Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CDFEB6D9C1260E03DCF13C463D3B957509643F51.cer
File:                     CDFEB6D9C1260E03DCF13C463D3B957509643F51.cer (raw, json)
Hash identifier:          WK9murpwCYWOgkaffY8ktu5DISgipWyD9KyEBfRK47o=
Subject key identifier:   CD:FE:B6:D9:C1:26:0E:03:DC:F1:3C:46:3D:3B:95:75:09:64:3F:51
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1060A322664C3F5DB148AE34BFE4E92DB3D0DA6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/CDFEB6D9C1260E03DCF13C463D3B957509643F51.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Oct 2025 16:54:08 +0000
Certificate not after:    Mon 12 Oct 2026 16:59:08 +0000
Subordinate resources:    AS: 271405
                          IP: 181.224.60.0/22
                          IP: 2804:7b00::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:60:a3:22:66:4c:3f:5d:b1:48:ae:34:bf:e4:e9:2d:b3:d0:da:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 13 16:54:08 2025 GMT
            Not After : Oct 12 16:59:08 2026 GMT
        Subject: CN=CDFEB6D9C1260E03DCF13C463D3B957509643F51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:10:91:c4:ce:0a:e3:3d:e3:b8:a9:63:b7:b9:
                    01:57:9d:df:2a:6c:7e:a8:ff:db:34:50:b3:96:78:
                    26:6b:21:4c:f6:9b:6c:72:f8:fe:76:13:26:e2:00:
                    41:80:04:b8:1e:cc:6f:f7:67:60:2d:da:4c:ea:13:
                    3f:02:d8:9c:d3:7f:8d:59:b5:b7:4b:ff:10:50:d0:
                    0e:7b:6b:53:f8:d8:76:ac:c3:cd:30:59:02:ec:ec:
                    e5:5e:28:96:d2:a0:d7:79:a4:22:e1:ad:27:20:e7:
                    39:1c:87:d3:db:5f:57:84:1c:7e:9f:ec:29:cc:c4:
                    73:8e:5c:65:3c:52:bc:8d:9f:57:bb:49:df:d2:31:
                    d9:7e:cc:36:a7:4d:a2:32:6d:17:5d:f1:b2:45:32:
                    50:be:8e:56:88:f1:4b:fd:16:59:91:74:e9:dc:62:
                    b3:b4:45:50:50:1a:17:cf:f3:0f:a1:bf:80:64:e4:
                    aa:4e:0f:b4:ed:71:00:53:a9:18:27:46:1b:d9:78:
                    79:62:20:4b:7b:4a:4e:e0:65:7e:08:0b:4a:d0:5d:
                    a0:16:a3:de:e3:8e:1e:e7:11:91:b6:2b:a5:5d:8e:
                    d0:00:35:72:b0:d9:e2:d4:5c:23:9a:6c:69:07:88:
                    dc:13:81:83:84:94:be:d6:16:fc:3a:a8:60:11:a0:
                    d6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:FE:B6:D9:C1:26:0E:03:DC:F1:3C:46:3D:3B:95:75:09:64:3F:51
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DhMPqgihgHogyDaWMfd5yEvbxXoNFQHWLfH5KcigwFNc/0/CDFEB6D9C1260E03DCF13C463D3B957509643F51.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.60.0/22
                IPv6:
                  2804:7b00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271405

    Signature Algorithm: sha256WithRSAEncryption
         97:72:60:b3:70:a4:8e:2a:5a:37:ad:b4:f2:ac:9c:7c:c0:62:
         7f:66:c7:76:ad:cf:83:a2:30:ab:8d:2c:88:bb:b0:79:b1:14:
         29:ce:6c:1f:44:39:62:8f:64:6c:23:07:22:b1:3e:94:93:e4:
         99:eb:10:18:b0:db:f2:02:74:83:f0:f2:24:2d:a0:3a:2f:d3:
         7a:57:f8:25:71:62:2a:e7:5a:9b:30:d3:1c:a2:a1:ff:84:ae:
         ea:3a:05:05:32:66:5e:a8:04:a1:7a:80:d5:a2:7b:f7:1e:71:
         b6:5a:e4:d4:bf:fb:ba:f1:12:3c:fe:74:1e:58:81:27:7b:7e:
         50:32:74:5f:2b:d5:04:2d:c3:e4:15:b8:c8:f3:98:20:1a:e7:
         83:e7:3f:de:da:48:5d:39:50:07:ce:42:0d:67:e0:0c:dd:ad:
         de:a7:dc:7d:e2:d5:c6:24:aa:69:de:be:9e:94:71:16:20:4f:
         68:f9:88:96:5d:bf:d5:58:f7:3f:7a:6e:dd:7f:cc:a5:7e:c5:
         c6:40:d3:2b:d4:5a:92:a8:ee:98:b8:07:fd:2a:c8:9b:50:bc:
         17:73:e7:53:65:c3:32:45:08:cc:c3:6c:48:6a:e3:b6:40:f9:
         b2:b7:16:a3:65:a6:af:55:d7:0f:ae:fc:8b:79:c3:d7:8e:9e:
         6d:0e:03:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:30:11 2025 by rpki-client