Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/25C491D82730A2AF6083391B8773D984D8728328.cer
File:                     25C491D82730A2AF6083391B8773D984D8728328.cer (raw, json)
Hash identifier:          QL2TPqIQv9vbTOPSqXch/RBXw6Fao8AkGzb8BTyq/b8=
Subject key identifier:   25:C4:91:D8:27:30:A2:AF:60:83:39:1B:87:73:D9:84:D8:72:83:28
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       438CF6A97673F12DAA8F5E08D7C6C68810623836
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/25C491D82730A2AF6083391B8773D984D8728328.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Jul 2026 13:44:41 +0000
Certificate not after:    Tue 13 Jul 2027 13:49:41 +0000
Subordinate resources:    AS: 263517
                          IP: 191.243.224.0/20
                          IP: 2804:1320::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 19:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:8c:f6:a9:76:73:f1:2d:aa:8f:5e:08:d7:c6:c6:88:10:62:38:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 14 13:44:41 2026 GMT
            Not After : Jul 13 13:49:41 2027 GMT
        Subject: CN=25C491D82730A2AF6083391B8773D984D8728328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:54:e6:96:21:e2:f9:66:4a:e7:35:9d:ab:af:
                    66:c2:0e:98:bc:71:ba:b2:06:7d:b1:bd:fb:28:d8:
                    75:c7:ef:97:a4:e2:0e:c1:eb:0e:d1:b9:74:f8:ef:
                    df:75:17:99:93:67:82:99:51:c6:80:b2:1c:78:b8:
                    1d:36:b9:e4:95:23:16:88:83:0d:d8:78:ed:95:f2:
                    54:e6:a8:ab:2d:9c:5b:e4:b5:d2:c1:74:e3:e8:46:
                    5d:be:cd:21:ea:cf:9b:3d:68:1a:13:d9:77:e6:59:
                    a4:9c:6e:83:fc:85:46:27:ea:58:30:4f:c2:f4:13:
                    53:5f:49:f6:63:84:f3:78:71:b3:a3:b0:4a:52:fd:
                    3d:09:55:31:88:a4:92:fa:52:a4:ed:ce:d4:fc:e6:
                    89:35:4f:b1:ad:c0:46:d8:da:7e:2e:55:24:ac:aa:
                    13:3f:b4:87:ba:e1:aa:c9:df:5d:ad:3a:6c:9c:8e:
                    c8:8a:68:34:52:d9:1c:8f:0a:c5:ca:52:f2:a9:a2:
                    65:e0:64:65:5e:e4:31:8e:64:e7:d3:30:a3:bb:3b:
                    8d:fe:b6:94:1d:99:34:4b:f7:74:80:c2:34:48:d3:
                    25:87:14:52:89:dd:93:fd:00:4f:5b:0b:56:b9:60:
                    92:e5:58:a4:16:e4:f2:15:82:44:ef:af:19:50:c0:
                    77:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:C4:91:D8:27:30:A2:AF:60:83:39:1B:87:73:D9:84:D8:72:83:28
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4sRS7Q4Meq9bNtq9RNbRGXfYSEKz6myEMPRabdKLoyPt/0/25C491D82730A2AF6083391B8773D984D8728328.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.224.0/20
                IPv6:
                  2804:1320::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263517

    Signature Algorithm: sha256WithRSAEncryption
         d1:cf:4e:49:3a:9f:c8:c7:b7:f9:fd:ab:25:61:25:f3:b1:54:
         77:55:e7:78:e0:d4:0d:8f:8f:3b:e3:64:66:78:61:ba:c4:fb:
         02:8c:13:63:5d:e1:aa:2e:c1:b4:cc:5c:32:e1:e2:3f:ce:aa:
         0a:a0:2e:ba:c6:86:e3:cb:04:85:f7:5c:8c:a9:54:aa:35:fb:
         f3:a9:76:cd:7a:af:b0:fa:f8:8e:e6:49:ee:e4:6c:a1:5e:3d:
         02:5e:87:4b:c8:e1:00:3c:cf:88:0e:bd:76:8f:65:7f:23:53:
         07:29:d2:de:48:e3:ad:ae:66:19:a9:6e:b3:20:b6:cd:f9:bb:
         7b:cb:75:15:46:58:ee:01:c6:3b:4f:0e:b4:f1:67:e6:63:09:
         7e:42:34:34:3c:f5:e3:18:33:a3:a9:f0:3a:21:94:dd:72:19:
         03:33:05:f6:d6:eb:82:bc:2d:fe:c7:7e:96:70:60:68:9e:1e:
         9b:52:bd:95:9a:51:32:90:2c:8b:67:47:f3:b9:7d:3e:d7:46:
         64:cc:bf:a1:a8:74:a3:41:ce:37:59:5f:08:bf:b7:3a:95:0d:
         81:b2:5f:ea:75:e7:16:dc:82:82:55:16:f9:4f:60:5a:7e:98:
         e1:29:a0:65:07:d1:4b:0d:f7:ef:ea:f0:99:a3:a7:60:41:b9:
         e1:42:1a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:58:32 2026 by rpki-client