:6c60::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:31:97:93:de:84:77:6c:83:09:85:f7:c4:77:74:bc:fa:07:89:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 28 10:56:55 2025 GMT
            Not After : Oct 27 11:01:55 2026 GMT
        Subject: CN=D71B242F0E743C443E8FBA587735676FC26F8546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:60:28:df:8e:68:ae:7e:01:5d:0e:ed:87:e6:
                    60:af:52:f2:f3:34:00:7b:59:2e:0c:60:f9:8a:ac:
                    32:31:9f:e1:a7:6b:68:ec:92:34:e6:25:ca:89:50:
                    6e:76:c4:0a:7c:54:f0:cc:c3:40:e9:a5:73:ab:4d:
                    e5:2f:4c:3c:f7:f7:4a:1c:9b:4b:a3:41:e9:55:2e:
                    66:79:05:a3:0b:32:ce:93:96:a6:53:e3:67:fb:06:
                    ec:15:5c:8d:65:01:2f:58:99:c2:81:96:32:cd:a7:
                    16:14:41:6c:ae:07:74:e0:f6:11:cc:70:d7:a2:f0:
                    ce:be:0f:4c:1f:28:19:40:40:06:11:ba:a2:45:2b:
                    98:46:c9:57:30:e9:95:04:1c:74:a9:88:0b:09:34:
                    66:ee:a8:df:4d:da:14:3a:9e:fe:77:c0:f5:be:de:
                    e6:ba:98:27:01:89:6f:84:a2:22:98:21:0a:ea:3b:
                    b0:9d:1c:a9:27:81:90:47:6e:de:57:f8:96:12:c8:
                    65:31:35:ba:fa:ad:ff:d7:cd:11:89:18:f0:b3:62:
                    71:1c:72:4c:b0:d0:67:aa:3e:c6:50:da:80:e7:3d:
                    2d:7b:17:06:4f:86:75:3b:55:91:bf:14:1b:89:85:
                    1c:c6:cf:92:52:6a:17:b2:66:d2:bb:08:ac:81:9a:
                    04:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:1B:24:2F:0E:74:3C:44:3E:8F:BA:58:77:35:67:6F:C2:6F:85:46
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cya58ELxTmRUDGHGH5THE7B2dhvA4HgyzoBbNZnFQ522/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cya58ELxTmRUDGHGH5THE7B2dhvA4HgyzoBbNZnFQ522/0/D71B242F0E743C443E8FBA587735676FC26F8546.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.52.0/22
                IPv6:
                  2804:6c60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270464

    Signature Algorithm: sha256WithRSAEncryption
         7c:4a:2e:65:d0:0d:09:b9:4a:2c:96:f7:6b:35:55:95:a4:bc:
         de:bf:3f:88:73:00:29:67:bb:41:14:a5:5c:3d:d7:a2:52:d8:
         04:db:cf:c9:95:b0:4e:40:3d:84:7d:3e:74:c1:cd:0d:43:42:
         45:7d:d9:16:6f:30:1a:f2:52:d7:e3:c9:07:90:d5:94:02:8a:
         4d:8d:89:d6:8e:98:99:49:45:94:10:00:45:8e:33:43:63:68:
         95:99:bf:10:0d:75:9f:9d:4a:e5:68:d1:d9:5d:4d:54:39:91:
         79:48:e3:f0:e7:1d:4e:2c:51:69:17:33:d2:d9:15:42:65:52:
         31:5a:2a:a6:6e:15:58:72:6a:78:2a:81:e1:3a:54:dd:85:33:
         57:5e:86:4a:3c:45:f5:cd:b2:f0:31:4b:28:46:43:fd:8e:b4:
         bc:2e:ce:c6:79:a7:c3:4c:4a:92:fc:4f:06:52:56:2a:d9:1f:
         32:ac:e6:09:ab:1e:82:3b:a4:48:0e:f6:57:c9:01:eb:4c:54:
         42:43:2e:e5:9f:9d:ea:69:58:03:a8:7e:ca:06:49:8e:d9:60:
         69:e0:76:ec:6b:4e:42:ad:45:bb:d4:cd:ae:91:03:55:fe:5a:
         7e:00:0f:c6:7b:d3:bf:b9:31:08:e5:b2:85:7c:c5:2b:98:42:
         59:e0:45:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:27:41 2025 by rpki-client