Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DCEDD606E5DF583760013C3A374BF806DB1E2D84.cer
File:                     DCEDD606E5DF583760013C3A374BF806DB1E2D84.cer (raw, json)
Hash identifier:          +81a5Ak8DdVBRFU/NxoKzkvZa5m4hxmBAZceFewH/cA=
Subject key identifier:   DC:ED:D6:06:E5:DF:58:37:60:01:3C:3A:37:4B:F8:06:DB:1E:2D:84
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       30F81A1C098AF31F19AC14C6BAB22DCD03E9792E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/DCEDD606E5DF583760013C3A374BF806DB1E2D84.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 01 Oct 2025 13:00:21 +0000
Certificate not after:    Wed 30 Sep 2026 13:05:21 +0000
Subordinate resources:    AS: 270356
                          IP: 190.89.52.0/22
                          IP: 2804:6abc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f8:1a:1c:09:8a:f3:1f:19:ac:14:c6:ba:b2:2d:cd:03:e9:79:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  1 13:00:21 2025 GMT
            Not After : Sep 30 13:05:21 2026 GMT
        Subject: CN=DCEDD606E5DF583760013C3A374BF806DB1E2D84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:19:ef:f5:08:83:c8:de:05:7f:d0:20:92:79:
                    15:2f:12:6c:5a:6a:80:4e:e6:b1:ec:19:cf:ab:48:
                    5d:e9:0e:27:6d:1b:1c:8e:59:ee:53:bb:ef:b1:fb:
                    17:61:89:de:85:ad:3f:6b:18:cb:c7:7a:38:8b:39:
                    27:c1:89:3f:17:1c:d6:ad:de:01:63:37:95:58:c3:
                    11:e6:da:2d:9d:25:76:79:a2:69:8c:fb:f2:61:de:
                    db:f9:87:5e:c8:d0:a7:e8:ed:35:03:90:86:1e:c0:
                    c6:20:2c:ac:65:b2:ac:f0:bc:5c:0a:d2:d8:9c:19:
                    4f:e2:67:8a:9b:58:87:47:40:70:74:4e:49:57:9e:
                    18:42:ed:ee:75:57:ab:97:8a:bb:39:7b:29:0f:e7:
                    d0:88:98:13:16:bf:12:2f:c8:56:56:40:8f:e7:0c:
                    d4:35:b4:4c:c3:28:84:03:be:fd:7f:b4:5c:7e:0b:
                    8c:07:f5:11:3b:ad:1c:82:d0:f3:b4:a6:f8:f6:4c:
                    c4:56:4a:4e:27:6a:1b:c8:bc:91:31:96:66:48:9d:
                    5c:6b:a5:35:13:87:74:3c:99:64:fa:28:38:ed:d4:
                    3c:2f:d2:ee:54:27:66:6d:86:21:63:6c:30:fa:ed:
                    c3:10:6d:c7:17:42:43:7e:f5:d4:cd:55:db:92:2e:
                    5c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:ED:D6:06:E5:DF:58:37:60:01:3C:3A:37:4B:F8:06:DB:1E:2D:84
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Tv8E1WdRdmtU5chgLgbC4N2inR2BmUjd4AoCn5P2pQ9/0/DCEDD606E5DF583760013C3A374BF806DB1E2D84.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.52.0/22
                IPv6:
                  2804:6abc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270356

    Signature Algorithm: sha256WithRSAEncryption
         28:d8:c4:75:1e:ed:2f:de:25:2b:ec:01:80:d9:50:77:f3:ea:
         fa:0b:2d:20:13:57:8a:dd:0b:de:9f:22:4c:94:76:e2:c6:e2:
         87:d9:40:79:85:bf:bd:39:88:d6:68:87:2a:71:05:f7:74:15:
         bb:a6:10:c8:29:01:c2:1a:61:a0:77:e2:7c:1a:0a:ee:0c:ee:
         81:65:0f:e9:1e:b6:7b:2f:c9:bd:34:cd:e2:2b:57:c7:6a:4f:
         fe:ed:89:93:bd:c1:7d:72:f6:e5:0e:f5:5a:00:43:a0:ac:f3:
         f3:5e:de:14:16:9e:3e:15:fa:c5:fc:dd:29:58:e1:2a:44:99:
         ac:fb:d4:da:a1:0c:96:7e:0e:c1:9a:fe:7d:4b:4c:d5:6d:99:
         19:74:25:72:a1:72:6a:b7:c1:3e:81:f7:5b:30:e9:f2:f7:17:
         95:52:45:7e:8b:a7:aa:d6:2b:1f:d9:13:08:92:22:b6:a8:7c:
         15:63:53:8f:10:52:e6:ab:50:dd:90:61:ed:be:c8:f6:90:d7:
         1f:70:c0:25:46:81:b4:7a:88:3a:78:1e:f3:34:32:8c:14:f1:
         b2:90:c3:92:78:25:39:e7:6f:3c:a4:ec:57:1d:42:d3:f5:f1:
         74:58:1e:e7:7f:9b:62:4b:7f:d0:e3:2d:b7:ca:f7:74:58:d6:
         4f:11:0e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:00:09 2025 by rpki-client