Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.cer
File:                     4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.cer (raw, json)
Hash identifier:          6hN9cpTgFfX3R0/nAsxJYjCLM0fKweTjztE46CUAYMQ=
Subject key identifier:   4A:A9:5A:E7:3A:B9:5B:D0:3B:1B:2A:AF:88:00:57:D0:8E:C2:3A:C0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4777E518C0B7B86DC9EC853E915AE67564B23DA9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Jun 2025 20:30:10 +0000
Certificate not after:    Tue 16 Jun 2026 20:35:10 +0000
Subordinate resources:    AS: 267031
                          IP: 45.227.72.0/22
                          IP: 2804:4718::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Jun 2025 20:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:77:e5:18:c0:b7:b8:6d:c9:ec:85:3e:91:5a:e6:75:64:b2:3d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 17 20:30:10 2025 GMT
            Not After : Jun 16 20:35:10 2026 GMT
        Subject: CN=4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b1:57:98:63:ec:69:88:01:b7:1b:59:c0:70:
                    5b:ea:62:9a:55:db:e5:26:d1:b9:4d:9a:98:43:4e:
                    d3:b8:cc:7b:2d:d8:48:0e:b7:f2:35:e9:93:0e:b7:
                    8b:5d:0e:b5:33:99:f0:59:ef:fb:83:83:98:94:cd:
                    1a:a8:30:27:6a:08:ee:80:fb:e2:37:9e:66:c6:6f:
                    71:f4:e5:db:28:e4:74:f5:32:37:8a:48:66:2f:10:
                    84:df:8a:2a:df:5b:37:ab:4e:02:13:f7:a7:a2:c1:
                    ba:fc:26:2e:b1:fe:bc:25:d5:8f:63:54:47:a3:fc:
                    89:8a:41:d1:2a:1c:11:5f:a7:e9:a6:5e:88:36:9e:
                    12:68:ec:31:bd:32:15:82:a7:62:e1:4d:0a:4b:00:
                    cf:11:6c:6b:59:43:a3:3b:4d:46:65:54:f7:1d:5d:
                    b1:39:ed:7d:57:0f:38:eb:a1:62:fe:b7:99:8b:3b:
                    63:28:3d:e0:0d:86:10:6b:59:e1:2d:87:ef:a2:89:
                    da:9d:d6:91:52:c3:0b:2c:c8:76:cc:d2:eb:29:2e:
                    e8:26:9d:8d:97:ca:18:1a:10:44:71:b3:9c:fb:bd:
                    3b:5e:3b:9b:1b:a2:1b:4d:65:50:eb:86:5d:d4:27:
                    6e:2c:fe:e7:eb:76:4e:10:b2:7a:05:d9:f3:11:bc:
                    0b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:A9:5A:E7:3A:B9:5B:D0:3B:1B:2A:AF:88:00:57:D0:8E:C2:3A:C0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/43izrA79iDUaUhriYNHo2sLt88gt9AzH3HKb17tvUNXL/0/4AA95AE73AB95BD03B1B2AAF880057D08EC23AC0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.72.0/22
                IPv6:
                  2804:4718::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267031

    Signature Algorithm: sha256WithRSAEncryption
         c1:87:47:76:ed:0f:eb:55:4f:39:4f:fd:75:0e:fa:72:47:7c:
         da:50:e2:d5:9e:1b:1e:34:c4:91:8d:64:24:94:cd:b5:b5:10:
         2b:68:e5:65:04:36:9c:e4:d1:6d:e9:ac:2a:f0:ab:9d:45:a9:
         c1:67:d0:b6:55:e0:63:33:a7:e3:20:c1:34:6f:b4:b3:b6:84:
         8c:e3:b1:71:80:de:61:07:6b:57:fa:13:c6:51:9a:89:b5:cc:
         69:53:0d:cd:d5:2d:44:68:49:cb:a3:21:75:32:92:bb:c3:9a:
         47:df:65:0d:33:56:63:4c:29:88:11:55:2f:83:f0:bb:ed:04:
         13:66:05:a5:87:92:cb:8a:76:14:a8:29:d8:91:65:a3:0a:43:
         c7:a8:23:fe:6d:2b:08:54:a3:5b:e5:8c:6d:d5:2c:82:8e:13:
         f4:75:04:a1:6b:8d:25:18:1d:99:8c:b7:20:65:38:90:58:b6:
         04:63:80:08:4c:67:fc:12:55:c4:d3:d0:fd:58:5f:ae:f7:ef:
         88:79:73:ab:7b:ab:7a:c8:3f:27:6e:d2:74:f7:51:c4:3d:88:
         1c:74:ee:f5:ae:ea:94:00:d7:6a:8d:25:3e:c4:48:e3:05:01:
         cd:1c:07:bc:c3:68:8f:b3:c4:5e:0e:7f:0d:b4:0e:6f:73:29:
         10:1f:cd:8b
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUR3flGMC3uG3J7IU+kVrmdWSyPakwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA2MTcyMDMwMTBaFw0yNjA2MTYyMDM1MTBaMDMxMTAvBgNV
BAMTKDRBQTk1QUU3M0FCOTVCRDAzQjFCMkFBRjg4MDA1N0QwOEVDMjNBQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOsVeYY+xpiAG3G1nAcFvqYppV
2+Um0blNmphDTtO4zHst2EgOt/I16ZMOt4tdDrUzmfBZ7/uDg5iUzRqoMCdqCO6A
++I3nmbGb3H05dso5HT1MjeKSGYvEITfiirfWzerTgIT96eiwbr8Ji6x/rwl1Y9j
VEej/ImKQdEqHBFfp+mmXog2nhJo7DG9MhWCp2LhTQpLAM8RbGtZQ6M7TUZlVPcd
XbE57X1XDzjroWL+t5mLO2MoPeANhhBrWeEth++iidqd1pFSwwssyHbM0uspLugm
nY2XyhgaEERxs5z7vTteO5sbohtNZVDrhl3UJ24s/ufrdk4QsnoF2fMRvAuvAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRKqVrnOrlb0Dsb
Kq+IAFfQjsI6wDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNDNp
enJBNzlpRFVhVWhyaVlOSG8yc0x0ODhndDlBekgzSEtiMTd0dlVOWEwvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzQz
aXpyQTc5aURVYVVocmlZTkhvMnNMdDg4Z3Q5QXpIM0hLYjE3dHZVTlhMLzAvNEFB
OTVBRTczQUI5NUJEMDNCMUIyQUFGODgwMDU3RDA4RUMyM0FDMC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLeNIMA0EAgACMAcDBQAoBEcYMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQTFzANBgkqhkiG9w0BAQsFAAOCAQEAwYdHdu0P61VPOU/9
dQ76ckd82lDi1Z4bHjTEkY1kJJTNtbUQK2jlZQQ2nOTRbemsKvCrnUWpwWfQtlXg
YzOn4yDBNG+0s7aEjOOxcYDeYQdrV/oTxlGaibXMaVMNzdUtRGhJy6MhdTKSu8Oa
R99lDTNWY0wpiBFVL4Pwu+0EE2YFpYeSy4p2FKgp2JFlowpDx6gj/m0rCFSjW+WM
bdUsgo4T9HUEoWuNJRgdmYy3IGU4kFi2BGOACExn/BJVxNPQ/VhfrvfviHlzq3ur
esg/J27SdPdRxD2IHHTu9a7qlADXao0lPsRI4wUBzRwHvMNoj7PEXg5/DbQOb3Mp
EB/Niw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 22:30:55 2025 by rpki-client