Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B6BED81A275EBA830D2F2882B605540F9C45CED5.cer
File:                     B6BED81A275EBA830D2F2882B605540F9C45CED5.cer (raw, json)
Hash identifier:          GDMzApRtZe02E/zrsV2RemRu3CtbCxq6rpPpYYVJsgs=
Subject key identifier:   B6:BE:D8:1A:27:5E:BA:83:0D:2F:28:82:B6:05:54:0F:9C:45:CE:D5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       66F989102C9F2277C782A6A9A9FD25CBE89237DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/0/B6BED81A275EBA830D2F2882B605540F9C45CED5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Oct 2025 07:40:41 +0000
Certificate not after:    Wed 07 Oct 2026 07:45:41 +0000
Subordinate resources:    AS: 265306
                          IP: 168.121.28.0/22
                          IP: 2804:2dd4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f9:89:10:2c:9f:22:77:c7:82:a6:a9:a9:fd:25:cb:e8:92:37:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  8 07:40:41 2025 GMT
            Not After : Oct  7 07:45:41 2026 GMT
        Subject: CN=B6BED81A275EBA830D2F2882B605540F9C45CED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:18:4f:18:74:d9:64:f2:46:dd:c4:c5:75:28:
                    57:80:b1:5e:6a:71:6f:72:c5:55:10:a3:5a:a6:99:
                    21:ab:dc:d6:5a:4a:a1:4e:45:2c:e3:79:e3:15:6b:
                    36:87:f6:8c:38:a9:7e:37:62:de:45:cb:2c:0c:34:
                    66:20:c9:d3:6e:15:d7:1a:54:0b:89:3c:30:00:ab:
                    3a:27:03:15:49:7e:9f:3f:94:02:49:71:95:ba:bb:
                    9e:0f:07:56:7e:2d:5d:af:ea:40:18:e1:95:0a:ff:
                    e9:d2:4b:e2:7d:aa:d3:4a:b6:ed:df:21:84:fd:22:
                    bb:b8:8c:da:a9:31:90:69:d8:74:c4:06:b5:1c:ca:
                    94:87:1f:37:51:48:4a:c1:20:80:4b:b1:24:a9:27:
                    7a:26:83:34:e3:0d:b6:4d:1e:6c:be:d7:05:61:7f:
                    7f:0e:87:98:75:1d:b2:0b:2d:f7:82:91:3f:64:82:
                    79:fe:0c:dd:5d:8a:63:ce:be:ff:b3:4d:a4:d7:95:
                    28:8a:29:88:94:97:cd:bd:a3:8e:97:fc:c6:f1:ff:
                    91:fb:7b:9e:fb:b7:05:63:f8:d8:1d:bf:a2:92:dd:
                    87:08:aa:36:2e:c7:eb:f9:32:7a:d6:52:56:49:f6:
                    36:d0:8b:0c:4a:5d:e6:29:a2:2f:a5:24:38:32:29:
                    8a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B6:BE:D8:1A:27:5E:BA:83:0D:2F:28:82:B6:05:54:0F:9C:45:CE:D5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FaphKP1Zs6RpYdGahMrdcKeSiqvczh7MsUWfBRg6w832/0/B6BED81A275EBA830D2F2882B605540F9C45CED5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.28.0/22
                IPv6:
                  2804:2dd4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265306

    Signature Algorithm: sha256WithRSAEncryption
         d5:2b:86:49:2d:21:ef:70:2e:9d:31:10:69:0a:0a:d3:56:04:
         97:d5:e6:ce:97:ef:a6:eb:f3:d8:13:03:26:a6:bb:42:9e:ce:
         ab:76:0e:0c:ca:15:cc:e5:5b:05:ab:ad:df:12:15:87:5d:a1:
         fd:63:f4:9c:53:96:86:90:19:0d:88:cf:3e:c2:fd:47:81:52:
         a0:98:4f:2f:a6:21:24:d8:82:51:a5:13:3b:83:c6:ba:4c:66:
         a7:92:dc:cb:f0:98:b0:48:4c:a9:3d:c8:12:fe:20:24:a7:65:
         1c:b1:e6:1d:05:d3:0f:cd:64:54:8b:a2:27:ff:ac:76:5d:24:
         ee:f4:35:d5:f4:2d:f0:72:a9:77:2b:76:57:4e:41:4f:51:4e:
         27:d4:b1:bd:29:e8:1e:0f:f0:0f:88:bc:29:df:dd:78:ef:30:
         ad:c5:0a:f6:6a:9d:7a:00:7d:5a:a3:13:e6:d5:b0:ae:09:72:
         cd:b8:c5:d2:c1:90:14:cd:92:ee:bf:f8:83:ae:39:06:91:38:
         88:2f:6d:4b:f8:2f:04:a6:55:78:fb:cd:19:20:a7:09:ff:99:
         16:3b:ec:b0:7b:aa:7f:c0:2f:00:c2:f5:56:fa:88:7f:2b:fd:
         a6:84:8b:37:0b:00:cd:04:8e:58:9e:e8:4f:55:61:19:74:a5:
         e3:12:44:9d
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUZvmJECyfInfHgqapqf0ly+iSN98wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEwMDgwNzQwNDFaFw0yNjEwMDcwNzQ1NDFaMDMxMTAvBgNV
BAMTKEI2QkVEODFBMjc1RUJBODMwRDJGMjg4MkI2MDU1NDBGOUM0NUNFRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUGE8YdNlk8kbdxMV1KFeAsV5q
cW9yxVUQo1qmmSGr3NZaSqFORSzjeeMVazaH9ow4qX43Yt5FyywMNGYgydNuFdca
VAuJPDAAqzonAxVJfp8/lAJJcZW6u54PB1Z+LV2v6kAY4ZUK/+nSS+J9qtNKtu3f
IYT9Iru4jNqpMZBp2HTEBrUcypSHHzdRSErBIIBLsSSpJ3omgzTjDbZNHmy+1wVh
f38Oh5h1HbILLfeCkT9kgnn+DN1dimPOvv+zTaTXlSiKKYiUl829o46X/Mbx/5H7
e577twVj+Ngdv6KS3YcIqjYux+v5MnrWUlZJ9jbQiwxKXeYpoi+lJDgyKYoRAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS2vtgaJ166gw0v
KIK2BVQPnEXO1TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmFw
aEtQMVpzNlJwWWRHYWhNcmRjS2VTaXF2Y3poN01zVVdmQlJnNnc4MzIvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zh
cGhLUDFaczZScFlkR2FoTXJkY0tlU2lxdmN6aDdNc1VXZkJSZzZ3ODMyLzAvQjZC
RUQ4MUEyNzVFQkE4MzBEMkYyODgyQjYwNTU0MEY5QzQ1Q0VENS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqHkcMA0EAgACMAcDBQAoBC3UMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQMWjANBgkqhkiG9w0BAQsFAAOCAQEA1SuGSS0h73AunTEQ
aQoK01YEl9Xmzpfvpuvz2BMDJqa7Qp7Oq3YODMoVzOVbBaut3xIVh12h/WP0nFOW
hpAZDYjPPsL9R4FSoJhPL6YhJNiCUaUTO4PGukxmp5Lcy/CYsEhMqT3IEv4gJKdl
HLHmHQXTD81kVIuiJ/+sdl0k7vQ11fQt8HKpdyt2V05BT1FOJ9SxvSnoHg/wD4i8
Kd/deO8wrcUK9mqdegB9WqMT5tWwrglyzbjF0sGQFM2S7r/4g645BpE4iC9tS/gv
BKZVePvNGSCnCf+ZFjvssHuqf8AvAML1VvqIfyv9poSLNwsAzQSOWJ7oT1VhGXSl
4xJEnQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:22:33 2025 by rpki-client