Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4A676C4B6B93918F0F281D06B32B03C86C256E7F.cer
File:                     4A676C4B6B93918F0F281D06B32B03C86C256E7F.cer (raw, json)
Hash identifier:          OM31g+tPLwdFW6CvOZ5NesI2LAB4tTBfdVX2Nn1EXrc=
Subject key identifier:   4A:67:6C:4B:6B:93:91:8F:0F:28:1D:06:B3:2B:03:C8:6C:25:6E:7F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2414A547AD46C23B25D440FDDDF4BFD196BC771C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EsNH2bcWnznHupC65m6pD4Hf9j1AG96UPz87yTL3qLW9/0/4A676C4B6B93918F0F281D06B32B03C86C256E7F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EsNH2bcWnznHupC65m6pD4Hf9j1AG96UPz87yTL3qLW9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Sep 2025 17:01:16 +0000
Certificate not after:    Wed 23 Sep 2026 17:06:16 +0000
Subordinate resources:    AS: 267555
                          IP: 201.182.204.0/22
                          IP: 2804:4334::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:14:a5:47:ad:46:c2:3b:25:d4:40:fd:dd:f4:bf:d1:96:bc:77:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 24 17:01:16 2025 GMT
            Not After : Sep 23 17:06:16 2026 GMT
        Subject: CN=4A676C4B6B93918F0F281D06B32B03C86C256E7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6a:b8:8a:b9:40:7b:6b:1e:90:f7:d4:9c:e0:
                    f0:1a:48:e6:c4:ff:f9:4b:e5:69:01:b7:3c:53:d5:
                    22:84:56:91:70:dd:b1:85:97:26:a9:e0:92:52:18:
                    ab:ab:47:28:2e:59:99:05:73:b6:79:1e:56:ad:4d:
                    51:a2:bd:1b:b3:21:7b:2c:ac:58:08:a3:10:c5:ac:
                    79:aa:05:da:83:6b:0b:0f:63:81:20:33:3d:e3:13:
                    90:cf:f7:0b:80:91:a3:ea:a4:73:18:ed:94:26:5c:
                    19:72:c6:d8:7e:82:c8:d8:47:ed:ce:59:38:b4:1f:
                    27:a7:18:79:75:33:db:ac:92:f5:2c:79:4d:5a:53:
                    b3:6f:1f:3a:99:df:88:2c:61:86:63:1a:1b:7c:fe:
                    8b:cb:7e:a2:37:6b:37:48:7e:2d:00:26:0c:84:75:
                    98:51:66:12:eb:fc:39:59:c0:b9:c9:7a:98:fa:f7:
                    ed:c4:7c:d1:8b:32:15:d9:3d:af:91:0a:29:47:a8:
                    9c:47:5c:33:34:f8:c2:a6:3b:92:41:b1:1e:e0:25:
                    6e:a1:cb:30:c5:bf:8a:60:9f:11:9a:26:11:47:5e:
                    8f:fc:4d:23:de:cb:b0:df:27:8b:b3:65:2d:11:bb:
                    da:a7:0f:27:bf:c7:ca:bc:cb:2a:9b:08:46:8f:dc:
                    01:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:67:6C:4B:6B:93:91:8F:0F:28:1D:06:B3:2B:03:C8:6C:25:6E:7F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EsNH2bcWnznHupC65m6pD4Hf9j1AG96UPz87yTL3qLW9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EsNH2bcWnznHupC65m6pD4Hf9j1AG96UPz87yTL3qLW9/0/4A676C4B6B93918F0F281D06B32B03C86C256E7F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.204.0/22
                IPv6:
                  2804:4334::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267555

    Signature Algorithm: sha256WithRSAEncryption
         8c:58:1b:44:69:48:28:e0:25:ad:b4:c8:90:db:49:f6:9a:5c:
         7d:0a:2e:3f:24:64:0b:5e:c5:d8:3b:a9:ca:4f:4a:93:49:85:
         90:87:d8:77:6b:4b:4e:1a:c0:8a:3d:4a:d4:90:40:6f:1f:a6:
         f8:d2:91:bb:8d:8a:a5:7a:3e:44:5f:cd:88:92:1f:2d:b4:11:
         ae:7c:b9:02:f9:24:48:65:f2:5e:4b:cb:b5:41:25:b2:9b:75:
         5f:48:9c:58:99:ef:73:18:09:d2:ee:94:b0:83:82:eb:2a:d0:
         e6:4c:03:18:92:01:c9:8d:90:64:2b:0e:6f:8d:fa:4e:d4:07:
         f0:b7:77:75:c2:0e:16:93:cd:c8:55:f4:91:fb:5c:37:26:23:
         cb:af:e1:fe:23:be:5d:6a:14:2c:ba:08:e3:4b:c4:d7:e9:9f:
         65:24:ea:57:b3:e3:8a:38:b3:76:60:48:c4:f1:30:cb:04:b8:
         e3:84:df:80:0f:73:cb:c2:ae:2d:ca:22:ba:24:68:07:ce:3b:
         ea:1b:ec:94:60:66:e8:97:34:33:e9:ae:b4:d8:22:6d:3b:2c:
         8a:4d:1b:24:5e:90:92:01:3f:35:a6:b2:3c:5e:86:f2:01:ab:
         d6:8a:c2:fd:ca:98:80:6e:ff:c5:7e:37:3c:ac:83:ee:98:1e:
         20:52:6c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:13:56 2025 by rpki-client