Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/71238E97CC73F492E8BD23DB6B3EA12536850E88.cer
File:                     71238E97CC73F492E8BD23DB6B3EA12536850E88.cer (raw, json)
Hash identifier:          S5z5OyesUH2TadoGVkzkYW93zwCBfyRve8X77O8pzrM=
Subject key identifier:   71:23:8E:97:CC:73:F4:92:E8:BD:23:DB:6B:3E:A1:25:36:85:0E:88
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       25AA009654003E395CDFF7993A390B2C4D4EF043
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Oct 2025 03:34:45 +0000
Certificate not after:    Wed 07 Oct 2026 03:39:45 +0000
Subordinate resources:    AS: 267155
                          IP: 45.229.144.0/22
                          IP: 2804:48f4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:aa:00:96:54:00:3e:39:5c:df:f7:99:3a:39:0b:2c:4d:4e:f0:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  8 03:34:45 2025 GMT
            Not After : Oct  7 03:39:45 2026 GMT
        Subject: CN=71238E97CC73F492E8BD23DB6B3EA12536850E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9b:a5:9e:20:d4:29:85:8e:81:a9:05:7b:a1:
                    9a:e8:4e:cf:8b:d6:8c:b5:bf:98:ef:de:51:4e:da:
                    de:26:d8:0c:84:4f:30:bf:80:d4:a7:17:a6:e8:62:
                    a4:fe:34:a7:b2:cd:2b:a8:11:31:b8:f8:e1:42:e6:
                    d0:ce:6b:8d:a8:cc:ee:d8:1a:87:a0:33:fb:03:15:
                    8d:80:80:e7:62:2c:9e:e7:77:79:e2:9b:d7:80:ff:
                    f7:c7:e1:c5:e1:fc:23:57:ec:f4:69:e3:e0:74:dc:
                    61:c6:31:f6:13:ea:09:e2:67:ad:4c:30:68:c5:2b:
                    b9:80:e2:6e:31:d3:5c:96:2e:41:28:8e:be:87:ad:
                    36:86:86:90:fd:2e:b4:4f:72:5f:12:eb:1e:d4:85:
                    31:4d:82:b8:30:52:d2:9e:18:19:c9:ba:b3:57:ca:
                    73:d9:06:89:8d:08:fe:fb:8a:54:f2:71:59:e7:6a:
                    88:09:86:2f:6f:f3:21:28:68:32:e9:fd:64:19:c6:
                    68:b0:86:65:4e:48:be:8d:da:30:c2:91:a2:c1:7b:
                    50:cb:98:43:01:33:bc:e4:d9:1e:c3:15:4d:25:3b:
                    ae:4c:e0:f1:9e:8c:5e:45:19:bb:6e:a8:35:7e:27:
                    41:3f:b9:21:e9:45:b5:7c:c4:a8:f7:47:2b:90:a1:
                    54:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:23:8E:97:CC:73:F4:92:E8:BD:23:DB:6B:3E:A1:25:36:85:0E:88
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/0/71238E97CC73F492E8BD23DB6B3EA12536850E88.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.144.0/22
                IPv6:
                  2804:48f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267155

    Signature Algorithm: sha256WithRSAEncryption
         24:7d:b7:75:ee:04:f1:03:68:4e:d8:a2:c7:57:93:55:ee:d7:
         ce:9d:f8:3b:e2:cd:2a:2b:8b:05:6d:8b:f3:eb:5c:2f:ea:a6:
         aa:07:c8:09:29:35:ca:3e:9f:f6:a8:e1:b7:99:c1:f4:e7:52:
         e7:79:26:25:81:3e:a5:20:01:aa:d0:fb:b9:68:b7:e8:ad:60:
         fe:eb:53:5c:9e:45:8e:b5:51:01:25:a2:3f:4a:e3:69:83:92:
         47:cf:75:5a:38:fc:05:80:15:5a:db:d5:f5:98:65:63:6d:e4:
         67:e3:37:e2:97:37:e1:7f:c9:cf:81:90:b0:fa:99:2a:22:f5:
         6b:01:78:f8:de:96:6d:82:18:03:a7:6c:0f:d6:2e:78:9c:c4:
         0f:5f:e8:17:fc:cf:af:6c:dc:b5:c9:44:b7:f9:1f:f1:a7:2d:
         fc:3b:dc:6a:c7:88:c9:54:13:d2:14:4b:c8:e1:7f:76:49:91:
         27:de:8b:5f:8d:4f:69:24:52:07:dd:7f:59:d7:12:0a:d3:1c:
         70:58:dd:dc:c4:34:63:8b:5f:85:88:92:4c:bd:03:1c:a3:da:
         ff:ea:d1:ca:c3:9d:39:e4:6a:b6:a2:75:6d:75:ba:7e:5c:86:
         83:b8:df:4e:4a:fb:c6:a3:a7:f6:b3:f1:33:35:33:eb:0e:82:
         b3:f7:01:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:43:50 2025 by rpki-client