Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.cer
File:                     4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.cer (raw, json)
Hash identifier:          L850cdST0GMUNBwE4QJ7hlsK0+hLycVpCSENs1oMLJQ=
Subject key identifier:   4F:FB:30:F4:AF:6F:87:A3:EC:05:B0:9A:B1:44:6F:0A:D6:F0:D6:1B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0289C9ECE18A9580119DD77621369603E3918779
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HeNEWuDtv1k4Zcj5fho4nJMZCJvjL8RBbf7pCgvu54zi/0/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HeNEWuDtv1k4Zcj5fho4nJMZCJvjL8RBbf7pCgvu54zi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Oct 2025 19:04:07 +0000
Certificate not after:    Tue 13 Oct 2026 19:09:07 +0000
Subordinate resources:    AS: 269273
                          IP: 45.183.68.0/22
                          IP: 2804:6210::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 18:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:89:c9:ec:e1:8a:95:80:11:9d:d7:76:21:36:96:03:e3:91:87:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 14 19:04:07 2025 GMT
            Not After : Oct 13 19:09:07 2026 GMT
        Subject: CN=4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:77:d7:03:d4:88:6f:7a:bd:7f:97:33:1f:62:
                    d5:ec:f4:36:f2:df:88:e2:dd:fd:fe:dd:57:24:56:
                    44:82:d0:19:0d:90:22:d6:b0:04:05:a7:0e:55:75:
                    a6:5a:b1:f7:67:32:20:5f:76:66:e9:68:3a:f9:da:
                    3b:b1:d0:d7:58:3f:d4:77:d1:f9:6e:12:8c:33:1b:
                    c0:3f:2c:a6:d9:1f:04:4b:4e:e0:85:b6:91:de:39:
                    b6:85:2f:9e:c1:38:c8:cb:c4:e7:1a:4f:51:bd:3e:
                    ee:74:a5:ba:9f:9b:90:bc:b9:13:60:67:fb:59:9c:
                    48:ba:89:36:59:0f:79:54:1f:01:a2:00:08:93:33:
                    dd:f9:f4:d3:bc:10:c8:49:e1:6f:34:4e:40:1c:98:
                    5b:55:82:ff:a0:a5:3a:1d:83:77:12:df:ff:f7:ce:
                    12:e1:d2:ad:33:8b:4d:3a:c2:9b:70:66:73:5b:d2:
                    93:64:92:eb:5a:3c:ea:41:5b:b4:57:66:1e:c3:7f:
                    a8:dd:74:20:67:d6:04:27:e1:ec:5c:58:d8:c9:9d:
                    d8:70:d5:f4:83:74:a4:bd:8f:75:8b:53:0f:10:74:
                    55:1c:a4:3e:63:1d:e4:93:b4:9c:3e:94:76:e1:0a:
                    d3:aa:0a:fe:cf:6f:65:c6:6c:ff:9f:0b:43:e2:02:
                    a0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:FB:30:F4:AF:6F:87:A3:EC:05:B0:9A:B1:44:6F:0A:D6:F0:D6:1B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HeNEWuDtv1k4Zcj5fho4nJMZCJvjL8RBbf7pCgvu54zi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HeNEWuDtv1k4Zcj5fho4nJMZCJvjL8RBbf7pCgvu54zi/0/4FFB30F4AF6F87A3EC05B09AB1446F0AD6F0D61B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.68.0/22
                IPv6:
                  2804:6210::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269273

    Signature Algorithm: sha256WithRSAEncryption
         71:73:b3:60:0f:fa:ba:6b:68:22:0a:d6:0a:79:57:db:5a:0a:
         21:41:5b:25:6e:c9:eb:8b:ad:cb:9d:c4:45:70:7e:2e:86:e7:
         e3:c5:28:c9:82:a9:c4:ce:a7:78:33:12:73:41:75:67:c4:ad:
         68:e7:48:ff:26:00:32:b5:c9:d2:40:24:86:90:34:32:e9:45:
         9c:6f:d1:81:ac:8e:82:6f:05:fc:53:9a:1b:e1:5d:fc:83:91:
         82:2b:2d:84:e2:c9:f3:36:1e:7e:65:da:9a:73:20:b4:d0:fc:
         69:97:a8:ab:f1:b2:c5:ed:2b:ab:eb:12:d9:d0:96:c3:2a:53:
         9b:de:46:a0:8e:74:8c:36:52:9e:ce:2f:a0:60:77:54:2a:72:
         4e:45:a5:50:28:ba:e5:4a:f4:a4:63:b7:1d:62:e5:75:39:7a:
         e6:81:6e:87:c2:55:25:33:3a:62:f5:fb:bd:e0:19:6a:d7:96:
         83:13:19:4f:d1:99:e2:02:a3:b2:94:1b:d9:e1:2b:35:04:bd:
         a8:27:43:1b:ae:32:76:6c:7f:b6:5e:c4:c1:59:3f:b8:cb:2a:
         d0:07:08:ba:68:33:91:49:c6:0c:81:cf:31:3e:c8:a2:fd:25:
         ba:6f:7a:b3:45:14:85:ee:8b:6e:ee:f8:28:dc:68:e7:56:bf:
         57:07:37:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:39:18 2025 by rpki-client