Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/870F31E28EB6835FE94CC62D908989A74790CB3E.cer
File:                     870F31E28EB6835FE94CC62D908989A74790CB3E.cer (raw, json)
Hash identifier:          4hAEAjSvm9d7mrVTheVAW/fCP94wPJmeIdp8PeYjPh4=
Subject key identifier:   87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0B9022A08C7B109176D22107AA842D3B515C8E22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Sep 2025 06:53:11 +0000
Certificate not after:    Thu 17 Sep 2026 06:58:11 +0000
Subordinate resources:    AS: 269175
                          IP: 45.181.92.0/22
                          IP: 2804:1f4c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:90:22:a0:8c:7b:10:91:76:d2:21:07:aa:84:2d:3b:51:5c:8e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 18 06:53:11 2025 GMT
            Not After : Sep 17 06:58:11 2026 GMT
        Subject: CN=870F31E28EB6835FE94CC62D908989A74790CB3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:39:ce:b4:d3:2d:8a:0b:fa:b0:6c:68:bd:
                    71:2e:9e:76:20:be:61:2c:d4:52:83:2d:36:85:e4:
                    01:2d:eb:39:5f:91:af:29:19:78:1b:2b:95:1d:d2:
                    ff:ba:d7:30:85:89:7d:89:c6:4f:82:c1:69:e7:aa:
                    6e:bc:f7:e1:35:54:ad:a4:c6:90:76:67:30:81:b6:
                    b7:c1:6e:44:14:1e:07:8e:5b:ae:f0:65:a7:c8:94:
                    98:81:89:fe:42:1f:85:28:1a:64:09:3a:cc:72:7e:
                    a9:8b:17:7f:10:94:d1:78:f6:94:1b:ad:3b:ec:fc:
                    a9:b0:d7:07:ec:ce:d9:57:cd:ba:bb:f0:11:27:ed:
                    02:43:c2:bb:32:63:61:f6:74:cb:b8:98:4b:6c:60:
                    67:06:50:c9:ff:02:2a:af:d0:e2:5e:07:00:2f:c5:
                    0f:ce:b9:04:56:84:53:bf:7d:a9:b9:ee:4d:fa:72:
                    a4:7b:4c:19:86:90:e8:d7:db:5f:d3:79:8d:68:d6:
                    4a:e2:51:43:6a:4d:e6:57:1b:75:27:a1:55:f6:b9:
                    2a:b8:6c:da:77:d0:d3:d3:13:70:7b:12:5d:44:d7:
                    2a:e0:18:07:74:4c:60:80:69:c6:c5:54:8b:f6:4f:
                    3b:2f:43:a8:fe:b2:c9:2f:04:91:92:09:ac:7f:a2:
                    87:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:0F:31:E2:8E:B6:83:5F:E9:4C:C6:2D:90:89:89:A7:47:90:CB:3E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/870F31E28EB6835FE94CC62D908989A74790CB3E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.92.0/22
                IPv6:
                  2804:1f4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269175

    Signature Algorithm: sha256WithRSAEncryption
         06:68:80:41:0b:39:67:06:6d:6a:60:0e:8d:f9:4b:dd:17:0d:
         61:6b:14:ac:02:e9:6e:fe:25:35:14:9f:61:87:2c:49:2f:0f:
         c5:9d:33:10:fc:d3:a1:51:78:e1:a0:97:69:bf:18:fb:a3:8e:
         ee:55:b7:db:5b:6e:2a:3d:62:dc:ce:10:c9:b0:ca:96:82:6e:
         9b:02:88:1d:89:b5:d7:33:f2:cf:59:30:56:08:be:ca:4f:38:
         28:09:e7:be:10:53:16:9c:35:3a:61:a3:48:c6:7f:cb:4b:2d:
         d3:8e:a6:86:22:7f:50:ed:04:b6:78:af:b1:af:42:8f:8b:8a:
         b1:b2:4f:5d:01:3b:07:19:1a:42:88:92:ef:02:1d:fb:72:e5:
         31:98:fa:54:ce:dc:cc:6a:4d:74:76:4a:6d:03:70:7c:1c:ac:
         cc:d6:d9:9c:f8:bd:59:15:82:ea:bd:b6:b1:c7:5b:72:3f:bb:
         cf:cc:ac:63:ca:75:18:66:01:e2:5c:f8:d5:28:a7:cb:c1:24:
         e3:31:5f:c1:c4:4d:65:51:6b:7a:40:8b:18:77:c7:01:ba:de:
         1b:dc:fc:c1:af:92:a0:df:52:6d:15:fc:48:58:b1:9f:e2:a6:
         e7:64:cb:53:79:5f:52:30:fa:ab:43:1d:f4:f2:d4:11:d7:18:
         93:43:43:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:21:32 2025 by rpki-client