Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4E91C8A601C873F56327512A049333F24F8B5FF3.cer
File:                     4E91C8A601C873F56327512A049333F24F8B5FF3.cer (raw, json)
Hash identifier:          5nUUdYdCQv4GQqQDcbqEPRmDdrXMLjVwdLw3NWtvrqY=
Subject key identifier:   4E:91:C8:A6:01:C8:73:F5:63:27:51:2A:04:93:33:F2:4F:8B:5F:F3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       53847D665730ECA34033E56AFC0D7A5177C48BE2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/4E91C8A601C873F56327512A049333F24F8B5FF3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Aug 2025 13:44:41 +0000
Certificate not after:    Fri 21 Aug 2026 13:49:41 +0000
Subordinate resources:    AS: 264511
                          IP: 132.255.192.0/22
                          IP: 2804:20bc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 04:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:84:7d:66:57:30:ec:a3:40:33:e5:6a:fc:0d:7a:51:77:c4:8b:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 22 13:44:41 2025 GMT
            Not After : Aug 21 13:49:41 2026 GMT
        Subject: CN=4E91C8A601C873F56327512A049333F24F8B5FF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ac:4d:a6:1c:6d:dc:30:81:74:72:7f:fb:cf:
                    03:ad:d7:11:9e:93:ec:ab:a3:b1:ca:d3:96:78:75:
                    84:55:51:03:88:bc:25:32:73:d8:38:f5:e8:ae:88:
                    70:a6:c5:cb:82:ca:d8:ee:64:df:c6:2b:eb:c8:f2:
                    8e:b1:c1:37:2c:85:d5:68:c1:cf:86:cb:11:72:7a:
                    5e:6e:0d:0d:76:f9:e4:cf:22:d5:8e:44:69:03:07:
                    f2:5b:cf:88:64:e3:a6:02:80:a5:bf:c1:f5:b5:b6:
                    a2:39:63:b0:c6:a1:13:ec:63:e2:75:f6:3c:e0:fc:
                    5a:17:5e:bf:38:61:08:b5:4c:8a:ce:3e:6e:69:b2:
                    08:c1:f7:8c:3c:d4:6d:5e:f2:80:a7:f6:87:80:9a:
                    f4:71:b6:e6:11:7a:65:75:e6:ea:21:8a:1e:5a:f7:
                    3a:77:4a:09:57:36:fd:c7:31:01:18:ae:9b:62:d8:
                    6e:4d:65:11:46:60:68:dd:1a:2d:a6:64:a7:e9:8b:
                    9d:1c:a3:bc:df:d6:b6:61:46:fd:7b:62:62:53:12:
                    e6:d9:c5:06:73:df:73:5e:53:42:db:98:0a:fb:a6:
                    a1:46:e8:d0:cb:d4:b6:0a:40:fc:8f:1a:47:04:72:
                    ee:c6:9b:83:8a:7d:49:5e:dc:ab:1f:59:52:f1:a4:
                    b2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4E:91:C8:A6:01:C8:73:F5:63:27:51:2A:04:93:33:F2:4F:8B:5F:F3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/4E91C8A601C873F56327512A049333F24F8B5FF3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.192.0/22
                IPv6:
                  2804:20bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264511

    Signature Algorithm: sha256WithRSAEncryption
         03:16:41:9b:47:da:4d:f0:88:94:eb:9b:b2:1d:01:25:c2:7e:
         98:f6:6d:dc:90:6b:96:1a:7a:3d:77:48:ce:70:34:17:2c:30:
         5d:07:cf:b0:69:50:bc:95:ff:3b:95:5e:35:35:52:f8:7b:b8:
         4a:59:cb:64:f0:47:ea:df:53:65:29:a9:4c:3b:12:2a:7b:00:
         27:58:04:b1:2e:3d:68:27:9c:d8:fd:6b:ae:f5:84:fb:78:1f:
         80:c0:6d:66:c7:01:2e:dd:9b:4a:88:bc:f0:64:13:9b:19:92:
         fb:e8:c1:39:44:cb:c1:48:21:3c:a5:a9:b5:24:76:25:2e:5c:
         9b:4e:5a:72:01:2b:ab:13:f7:95:46:3b:ad:60:17:52:b4:53:
         77:8d:06:68:bd:ea:7f:2c:bd:38:a4:d7:db:40:9d:97:12:aa:
         ad:70:7b:07:7d:8d:76:06:18:51:07:f0:b3:f6:14:35:5d:18:
         5e:65:45:bd:6c:74:56:fd:0b:18:17:05:b8:cd:eb:f0:61:36:
         a4:c3:d9:55:b1:7b:1c:61:0e:42:a7:05:c8:56:d2:f6:37:c9:
         31:8c:36:65:99:9c:ba:9f:31:3d:62:21:76:fe:11:af:70:46:
         df:c8:00:94:e1:81:31:85:cc:6c:ec:4b:f3:42:b4:20:36:ad:
         cb:91:4a:4a
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUU4R9Zlcw7KNAM+Vq/A16UXfEi+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA4MjIxMzQ0NDFaFw0yNjA4MjExMzQ5NDFaMDMxMTAvBgNV
BAMTKDRFOTFDOEE2MDFDODczRjU2MzI3NTEyQTA0OTMzM0YyNEY4QjVGRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfrE2mHG3cMIF0cn/7zwOt1xGe
k+yro7HK05Z4dYRVUQOIvCUyc9g49eiuiHCmxcuCytjuZN/GK+vI8o6xwTcshdVo
wc+GyxFyel5uDQ12+eTPItWORGkDB/Jbz4hk46YCgKW/wfW1tqI5Y7DGoRPsY+J1
9jzg/FoXXr84YQi1TIrOPm5psgjB94w81G1e8oCn9oeAmvRxtuYRemV15uohih5a
9zp3SglXNv3HMQEYrpti2G5NZRFGYGjdGi2mZKfpi50co7zf1rZhRv17YmJTEubZ
xQZz33NeU0LbmAr7pqFG6NDL1LYKQPyPGkcEcu7Gm4OKfUle3KsfWVLxpLJVAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBROkcimAchz9WMn
USoEkzPyT4tf8zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmlI
TnA5eEZqVGVncjNLVWtCSndCU1hQZjk1aThIZDE4dnVaYW03MUEyZTYvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zp
SE5wOXhGalRlZ3IzS1VrQkp3QlNYUGY5NWk4SGQxOHZ1WmFtNzFBMmU2LzAvNEU5
MUM4QTYwMUM4NzNGNTYzMjc1MTJBMDQ5MzMzRjI0RjhCNUZGMy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQChP/AMA0EAgACMAcDBQAoBCC8MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQJPzANBgkqhkiG9w0BAQsFAAOCAQEAAxZBm0faTfCIlOub
sh0BJcJ+mPZt3JBrlhp6PXdIznA0FywwXQfPsGlQvJX/O5VeNTVS+Hu4SlnLZPBH
6t9TZSmpTDsSKnsAJ1gEsS49aCec2P1rrvWE+3gfgMBtZscBLt2bSoi88GQTmxmS
++jBOUTLwUghPKWptSR2JS5cm05acgErqxP3lUY7rWAXUrRTd40GaL3qfyy9OKTX
20CdlxKqrXB7B32NdgYYUQfws/YUNV0YXmVFvWx0Vv0LGBcFuM3r8GE2pMPZVbF7
HGEOQqcFyFbS9jfJMYw2ZZmcup8xPWIhdv4Rr3BG38gAlOGBMYXMbOxL80K0IDat
y5FKSg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 06:58:12 2025 by rpki-client