Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/60358884BF0F1C4D3024B709DD5734D538763EEC.cer
File:                     60358884BF0F1C4D3024B709DD5734D538763EEC.cer (raw, json)
Hash identifier:          5P42EvUws1UBaksNEI3prjiv+aVvoaGE+2MaLKNaJGM=
Subject key identifier:   60:35:88:84:BF:0F:1C:4D:30:24:B7:09:DD:57:34:D5:38:76:3E:EC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       049375EC00BB1AB7345B28D054C6DC846BBD8871
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Sep 2025 17:18:36 +0000
Certificate not after:    Mon 28 Sep 2026 17:23:36 +0000
Subordinate resources:    AS: 272510
                          IP: 2804:8248::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:93:75:ec:00:bb:1a:b7:34:5b:28:d0:54:c6:dc:84:6b:bd:88:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 29 17:18:36 2025 GMT
            Not After : Sep 28 17:23:36 2026 GMT
        Subject: CN=60358884BF0F1C4D3024B709DD5734D538763EEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:58:32:88:4a:56:f8:5a:b1:2d:b9:dd:f9:c1:
                    be:1b:b5:14:2c:67:84:ed:09:37:83:08:aa:e3:bb:
                    7c:31:af:aa:ef:c5:96:26:d3:15:66:a3:6e:7a:c3:
                    d6:04:fc:67:69:0e:b5:2c:ee:22:5d:c4:ac:76:94:
                    eb:dd:76:d0:f0:61:63:be:11:84:ec:b6:2f:9e:64:
                    1e:58:e1:b1:08:32:20:80:5a:6c:64:50:54:58:4a:
                    f7:4c:1f:25:44:ca:3d:44:34:de:e8:d5:aa:ca:5a:
                    06:b5:5b:99:07:aa:85:d6:48:24:ef:ab:45:c5:1e:
                    30:ff:9b:44:d1:c6:b1:79:da:de:f4:37:5d:5e:e2:
                    4e:c4:88:ae:ac:73:7b:a1:58:2a:e5:1d:a3:af:66:
                    9a:01:16:b5:37:bc:b6:08:0d:be:b9:19:01:66:ca:
                    69:62:da:d6:a5:08:85:31:6a:e1:8d:53:0c:b6:da:
                    a7:9d:3f:08:5e:a6:aa:9c:cd:fe:ba:4b:59:dc:09:
                    59:54:05:09:40:6d:0b:b0:3c:d8:1e:45:02:2c:39:
                    fa:aa:2a:4b:97:ad:55:a0:f6:99:66:89:b2:ba:43:
                    3d:5f:d7:88:46:4f:db:bd:af:40:a9:01:f0:a8:11:
                    e5:d7:8c:51:4b:b7:d6:de:23:98:8f:4b:65:eb:80:
                    8a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:35:88:84:BF:0F:1C:4D:30:24:B7:09:DD:57:34:D5:38:76:3E:EC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D9BVF9XcRyWswjMsheUiSL31BSJQFwPUyVSfJTF2c8xM/0/60358884BF0F1C4D3024B709DD5734D538763EEC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8248::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272510

    Signature Algorithm: sha256WithRSAEncryption
         7c:fd:fd:9b:5f:78:b2:3e:76:05:5a:1f:25:8f:8d:5f:9d:b5:
         6f:15:a9:2d:ea:3f:43:af:6d:8b:bd:61:0e:be:2b:d1:05:f3:
         fc:22:10:76:63:74:98:6b:aa:01:0d:7c:7e:e9:26:bd:cc:cb:
         dc:59:35:52:cb:f9:95:6e:ca:bf:bd:9f:88:36:3f:5a:72:3d:
         1a:51:3f:07:82:92:30:02:d3:5d:02:d8:89:27:48:e5:78:ba:
         c5:ee:f1:02:c6:3f:5b:d8:cc:c4:c8:3e:ab:61:70:ad:46:34:
         ae:ff:a7:89:c1:64:b6:e4:d0:b5:3e:ed:b8:12:ad:59:8a:69:
         94:c8:b4:93:c4:cd:1d:91:1b:0a:07:bd:b1:9e:5f:8f:4a:4f:
         d7:c6:2b:1a:88:3f:54:7a:a0:6d:cc:f9:ad:a5:d6:38:5e:4c:
         51:14:57:31:92:b6:28:f1:ab:74:07:01:08:5a:e8:ba:cc:14:
         0f:f5:4f:13:55:0f:2e:17:7a:10:13:24:81:95:b6:54:09:20:
         24:25:14:df:7a:e4:35:f1:ce:8f:c1:07:8b:61:2b:4b:13:74:
         94:82:88:03:33:43:94:7f:3b:0d:b1:31:23:46:bf:71:6f:d1:
         79:30:ee:6a:ed:6e:81:35:64:81:dc:32:ee:c1:a9:d7:e3:03:
         1a:07:92:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:08:21 2025 by rpki-client