Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1753C7A1A8FB4DFD63862ED1AA2511AA151B1109.cer
File:                     1753C7A1A8FB4DFD63862ED1AA2511AA151B1109.cer (raw, json)
Hash identifier:          zwBP37IKlbQTviDSwfZPdiKWBqrlp8CbGfDzW7CHr74=
Subject key identifier:   17:53:C7:A1:A8:FB:4D:FD:63:86:2E:D1:AA:25:11:AA:15:1B:11:09
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       63E471C03EDD29B6B8A2885D56C5F26A57C3247D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/1753C7A1A8FB4DFD63862ED1AA2511AA151B1109.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Aug 2025 17:02:18 +0000
Certificate not after:    Thu 13 Aug 2026 17:07:18 +0000
Subordinate resources:    AS: 264065
                          IP: 143.202.0.0/22
                          IP: 2804:2a38::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 13:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:e4:71:c0:3e:dd:29:b6:b8:a2:88:5d:56:c5:f2:6a:57:c3:24:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 14 17:02:18 2025 GMT
            Not After : Aug 13 17:07:18 2026 GMT
        Subject: CN=1753C7A1A8FB4DFD63862ED1AA2511AA151B1109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c1:15:4f:be:58:de:8c:3a:90:f0:e8:2a:22:
                    56:4b:11:9b:97:0f:42:b9:13:c4:dc:70:41:fa:60:
                    5f:e9:49:86:51:b0:6c:c8:1f:b4:ed:1b:af:ad:97:
                    08:fd:57:54:ef:a8:d5:e3:d0:48:97:f3:73:93:e3:
                    3a:7e:06:0b:08:22:3b:10:27:bd:e9:f2:1b:9a:6a:
                    2d:ce:35:41:e2:95:0c:d0:3f:06:d9:66:4e:d9:26:
                    af:33:ef:ca:4c:2b:8a:f9:53:5b:dc:6c:31:6a:3f:
                    e3:38:1e:bf:47:75:bb:ac:0d:1d:2b:7f:43:02:b1:
                    ee:87:d4:cb:20:e4:34:b9:8f:56:88:01:89:3f:f8:
                    2a:cb:d3:55:52:44:df:04:0d:1c:fa:73:ad:9d:2b:
                    f7:7e:e2:e0:2b:bc:05:e5:7a:aa:23:ff:47:0d:93:
                    51:3f:b8:3f:4d:61:44:9f:0f:f2:c9:1f:99:bb:f1:
                    16:b7:8c:54:72:c7:90:08:75:01:89:fc:bd:c5:4d:
                    96:b7:a0:55:5d:13:57:9c:3e:1c:b9:9e:42:5c:d2:
                    14:7f:25:41:3e:71:d7:95:bf:13:30:32:e9:96:4d:
                    eb:3c:8e:6e:14:4e:0f:75:8b:e5:84:40:7d:a8:94:
                    79:00:5a:36:4e:71:35:98:88:0f:e5:40:43:b9:00:
                    0b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                17:53:C7:A1:A8:FB:4D:FD:63:86:2E:D1:AA:25:11:AA:15:1B:11:09
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/1753C7A1A8FB4DFD63862ED1AA2511AA151B1109.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.0.0/22
                IPv6:
                  2804:2a38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264065

    Signature Algorithm: sha256WithRSAEncryption
         da:d3:67:61:da:89:e7:6e:29:61:b6:36:06:a6:38:a5:92:d9:
         c8:15:70:7e:bc:24:d4:d5:17:a9:c8:b4:f8:3a:a2:d2:b1:0d:
         d1:b7:27:31:41:f8:db:e5:d0:ba:17:1b:d6:b4:39:75:6e:87:
         08:8f:23:14:8f:20:ee:91:c2:6a:05:ec:5f:59:a9:31:87:b1:
         74:1b:eb:96:b9:ff:91:42:f5:d3:b0:4f:34:79:f0:17:e7:13:
         92:45:b5:8d:72:d6:11:ae:fe:1a:fb:75:dc:53:9a:68:6d:b1:
         eb:6a:a0:ab:4d:e5:ab:4c:de:70:90:df:6d:9a:ca:bc:23:bf:
         d4:7d:cf:1b:c1:2c:01:dd:be:a5:31:d1:2b:74:a6:36:4f:c9:
         7c:ac:9f:2c:a3:7b:0e:da:e5:66:44:cd:7b:43:1a:27:96:08:
         c4:6f:e0:4f:c0:ef:7c:6c:09:c3:75:ad:a4:e3:96:84:f5:67:
         08:ce:cf:82:ea:74:bf:14:62:f1:16:60:62:fd:b6:90:bb:2f:
         ac:38:40:23:04:fe:2a:d7:a6:6c:f8:1c:28:61:82:f7:45:de:
         c1:96:c7:85:ca:4d:4b:8f:9b:f3:93:b9:64:36:e1:2e:98:ca:
         38:7a:2a:4f:7d:1e:7d:88:86:3c:f6:08:b6:9d:c8:f2:4a:fe:
         a1:ee:15:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:58:36 2025 by rpki-client