Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CDF9B344093A732ACA13F9626B1A7EE142D0CFF1.cer
File:                     CDF9B344093A732ACA13F9626B1A7EE142D0CFF1.cer (raw, json)
Hash identifier:          Ln2ey0BADuQf88BDYCWSEhd8hqnIyUmWI1n9sLCf3cw=
Subject key identifier:   CD:F9:B3:44:09:3A:73:2A:CA:13:F9:62:6B:1A:7E:E1:42:D0:CF:F1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6D933BD568B9653D1CAD31B95DEAC5E88A8FC185
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/CDF9B344093A732ACA13F9626B1A7EE142D0CFF1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Oct 2025 13:39:35 +0000
Certificate not after:    Tue 13 Oct 2026 13:44:35 +0000
Subordinate resources:    AS: 271335
                          IP: 207.248.20.0/22
                          IP: 2804:79e8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:93:3b:d5:68:b9:65:3d:1c:ad:31:b9:5d:ea:c5:e8:8a:8f:c1:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 14 13:39:35 2025 GMT
            Not After : Oct 13 13:44:35 2026 GMT
        Subject: CN=CDF9B344093A732ACA13F9626B1A7EE142D0CFF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:27:c9:dc:ab:21:f3:a7:71:ec:a5:41:ac:7e:
                    7e:1d:f5:ee:c1:3e:c8:d7:27:84:8b:72:be:99:29:
                    7e:3a:cf:52:51:21:4a:72:6a:f7:d3:a5:ff:47:d2:
                    b1:d2:37:c2:cc:24:e0:dc:4e:60:14:f7:e6:c9:73:
                    4c:83:7a:2a:cd:76:63:57:6a:82:e5:af:1f:41:fa:
                    a6:c0:a5:cf:5c:c2:5e:34:90:22:8a:77:27:ed:f3:
                    98:7e:11:3b:08:f2:d6:d8:c1:8e:5d:0f:4b:8e:c3:
                    4b:39:c9:53:6a:3f:c2:4c:9e:23:de:18:a7:43:50:
                    29:23:56:10:e4:0c:fc:9e:3b:a6:7a:73:df:59:2e:
                    ca:d2:9b:86:46:6a:61:8b:c9:13:14:e4:3d:42:68:
                    a5:81:7d:8b:27:26:7a:2e:44:f1:d6:93:d0:78:27:
                    e3:ec:1d:2f:63:bc:c1:ed:1a:93:3d:53:a8:c3:1c:
                    fe:1f:55:79:e9:b9:e7:0a:ca:f5:d2:5f:b6:55:31:
                    ef:a8:5b:f1:2d:b4:c0:bb:22:65:a0:bc:37:d3:75:
                    f0:86:01:b3:35:72:4b:dc:d2:51:0a:5a:98:c6:c0:
                    c9:87:1f:f4:8e:e9:7e:21:4e:df:aa:3f:bb:c4:b2:
                    77:d9:7c:36:c9:21:2c:7c:2f:ba:0e:79:e1:4f:af:
                    2c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:F9:B3:44:09:3A:73:2A:CA:13:F9:62:6B:1A:7E:E1:42:D0:CF:F1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FGpcXpCVCFzvMQ8uJnVjjkYzRhvyjnN2sV51W1HXEoGs/0/CDF9B344093A732ACA13F9626B1A7EE142D0CFF1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.20.0/22
                IPv6:
                  2804:79e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271335

    Signature Algorithm: sha256WithRSAEncryption
         2b:f6:51:b6:2d:99:69:66:e5:f6:d7:1c:c9:84:47:af:2c:66:
         92:45:48:d6:4e:ae:cc:50:53:dc:83:2c:a7:84:15:95:62:df:
         f1:77:ed:dc:22:9b:01:31:f4:93:5f:fe:be:72:6f:e4:77:dc:
         4e:5c:2b:12:7c:47:01:68:bd:26:7f:ac:d0:15:de:ee:cf:bc:
         f4:f4:23:20:15:09:76:1e:70:1c:23:e3:bf:e8:28:be:8a:55:
         4b:24:63:57:b0:37:a5:f5:8f:5d:70:3b:42:3c:44:33:12:99:
         e3:de:f4:df:2b:c9:e6:b0:91:8f:93:35:3f:e2:0f:23:bd:21:
         24:91:0a:be:22:41:fe:aa:4f:5b:01:75:cd:4d:54:2c:69:9b:
         d1:c1:f2:a0:50:63:09:88:5c:85:37:a3:17:06:62:a1:29:fa:
         30:5a:8e:4d:3e:b2:13:22:79:81:89:49:9e:cb:dc:73:bb:6a:
         25:67:b8:be:fe:13:9e:bd:bc:fe:e4:46:a2:4e:e1:85:6e:d2:
         71:dc:fa:81:0b:48:8c:7a:1e:d1:cc:16:3a:9b:05:c0:49:80:
         a7:5b:82:62:a9:74:26:69:61:a6:5a:40:53:96:fd:82:7c:2b:
         6a:be:37:3c:e2:88:b7:d3:10:cc:cb:aa:6c:fd:50:6f:43:90:
         e0:1f:bb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:13:50 2025 by rpki-client