Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.cer
File:                     5CEFAC68C13B3048507970843DFCA0B39E32C2F9.cer (raw, json)
Hash identifier:          v0t/tCyWE18q8m2rFSZ5P/Z8YPbKnOprCHW+Zv8etxw=
Subject key identifier:   5C:EF:AC:68:C1:3B:30:48:50:79:70:84:3D:FC:A0:B3:9E:32:C2:F9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       71CD33E15DB381426BF20F48774B3851743D8E15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 01 Oct 2025 16:57:14 +0000
Certificate not after:    Wed 30 Sep 2026 17:02:14 +0000
Subordinate resources:    AS: 273638
                          IP: 2804:89f8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:cd:33:e1:5d:b3:81:42:6b:f2:0f:48:77:4b:38:51:74:3d:8e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  1 16:57:14 2025 GMT
            Not After : Sep 30 17:02:14 2026 GMT
        Subject: CN=5CEFAC68C13B3048507970843DFCA0B39E32C2F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:dd:97:66:ff:b7:f8:8c:42:35:26:0c:5f:bf:
                    37:5e:aa:10:48:b8:46:b2:07:06:ef:1e:89:a9:1a:
                    13:21:dd:df:d2:b8:35:4c:33:c8:2b:00:eb:2e:4e:
                    97:d1:41:1f:c9:f7:80:17:4b:4e:aa:0c:72:fb:3d:
                    bb:3f:cd:52:fc:c9:33:13:a3:ab:93:03:6d:15:c5:
                    f1:e2:8f:78:9e:b0:a0:79:b8:c3:c3:03:81:32:3f:
                    31:f5:a3:91:97:51:29:f3:97:a9:49:19:92:2d:01:
                    b0:81:e7:21:fe:a9:7d:c4:d8:3c:78:53:e7:ef:bf:
                    20:4e:b8:92:67:59:fc:ff:6a:0b:1e:dc:f7:01:37:
                    63:ea:2b:89:18:2b:47:af:af:0a:fd:7d:02:15:8b:
                    27:06:4a:1b:7b:d8:12:9e:15:49:72:75:b8:50:37:
                    47:6c:11:bb:07:aa:fc:61:bf:9d:b5:d4:4b:48:92:
                    94:ea:fa:b9:96:11:c8:aa:a7:de:dc:42:df:e3:8c:
                    c3:d1:92:56:a6:62:10:8c:b5:d9:3b:b9:c1:29:e9:
                    d3:13:43:6c:35:4b:b7:26:13:30:aa:49:24:bc:19:
                    e1:a2:67:73:4d:3c:48:36:10:33:6a:e1:8f:b2:e5:
                    12:33:d1:28:4b:fa:a1:5d:d3:32:d1:ed:78:8a:93:
                    f8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5C:EF:AC:68:C1:3B:30:48:50:79:70:84:3D:FC:A0:B3:9E:32:C2:F9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/5CEFAC68C13B3048507970843DFCA0B39E32C2F9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:89f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273638

    Signature Algorithm: sha256WithRSAEncryption
         84:01:61:b9:80:37:dd:a3:a0:4d:1d:c9:e2:d2:c0:dc:c6:35:
         b7:b0:35:ba:4e:bb:ea:57:d6:eb:0a:5e:50:5b:43:5e:97:ca:
         21:8e:88:80:64:fb:56:19:f5:bd:e0:3f:6d:af:ea:76:cb:b8:
         01:16:f8:5d:3a:ef:90:c5:41:a4:62:d0:c9:e0:09:8b:68:c9:
         10:29:42:4e:08:41:14:42:fc:a5:59:fd:b0:92:e2:ef:a5:73:
         2f:52:c6:7c:34:20:32:cb:79:8b:a9:b0:f3:6b:fd:fa:3e:82:
         b4:60:24:13:1c:ca:5c:ed:4d:00:54:d4:7f:8b:0c:fa:66:ac:
         d8:05:1d:85:2e:6e:ea:12:96:47:e3:8f:b2:6c:4a:5d:ac:63:
         98:c5:76:f9:66:40:3d:fa:21:01:f0:62:5b:c2:82:50:c6:61:
         e9:5c:1d:a4:d5:fa:d6:43:bf:24:be:fa:52:74:e9:89:7a:bd:
         93:0e:18:71:8e:52:0e:f0:14:29:68:94:38:36:e9:02:dc:aa:
         77:2a:29:ca:cc:14:6c:d6:a0:08:04:37:cd:73:6c:1f:34:d0:
         17:28:0b:a6:c7:be:f9:89:82:8a:b1:13:53:64:40:35:41:c6:
         af:73:a4:9c:ae:35:75:cf:a6:93:96:1c:ad:5b:48:1f:63:13:
         ee:ca:61:62
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUcc0z4V2zgUJr8g9Id0s4UXQ9jhUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEwMDExNjU3MTRaFw0yNjA5MzAxNzAyMTRaMDMxMTAvBgNV
BAMTKDVDRUZBQzY4QzEzQjMwNDg1MDc5NzA4NDNERkNBMEIzOUUzMkMyRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi3Zdm/7f4jEI1JgxfvzdeqhBI
uEayBwbvHompGhMh3d/SuDVMM8grAOsuTpfRQR/J94AXS06qDHL7Pbs/zVL8yTMT
o6uTA20VxfHij3iesKB5uMPDA4EyPzH1o5GXUSnzl6lJGZItAbCB5yH+qX3E2Dx4
U+fvvyBOuJJnWfz/agse3PcBN2PqK4kYK0evrwr9fQIViycGSht72BKeFUlydbhQ
N0dsEbsHqvxhv5211EtIkpTq+rmWEciqp97cQt/jjMPRklamYhCMtdk7ucEp6dMT
Q2w1S7cmEzCqSSS8GeGiZ3NNPEg2EDNq4Y+y5RIz0ShL+qFd0zLR7XiKk/j3AgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRc76xowTswSFB5
cIQ9/KCznjLC+TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNnhM
OEdqTWREMnp5N3I3TlhZclNWbVpueDU4MUJNYVhSaGVVdHpOUXR6aFQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZ4
TDhHak1kRDJ6eTdyN05YWXJTVm1abng1ODFCTWFYUmhlVXR6TlF0emhULzAvNUNF
RkFDNjhDMTNCMzA0ODUwNzk3MDg0M0RGQ0EwQjM5RTMyQzJGOS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASJ+DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
LOYwDQYJKoZIhvcNAQELBQADggEBAIQBYbmAN92joE0dyeLSwNzGNbewNbpOu+pX
1usKXlBbQ16XyiGOiIBk+1YZ9b3gP22v6nbLuAEW+F0675DFQaRi0MngCYtoyRAp
Qk4IQRRC/KVZ/bCS4u+lcy9Sxnw0IDLLeYupsPNr/fo+grRgJBMcylztTQBU1H+L
DPpmrNgFHYUubuoSlkfjj7JsSl2sY5jFdvlmQD36IQHwYlvCglDGYelcHaTV+tZD
vyS++lJ06Yl6vZMOGHGOUg7wFClolDg26QLcqncqKcrMFGzWoAgEN81zbB800Bco
C6bHvvmJgoqxE1NkQDVBxq9zpJyuNXXPppOWHK1bSB9jE+7KYWI=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:01:00 2025 by rpki-client