Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/199E6A493967FE55BA0140061BC6435DD8779FD9.cer
File:                     199E6A493967FE55BA0140061BC6435DD8779FD9.cer (raw, json)
Hash identifier:          AfSpUNrSJ9geOknAw/xKS8LEk1ztiFZX7eXaHmnYNxo=
Subject key identifier:   19:9E:6A:49:39:67:FE:55:BA:01:40:06:1B:C6:43:5D:D8:77:9F:D9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       63D6D68DCFD56FAA9A01296AC0E10CE414B5D56A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Oct 2025 11:55:08 +0000
Certificate not after:    Fri 16 Oct 2026 12:00:08 +0000
Subordinate resources:    AS: 267991
                          IP: 45.167.52.0/22
                          IP: 192.100.223.0/24
                          IP: 2804:5654::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d6:d6:8d:cf:d5:6f:aa:9a:01:29:6a:c0:e1:0c:e4:14:b5:d5:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 17 11:55:08 2025 GMT
            Not After : Oct 16 12:00:08 2026 GMT
        Subject: CN=199E6A493967FE55BA0140061BC6435DD8779FD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a0:fa:0d:0c:9c:fc:f1:a2:5e:9c:c6:03:d8:
                    97:57:03:89:99:06:12:84:79:5d:a5:b8:9f:a5:77:
                    01:9f:83:eb:2b:99:10:f5:45:5d:d1:86:5a:e4:ce:
                    66:b1:c1:16:8f:73:8c:e1:d9:fe:63:22:1a:de:41:
                    29:1d:42:04:bc:fd:05:d4:8b:30:00:67:21:6c:17:
                    b5:53:8c:bd:09:c9:30:35:37:9d:b8:eb:4c:6c:88:
                    37:90:b5:94:37:77:69:6b:30:67:da:3d:74:59:23:
                    c6:38:ea:46:f3:b2:bd:35:c9:9a:8c:78:64:55:29:
                    53:9f:23:f4:9f:c8:2f:58:16:9a:ff:9f:96:1b:57:
                    df:c9:37:d9:af:99:7f:89:00:f0:e4:16:4f:8b:7c:
                    72:14:35:f7:62:92:9f:60:9f:f6:75:06:ad:d1:d1:
                    7d:d7:a0:fd:da:eb:0a:db:3e:42:1c:e0:f4:3e:35:
                    0c:e8:15:90:97:4c:e8:44:d8:2a:52:f4:f1:91:03:
                    55:ee:62:3d:e0:d2:81:b2:71:c4:33:84:7b:74:6c:
                    60:cc:37:72:92:17:35:5f:63:6e:73:c6:0b:31:64:
                    5a:dc:3f:f7:f9:c4:15:a6:57:e1:b1:c4:17:c0:4c:
                    7a:cf:0a:84:ea:a2:87:33:6a:9a:3a:28:44:df:c5:
                    19:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:9E:6A:49:39:67:FE:55:BA:01:40:06:1B:C6:43:5D:D8:77:9F:D9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/199E6A493967FE55BA0140061BC6435DD8779FD9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.52.0/22
                  192.100.223.0/24
                IPv6:
                  2804:5654::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267991

    Signature Algorithm: sha256WithRSAEncryption
         08:0b:a4:25:24:06:dd:9b:c9:3d:8a:8c:13:3c:9c:15:16:70:
         f2:de:51:db:f5:1f:8b:57:46:09:51:6b:d5:14:cd:02:97:50:
         7b:2f:ac:6f:08:12:54:8e:8a:d9:a4:4f:ec:b1:32:87:0d:64:
         c1:a0:10:ad:70:b5:a0:a5:12:49:3d:e9:ba:92:d3:db:da:10:
         f9:2f:81:1e:3b:b2:40:ef:ae:45:35:38:ff:c3:1b:18:f3:f4:
         5f:5d:c6:39:1f:fa:d7:46:ac:ed:90:f3:d2:e8:6c:bf:6c:db:
         56:5b:44:8d:d4:b0:18:0e:8c:9f:61:18:e6:f6:8f:c4:5f:51:
         cc:86:4a:17:85:1d:d8:5a:fd:20:aa:39:1e:ac:6e:e3:af:72:
         92:55:65:4a:20:40:77:2d:a9:7e:3a:13:1a:cc:31:32:39:47:
         87:fe:8a:89:f0:7d:6a:2d:ff:12:be:33:8f:fd:6a:2f:da:d2:
         64:9f:82:cb:06:2e:87:cd:d2:42:38:12:06:07:01:a5:5e:01:
         e0:ee:55:36:66:ba:cb:d1:fa:50:bd:5a:39:41:67:7f:d6:39:
         52:52:e3:18:59:d2:ce:0a:47:26:b5:74:06:3a:e2:3c:a1:4d:
         34:23:93:5a:be:8b:44:57:51:f9:0e:e2:34:be:92:cc:e2:fb:
         4e:1a:04:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:11:30 2025 by rpki-client