Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer
File:                     4187E8F9FB3CC3D24854671C5A8C083063D7BC87.cer (raw, json)
Hash identifier:          rMXxXIKRg8+cvIXm5g+fSvaNW0buBUkAUTSe6L9wMCI=
Subject key identifier:   41:87:E8:F9:FB:3C:C3:D2:48:54:67:1C:5A:8C:08:30:63:D7:BC:87
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2740036ECDF439CCF068EF1534E697DAE5D5D4AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft
caRepository:             rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Oct 2025 18:30:30 +0000
Certificate not after:    Mon 12 Oct 2026 18:35:30 +0000
Subordinate resources:    AS: 263656
                          IP: 168.197.76.0/22
                          IP: 177.52.144.0/21
                          IP: 177.66.28.0/22
                          IP: 200.215.160.0/22
                          IP: 201.139.84.0/22
                          IP: 2804:10fc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 10:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:40:03:6e:cd:f4:39:cc:f0:68:ef:15:34:e6:97:da:e5:d5:d4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 13 18:30:30 2025 GMT
            Not After : Oct 12 18:35:30 2026 GMT
        Subject: CN=4187E8F9FB3CC3D24854671C5A8C083063D7BC87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:22:59:69:7b:69:69:bb:4c:fd:ae:f3:24:03:
                    4b:74:0e:f9:75:cf:bb:56:a6:e6:05:5d:9d:82:7c:
                    b1:0e:0a:ec:3f:41:1e:00:02:ec:48:41:a7:b3:0c:
                    dd:c4:7e:f9:43:7e:da:97:3d:17:a3:e0:01:12:56:
                    90:4f:1b:af:82:8a:49:1f:bf:61:e7:e9:0d:00:71:
                    66:24:c3:4f:88:14:24:d2:5b:2d:c9:27:b9:5b:cf:
                    2a:0d:e5:c4:34:b6:87:91:55:3a:e8:b9:5e:20:ba:
                    60:b0:b4:a7:f6:a5:08:91:ab:d2:9d:56:8c:7d:77:
                    0d:3c:fa:ee:6e:b9:d1:d3:9b:d8:f3:17:78:7e:f9:
                    40:f5:0e:99:c8:40:98:99:da:4e:2e:c1:14:9c:9d:
                    63:3e:53:c1:69:76:53:4a:a1:cd:b9:1b:c4:c8:49:
                    b9:9a:b4:31:96:97:3c:9c:3a:45:59:48:e4:bc:e5:
                    67:4f:54:a0:c7:b6:ab:23:f6:c4:c0:ec:d1:f1:4a:
                    0f:5a:b4:1a:a6:ff:9d:77:a0:41:19:91:19:13:73:
                    40:c1:fd:80:41:e8:0d:73:80:6c:e9:36:01:34:9d:
                    2c:91:d5:e9:70:86:09:50:c1:41:73:ef:69:4c:f7:
                    6c:3b:d2:70:db:60:48:c0:b9:fa:42:d5:f2:e3:fd:
                    6c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:87:E8:F9:FB:3C:C3:D2:48:54:67:1C:5A:8C:08:30:63:D7:BC:87
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/4187E8F9FB3CC3D24854671C5A8C083063D7BC87.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.76.0/22
                  177.52.144.0/21
                  177.66.28.0/22
                  200.215.160.0/22
                  201.139.84.0/22
                IPv6:
                  2804:10fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263656

    Signature Algorithm: sha256WithRSAEncryption
         b0:e7:68:c3:33:fe:71:4d:15:6e:76:17:9d:49:a1:4a:b5:5c:
         30:32:5e:ba:f9:0f:50:4b:a2:f3:c2:a8:db:5a:17:16:2a:71:
         e0:3a:d7:d7:7d:17:c8:d3:3e:53:8c:50:8e:7b:2b:74:57:ce:
         4f:7b:44:34:94:6e:ba:c4:9d:80:6a:d5:45:cf:9d:d2:f6:3d:
         16:cd:b6:04:c8:96:13:2e:15:fe:90:9d:18:e0:36:97:f3:64:
         16:cf:51:fe:ec:a3:7a:0b:69:9f:97:2f:1e:5d:e2:8f:14:86:
         4c:37:2b:43:aa:10:ed:5f:16:ff:44:b4:57:f1:1f:c0:c4:7e:
         9c:3e:45:3c:b6:74:7b:65:08:83:87:5c:49:06:bb:95:84:06:
         98:51:8f:13:5f:82:d4:1e:79:1a:61:dd:e7:a2:9a:d7:7e:21:
         14:20:b8:87:32:82:23:56:67:6d:32:f8:6e:06:5e:7f:a1:a1:
         00:38:7a:ec:c4:59:fc:27:82:ca:88:2b:79:fb:12:a5:3a:3b:
         9b:4f:b8:5e:87:16:26:41:6d:b3:7f:01:a1:a1:94:50:4a:e2:
         ae:f3:be:3e:a4:b9:b2:2e:60:a1:44:bb:b4:fe:f0:04:0a:81:
         da:b0:56:29:95:ee:8b:e9:1b:94:72:d0:01:24:d8:59:b9:d4:
         1d:96:24:16
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUJ0ADbs30OczwaO8VNOaX2uXV1K4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEwMTMxODMwMzBaFw0yNjEwMTIxODM1MzBaMDMxMTAvBgNV
BAMTKDQxODdFOEY5RkIzQ0MzRDI0ODU0NjcxQzVBOEMwODMwNjNEN0JDODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Illpe2lpu0z9rvMkA0t0Dvl1
z7tWpuYFXZ2CfLEOCuw/QR4AAuxIQaezDN3EfvlDftqXPRej4AESVpBPG6+Cikkf
v2Hn6Q0AcWYkw0+IFCTSWy3JJ7lbzyoN5cQ0toeRVTrouV4gumCwtKf2pQiRq9Kd
Vox9dw08+u5uudHTm9jzF3h++UD1DpnIQJiZ2k4uwRScnWM+U8FpdlNKoc25G8TI
SbmatDGWlzycOkVZSOS85WdPVKDHtqsj9sTA7NHxSg9atBqm/513oEEZkRkTc0DB
/YBB6A1zgGzpNgE0nSyR1elwhglQwUFz72lM92w70nDbYEjAufpC1fLj/WwlAgMB
AAGjggNQMIIDTDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRBh+j5+zzD0khU
ZxxajAgwY9e8hzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT4GCCsGAQUFBwELBIIBMDCCASwwXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vS2lF
a1A1enkyZG52eHAzWmVHZEcxYVBBaEE2czVaWXhqdUpZaDh2Q1ZCeC8wLzCBiQYI
KwYBBQUHMAqGfXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vS2lF
a1A1enkyZG52eHAzWmVHZEcxYVBBaEE2czVaWXhqdUpZaDh2Q1ZCeC8wLzQxODdF
OEY5RkIzQ0MzRDI0ODU0NjcxQzVBOEMwODMwNjNEN0JDODcubWZ0MD8GCCsGAQUF
BzANhjNodHRwczovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9ycmRwL25vdGlmaWNh
dGlvbi54bWwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBGBggrBgEFBQcBBwEB
/wQ3MDUwJAQCAAEwHgMEAqjFTAMEA7E0kAMEArFCHAMEAsjXoAMEAsmLVDANBAIA
AjAHAwUAKAQQ/DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBegwDQYJKoZIhvcN
AQELBQADggEBALDnaMMz/nFNFW52F51JoUq1XDAyXrr5D1BLovPCqNtaFxYqceA6
19d9F8jTPlOMUI57K3RXzk97RDSUbrrEnYBq1UXPndL2PRbNtgTIlhMuFf6QnRjg
NpfzZBbPUf7so3oLaZ+XLx5d4o8Uhkw3K0OqEO1fFv9EtFfxH8DEfpw+RTy2dHtl
CIOHXEkGu5WEBphRjxNfgtQeeRph3eeimtd+IRQguIcygiNWZ20y+G4GXn+hoQA4
euzEWfwngsqIK3n7EqU6O5tPuF6HFiZBbbN/AaGhlFBK4q7zvj6kubIuYKFEu7T+
8AQKgdqwVimV7ovpG5Ry0AEk2Fm51B2WJBY=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:59 2025 by rpki-client