Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FC4C5F42FBC04552E4E3C983BF541CA60DFFA440.cer
File:                     FC4C5F42FBC04552E4E3C983BF541CA60DFFA440.cer (raw, json)
Hash identifier:          h2HvebXqscx3hNlEbO4SiU32tNwjpzi+Sxewtq2Eob4=
Subject key identifier:   FC:4C:5F:42:FB:C0:45:52:E4:E3:C9:83:BF:54:1C:A6:0D:FF:A4:40
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1FF8D031C96286BA3683B902447C2BE910A43436
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5bvt2sNFG86nkFoavY8SUzJicdcbsFC9HPNTGTtg27j1/0/FC4C5F42FBC04552E4E3C983BF541CA60DFFA440.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5bvt2sNFG86nkFoavY8SUzJicdcbsFC9HPNTGTtg27j1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 Oct 2025 17:53:58 +0000
Certificate not after:    Thu 01 Oct 2026 17:58:58 +0000
Subordinate resources:    AS: 266942
                          IP: 45.225.52.0/22
                          IP: 2804:45ac::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f8:d0:31:c9:62:86:ba:36:83:b9:02:44:7c:2b:e9:10:a4:34:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  2 17:53:58 2025 GMT
            Not After : Oct  1 17:58:58 2026 GMT
        Subject: CN=FC4C5F42FBC04552E4E3C983BF541CA60DFFA440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d9:d9:6c:5e:19:17:df:1a:a2:56:28:02:eb:
                    dd:96:b8:9b:27:9c:fd:bd:fa:54:4b:dd:ac:17:1f:
                    b9:ce:42:4c:ad:f4:74:31:6a:93:31:0c:e5:ee:e0:
                    75:d4:ec:b6:cb:fa:ab:82:a0:85:6e:58:c5:00:6a:
                    f5:2c:de:6a:6e:da:62:da:52:0e:cd:43:e3:ff:9b:
                    95:44:bf:16:9c:e0:85:b0:60:51:8c:cc:38:ef:80:
                    3f:c6:f5:66:d2:b3:69:78:e0:db:d1:f3:43:bc:fd:
                    a0:5a:d9:69:52:79:32:9a:63:95:b8:8e:72:1a:e8:
                    60:b0:dc:b0:93:3c:fa:a1:29:75:ac:0c:aa:50:4f:
                    b4:38:af:35:de:4b:a8:63:39:ec:a0:4a:9e:c8:69:
                    3c:55:cd:36:f4:6c:f3:b2:b3:54:11:24:6f:c6:62:
                    f2:0d:57:ef:36:81:cb:d9:0b:61:84:7e:f2:1f:51:
                    42:ce:eb:fe:13:45:c5:ee:0d:87:17:d3:16:74:a9:
                    1f:82:57:69:e3:41:3a:b7:5c:d3:6e:8e:20:23:fd:
                    35:76:45:c7:58:c4:de:9a:a8:84:36:a9:57:a3:26:
                    6c:a0:e5:e4:52:4c:90:fa:3b:62:97:8b:9a:6e:c9:
                    7a:02:7a:3b:83:ec:68:49:16:c0:ec:1b:d8:a0:17:
                    73:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:4C:5F:42:FB:C0:45:52:E4:E3:C9:83:BF:54:1C:A6:0D:FF:A4:40
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5bvt2sNFG86nkFoavY8SUzJicdcbsFC9HPNTGTtg27j1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5bvt2sNFG86nkFoavY8SUzJicdcbsFC9HPNTGTtg27j1/0/FC4C5F42FBC04552E4E3C983BF541CA60DFFA440.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.52.0/22
                IPv6:
                  2804:45ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266942

    Signature Algorithm: sha256WithRSAEncryption
         8d:a3:05:e3:ad:58:e3:3f:de:1f:30:7b:75:00:b6:e4:e2:cd:
         f4:3e:99:90:b5:65:7c:ca:d0:45:fc:fa:da:ef:94:85:56:77:
         a7:67:a3:29:02:3c:7a:3c:e5:4e:5a:6a:09:f8:93:d5:be:88:
         5f:02:49:ab:eb:cc:59:da:c2:2c:17:15:16:01:ea:37:49:b6:
         49:82:9e:87:0e:99:73:0e:76:32:4d:b4:cb:de:77:95:01:b7:
         94:76:68:8f:ca:31:8e:ae:71:c5:7a:31:c5:e3:f6:db:14:86:
         91:34:b1:b9:6a:7e:2d:2c:6e:76:fc:12:1f:30:1f:28:26:0f:
         f1:b5:cf:a2:b1:0e:93:fa:5f:b4:03:8c:e4:6f:9a:9e:1a:87:
         0d:3e:34:fe:90:70:5e:82:95:ed:8c:45:47:13:e8:b0:cc:39:
         9f:c0:e9:ac:59:7f:4e:6c:8d:3d:e8:32:7f:8d:53:f1:07:92:
         07:27:d7:06:f9:08:27:64:12:5f:cc:91:b0:bc:ba:1e:cc:b7:
         64:ac:68:1a:b9:63:ce:a1:d9:07:f4:a4:83:3a:32:34:fa:cf:
         e9:92:be:bf:7d:60:32:b0:37:30:9d:72:4e:59:70:93:c5:5c:
         22:b5:7a:90:be:1d:5c:b2:57:2c:16:0c:8b:e1:1c:d7:8f:5d:
         7b:c9:af:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:00 2025 by rpki-client