Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/04025647B40E02B1D6ED1F825223771295356B79.cer
File:                     04025647B40E02B1D6ED1F825223771295356B79.cer (raw, json)
Hash identifier:          y+uNfkFERPOyQN1vYKznIk0ZiYEBS55ecQdT2T4kWA8=
Subject key identifier:   04:02:56:47:B4:0E:02:B1:D6:ED:1F:82:52:23:77:12:95:35:6B:79
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0DB81E0FAFDC76583292EF31592B65550FE883FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2ZyRx9w3icoUzqQH7LRSNjhNySee8mhkGcWsEBhgLfVA/0/04025647B40E02B1D6ED1F825223771295356B79.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2ZyRx9w3icoUzqQH7LRSNjhNySee8mhkGcWsEBhgLfVA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 24 Jul 2025 17:51:28 +0000
Certificate not after:    Thu 23 Jul 2026 17:56:28 +0000
Subordinate resources:    AS: 273428
                          IP: 45.178.179.0/24
                          IP: 2804:8e7c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 04:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b8:1e:0f:af:dc:76:58:32:92:ef:31:59:2b:65:55:0f:e8:83:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 24 17:51:28 2025 GMT
            Not After : Jul 23 17:56:28 2026 GMT
        Subject: CN=04025647B40E02B1D6ED1F825223771295356B79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a7:78:25:e4:1e:9c:da:92:88:08:5a:ee:73:
                    12:91:f9:7e:83:48:92:9e:6c:81:4f:ed:b3:3e:77:
                    6d:cf:fd:cf:f2:0e:d8:0f:4d:1d:a0:af:bf:f2:77:
                    f6:7e:8d:18:6c:03:b6:ff:08:fd:45:df:90:42:b7:
                    24:79:fd:9c:88:83:40:ea:5a:91:ee:0b:45:83:08:
                    ef:f5:f2:c0:61:8e:f3:b3:48:41:e9:4c:c9:48:7c:
                    19:6a:a1:00:90:51:88:39:04:df:58:7a:89:7c:38:
                    a1:36:c5:4f:52:90:5d:ec:11:58:5a:df:1c:38:80:
                    a3:a9:76:31:6f:f8:f4:de:f4:33:c0:e9:12:bf:9c:
                    92:4b:d3:73:b0:5c:89:15:7c:a9:fc:1d:39:a1:49:
                    e7:76:ff:dc:d9:5c:b9:e3:58:7e:a5:dc:88:0e:bb:
                    e6:a4:79:b9:54:60:28:63:20:bc:ab:44:94:5a:ed:
                    59:10:a5:de:e9:06:18:32:a6:56:42:4d:ec:a5:6a:
                    4a:48:8b:f5:93:63:c1:46:57:1b:42:94:c7:03:03:
                    5f:55:e4:61:c0:4e:94:57:c4:ed:37:94:d4:38:2a:
                    41:69:79:9a:24:21:e1:c3:df:42:45:ac:a2:d3:47:
                    86:f7:02:59:14:07:b6:9c:88:7b:17:a2:a9:77:fb:
                    d8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:02:56:47:B4:0E:02:B1:D6:ED:1F:82:52:23:77:12:95:35:6B:79
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2ZyRx9w3icoUzqQH7LRSNjhNySee8mhkGcWsEBhgLfVA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2ZyRx9w3icoUzqQH7LRSNjhNySee8mhkGcWsEBhgLfVA/0/04025647B40E02B1D6ED1F825223771295356B79.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.179.0/24
                IPv6:
                  2804:8e7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273428

    Signature Algorithm: sha256WithRSAEncryption
         c7:27:79:b9:a9:60:06:09:3f:ea:35:fa:14:1b:b6:75:91:41:
         bb:1b:cf:40:0b:d5:22:70:65:80:12:22:53:fa:41:91:2e:dd:
         e7:23:27:a0:6c:6c:92:e3:ca:79:f8:3a:26:02:77:2c:df:1e:
         eb:14:c2:0b:8b:d2:1d:5a:0f:a7:96:90:6d:12:2c:34:68:de:
         ff:42:47:0b:e4:4e:f4:8c:fa:23:7b:39:0c:e7:63:0e:91:a2:
         31:86:68:fe:53:ff:d5:db:97:f6:b8:d3:da:8b:00:3b:49:21:
         6f:65:51:a5:fa:b4:b5:fc:0a:17:dd:5d:2a:6d:0a:e8:57:0f:
         c7:89:62:9f:7b:2c:bc:ca:04:d3:4c:df:5a:a6:f2:35:b2:ef:
         a2:48:9e:38:e3:05:c4:47:27:d0:5e:3f:87:66:0a:0f:b5:64:
         24:38:77:b3:40:63:14:0a:1c:6c:34:33:a5:c7:3d:0c:59:10:
         a0:96:12:ed:3b:f0:e7:1e:ea:19:af:e0:05:57:91:a6:bf:98:
         13:ab:fb:93:49:ea:b0:8a:d2:54:a9:c5:4c:fb:58:22:78:56:
         cb:88:21:b4:6b:66:4d:30:29:e2:84:66:f5:6c:6c:12:ac:00:
         4f:da:b1:57:e9:88:4c:29:4d:96:57:08:5e:04:9b:b0:a5:7c:
         79:a3:bc:c1
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUDbgeD6/cdlgyku8xWStlVQ/og/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA3MjQxNzUxMjhaFw0yNjA3MjMxNzU2MjhaMDMxMTAvBgNV
BAMTKDA0MDI1NjQ3QjQwRTAyQjFENkVEMUY4MjUyMjM3NzEyOTUzNTZCNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcp3gl5B6c2pKICFrucxKR+X6D
SJKebIFP7bM+d23P/c/yDtgPTR2gr7/yd/Z+jRhsA7b/CP1F35BCtyR5/ZyIg0Dq
WpHuC0WDCO/18sBhjvOzSEHpTMlIfBlqoQCQUYg5BN9Yeol8OKE2xU9SkF3sEVha
3xw4gKOpdjFv+PTe9DPA6RK/nJJL03OwXIkVfKn8HTmhSed2/9zZXLnjWH6l3IgO
u+akeblUYChjILyrRJRa7VkQpd7pBhgyplZCTeylakpIi/WTY8FGVxtClMcDA19V
5GHATpRXxO03lNQ4KkFpeZokIeHD30JFrKLTR4b3AlkUB7aciHsXoql3+9hVAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQEAlZHtA4Csdbt
H4JSI3cSlTVreTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMlp5
Ung5dzNpY29VenFRSDdMUlNOamhOeVNlZThtaGtHY1dzRUJoZ0xmVkEvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJa
eVJ4OXczaWNvVXpxUUg3TFJTTmpoTnlTZWU4bWhrR2NXc0VCaGdMZlZBLzAvMDQw
MjU2NDdCNDBFMDJCMUQ2RUQxRjgyNTIyMzc3MTI5NTM1NkI3OS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQALbKzMA0EAgACMAcDBQAoBI58MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQsFDANBgkqhkiG9w0BAQsFAAOCAQEAxyd5ualgBgk/6jX6
FBu2dZFBuxvPQAvVInBlgBIiU/pBkS7d5yMnoGxskuPKefg6JgJ3LN8e6xTCC4vS
HVoPp5aQbRIsNGje/0JHC+RO9Iz6I3s5DOdjDpGiMYZo/lP/1duX9rjT2osAO0kh
b2VRpfq0tfwKF91dKm0K6FcPx4lin3ssvMoE00zfWqbyNbLvokieOOMFxEcn0F4/
h2YKD7VkJDh3s0BjFAocbDQzpcc9DFkQoJYS7Tvw5x7qGa/gBVeRpr+YE6v7k0nq
sIrSVKnFTPtYInhWy4ghtGtmTTAp4oRm9WxsEqwAT9qxV+mITClNllcIXgSbsKV8
eaO8wQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 07:16:31 2025 by rpki-client