Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/542883AF217B55CA895036F0F5CDBCE406386E83.cer
File:                     542883AF217B55CA895036F0F5CDBCE406386E83.cer (raw, json)
Hash identifier:          32kfrggk2tjdOjAsQ2e8ERuW3zSmmTfU+cuilGYG5Es=
Subject key identifier:   54:28:83:AF:21:7B:55:CA:89:50:36:F0:F5:CD:BC:E4:06:38:6E:83
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2854782D72D3F2FDC1D3351B86BC106855A1FBB0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Oct 2025 07:06:04 +0000
Certificate not after:    Wed 07 Oct 2026 07:11:04 +0000
Subordinate resources:    AS: 270931
                          IP: 200.142.224.0/22
                          IP: 2804:73b0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 15:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:54:78:2d:72:d3:f2:fd:c1:d3:35:1b:86:bc:10:68:55:a1:fb:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  8 07:06:04 2025 GMT
            Not After : Oct  7 07:11:04 2026 GMT
        Subject: CN=542883AF217B55CA895036F0F5CDBCE406386E83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:82:6c:14:cf:6b:05:05:83:33:ef:14:5e:
                    ab:a5:cb:d9:60:a7:19:cb:14:5e:93:d0:cb:d6:06:
                    6d:45:3c:41:9b:fd:58:15:54:fa:82:3c:d9:a2:58:
                    3e:1b:f4:67:c0:b2:b8:b2:40:5b:1c:8d:d3:2e:c4:
                    99:7e:92:47:8e:b0:83:c1:5d:c1:fe:4b:60:f2:43:
                    4a:a6:1e:16:91:b6:93:11:6d:18:5b:8e:71:1a:d9:
                    70:66:34:e4:e1:34:9c:6d:18:20:39:df:b7:26:af:
                    84:df:93:ba:d3:df:d4:2d:81:18:1a:b1:45:3c:d0:
                    e3:77:e0:8e:2e:e6:42:b3:fd:c3:05:ac:54:1f:5d:
                    7d:80:46:c5:48:99:3c:f8:18:c2:6c:7d:45:2d:dc:
                    1f:03:37:6d:a9:5b:55:b5:ee:5f:7a:59:ed:cc:52:
                    7c:50:6e:4f:cb:7e:fa:55:97:0e:32:c7:09:92:a2:
                    61:3f:0f:fe:d3:3f:d9:05:5a:09:ad:06:33:e2:52:
                    f9:f5:57:74:2e:78:8c:95:58:4b:2f:68:f8:ce:e1:
                    06:aa:e8:be:34:82:2b:2b:e1:55:f8:da:eb:69:a3:
                    55:61:fb:9e:93:9f:e0:66:03:e4:e7:69:50:a1:29:
                    e7:b6:fc:58:29:b9:7b:75:d7:e0:fb:ba:a4:b0:82:
                    c9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:28:83:AF:21:7B:55:CA:89:50:36:F0:F5:CD:BC:E4:06:38:6E:83
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5JD5rTaJA49jQSfLa8fXCg6vrn2RicNGVuCp9tFzveXn/0/542883AF217B55CA895036F0F5CDBCE406386E83.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.142.224.0/22
                IPv6:
                  2804:73b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270931

    Signature Algorithm: sha256WithRSAEncryption
         6e:59:42:20:1c:14:aa:91:88:6c:08:f7:62:b4:63:70:4f:74:
         0b:8a:b9:ed:53:1d:e0:a7:de:7b:50:0f:3e:fd:df:1b:20:70:
         1a:b3:c9:e1:22:ba:0d:ad:5d:68:58:cc:30:5d:ca:20:53:75:
         ab:64:b4:f3:f2:e3:27:bc:ed:8e:4b:94:0d:b4:2e:f6:63:e0:
         93:06:b1:ac:eb:82:64:da:59:2a:28:a4:d1:1b:c0:3a:35:82:
         9b:f4:32:2e:66:bf:15:9e:27:87:b5:03:82:3e:0e:cd:d4:f4:
         c6:6f:4b:e0:15:3e:cd:a6:71:f0:4d:a3:95:05:ad:4d:2c:b7:
         c2:5c:1e:fe:49:a7:8c:67:6a:3f:2c:2a:d2:56:bb:2f:06:14:
         68:a8:ee:42:7a:7d:9e:42:ab:85:76:4a:05:48:01:f0:b6:37:
         fb:c8:41:32:9f:86:51:69:a1:3b:b7:6f:27:62:0a:c6:33:ab:
         03:bc:3f:17:2f:14:b6:6f:45:6c:ed:c1:bb:da:0d:27:dd:56:
         3e:0c:1b:a1:07:db:a8:40:f3:67:7f:6a:72:23:7e:c9:b1:f5:
         79:ec:29:b1:32:a6:38:50:3e:5c:1d:b6:01:6e:5d:93:ba:64:
         91:31:35:19:db:e5:1f:99:d3:5f:ba:d4:e0:e4:d0:d8:63:76:
         4b:62:41:df
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUKFR4LXLT8v3B0zUbhrwQaFWh+7AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEwMDgwNzA2MDRaFw0yNjEwMDcwNzExMDRaMDMxMTAvBgNV
BAMTKDU0Mjg4M0FGMjE3QjU1Q0E4OTUwMzZGMEY1Q0RCQ0U0MDYzODZFODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9YoJsFM9rBQWDM+8UXquly9lg
pxnLFF6T0MvWBm1FPEGb/VgVVPqCPNmiWD4b9GfAsriyQFscjdMuxJl+kkeOsIPB
XcH+S2DyQ0qmHhaRtpMRbRhbjnEa2XBmNOThNJxtGCA537cmr4Tfk7rT39QtgRga
sUU80ON34I4u5kKz/cMFrFQfXX2ARsVImTz4GMJsfUUt3B8DN22pW1W17l96We3M
UnxQbk/LfvpVlw4yxwmSomE/D/7TP9kFWgmtBjPiUvn1V3QueIyVWEsvaPjO4Qaq
6L40gisr4VX42utpo1Vh+56Tn+BmA+TnaVChKee2/FgpuXt11+D7uqSwgsl7AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRUKIOvIXtVyolQ
NvD1zbzkBjhugzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNUpE
NXJUYUpBNDlqUVNmTGE4ZlhDZzZ2cm4yUmljTkdWdUNwOXRGenZlWG4vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVK
RDVyVGFKQTQ5alFTZkxhOGZYQ2c2dnJuMlJpY05HVnVDcDl0Rnp2ZVhuLzAvNTQy
ODgzQUYyMTdCNTVDQTg5NTAzNkYwRjVDREJDRTQwNjM4NkU4My5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyI7gMA0EAgACMAcDBQAoBHOwMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQiUzANBgkqhkiG9w0BAQsFAAOCAQEAbllCIBwUqpGIbAj3
YrRjcE90C4q57VMd4Kfee1APPv3fGyBwGrPJ4SK6Da1daFjMMF3KIFN1q2S08/Lj
J7ztjkuUDbQu9mPgkwaxrOuCZNpZKiik0RvAOjWCm/QyLma/FZ4nh7UDgj4OzdT0
xm9L4BU+zaZx8E2jlQWtTSy3wlwe/kmnjGdqPywq0la7LwYUaKjuQnp9nkKrhXZK
BUgB8LY3+8hBMp+GUWmhO7dvJ2IKxjOrA7w/Fy8Utm9FbO3Bu9oNJ91WPgwboQfb
qEDzZ39qciN+ybH1eewpsTKmOFA+XB22AW5dk7pkkTE1GdvlH5nTX7rU4OTQ2GN2
S2JB3w==
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:53:54 2025 by rpki-client