Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2B4531BBC3BC4314E0D0975641CBA82766982CB6.cer
File:                     2B4531BBC3BC4314E0D0975641CBA82766982CB6.cer (raw, json)
Hash identifier:          Slv73vVYLKllzNngM+iOlOmkmabHs+T1vCbIaUv+Rm4=
Subject key identifier:   2B:45:31:BB:C3:BC:43:14:E0:D0:97:56:41:CB:A8:27:66:98:2C:B6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       65D3695CFBE0E8134983761E8534A371D0ED444A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/2B4531BBC3BC4314E0D0975641CBA82766982CB6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Oct 2025 00:36:13 +0000
Certificate not after:    Thu 08 Oct 2026 00:41:13 +0000
Subordinate resources:    AS: 268903
                          IP: 45.175.180.0/22
                          IP: 2804:5c58::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d3:69:5c:fb:e0:e8:13:49:83:76:1e:85:34:a3:71:d0:ed:44:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  9 00:36:13 2025 GMT
            Not After : Oct  8 00:41:13 2026 GMT
        Subject: CN=2B4531BBC3BC4314E0D0975641CBA82766982CB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a9:00:0d:01:ef:bf:ce:bb:52:22:7a:f5:9a:
                    f7:f8:22:9c:3c:95:b5:14:02:bd:7e:d7:40:7e:1b:
                    b9:12:ac:5c:36:5a:b4:67:ab:5d:c8:9a:e1:70:ed:
                    27:5d:60:9e:77:07:86:6a:3d:cc:c8:ac:d9:8c:9f:
                    e8:c4:41:fe:f6:f0:4f:95:13:bf:73:de:5a:27:61:
                    fc:4d:69:f7:3b:29:d5:e1:ad:e8:18:60:34:54:d9:
                    6a:21:7a:52:3f:6b:29:83:40:bb:9a:18:16:e4:c7:
                    1a:43:88:61:29:2c:39:2e:10:44:fe:44:ff:36:19:
                    7e:53:e7:bf:91:54:0e:0d:8f:05:2f:96:94:7b:34:
                    9d:55:84:c9:25:a2:e9:d4:38:44:5e:18:a3:c3:28:
                    7a:4a:a6:c5:57:11:b1:97:d4:5c:07:0c:2e:b3:c5:
                    aa:38:67:33:e0:f4:54:38:fe:ce:65:8e:ee:c9:81:
                    c1:b9:c3:a3:8d:d2:b5:9b:33:9d:f0:29:2b:8f:6e:
                    b8:4e:a4:b3:fc:12:b8:b4:fd:58:ad:27:fe:1f:78:
                    a4:9f:3d:ae:e5:b5:cb:78:4f:27:42:05:99:5e:4c:
                    7b:83:ea:59:43:07:06:38:a7:40:05:83:14:d1:6a:
                    0a:47:92:a7:3c:2f:da:95:75:a4:57:be:f0:27:a6:
                    5f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:45:31:BB:C3:BC:43:14:E0:D0:97:56:41:CB:A8:27:66:98:2C:B6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bad3nK4i3jvPmNFbV3Js5nCtTgbAGrBG1upiTnVaR96y/0/2B4531BBC3BC4314E0D0975641CBA82766982CB6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.180.0/22
                IPv6:
                  2804:5c58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268903

    Signature Algorithm: sha256WithRSAEncryption
         46:8e:d4:c8:95:13:1f:1c:e8:31:72:3c:6a:2b:9b:64:61:52:
         02:45:e9:c1:32:84:c3:df:d7:f4:d8:c6:f5:93:7e:f2:b4:ca:
         90:9c:dc:12:9d:00:22:8c:29:f7:4e:73:ba:88:50:c9:a8:82:
         e8:ce:19:de:72:c2:5f:29:e5:10:f0:a7:f7:99:19:be:f0:54:
         96:97:29:b9:f7:0a:44:4b:c5:4b:b5:cc:98:15:bf:09:9e:a2:
         14:88:38:be:11:19:b7:85:6a:57:e0:57:b5:17:77:57:4b:62:
         0e:95:65:23:42:0f:f5:74:d7:13:81:0c:db:6d:08:c1:21:bc:
         c5:36:dc:bd:e8:61:5e:48:32:8f:c1:cf:0d:2b:de:7c:c6:aa:
         f6:a8:21:98:f0:ea:13:51:c6:76:7b:a9:3f:40:72:d3:43:80:
         03:28:3a:b5:39:47:c0:d1:c1:02:3e:8b:01:f3:84:77:e0:a1:
         c5:c4:60:7f:8c:ab:92:27:ff:6e:3a:6e:22:a8:aa:b1:35:e2:
         0f:41:45:d4:91:76:c4:19:ad:25:99:b9:90:0b:59:5a:8b:b2:
         9f:08:bd:61:78:d8:07:59:ca:c9:72:20:08:32:8f:4f:af:80:
         97:a8:f7:03:5e:32:06:0f:c9:54:dc:38:64:20:cd:82:71:ad:
         02:78:8f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:10:07 2025 by rpki-client