Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer
File:                     624B8344A542767D88F5B544B3EA21DADC8EA1C8.cer (raw, json)
Hash identifier:          bxyOJC2bMuzPWdRwkItV2x6x/s+xvdEUZl/rygnT2fA=
Subject key identifier:   62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       255D1DF5D4CE9DBDA179F7487FD397DE4E6A618E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Sep 2025 17:21:16 +0000
Certificate not after:    Mon 28 Sep 2026 17:26:16 +0000
Subordinate resources:    AS: 52923
                          IP: 177.184.176.0/20
                          IP: 2804:acc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5d:1d:f5:d4:ce:9d:bd:a1:79:f7:48:7f:d3:97:de:4e:6a:61:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 29 17:21:16 2025 GMT
            Not After : Sep 28 17:26:16 2026 GMT
        Subject: CN=624B8344A542767D88F5B544B3EA21DADC8EA1C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e8:30:e4:2e:8b:dc:f2:8a:b0:16:9d:e5:49:
                    98:c5:1e:6f:4c:b1:08:a9:a0:60:c3:1e:81:b9:af:
                    2e:fa:b7:ad:f1:6c:37:a2:3a:ae:c2:82:60:34:6f:
                    d6:2c:f2:b4:bb:76:17:0a:50:cf:f6:93:56:2a:9c:
                    55:75:83:da:51:58:f1:1d:67:58:b4:37:b3:85:75:
                    64:f3:35:27:1e:1a:6e:69:aa:c6:22:d6:73:20:cd:
                    e7:32:da:37:dc:d4:95:e8:e2:78:86:db:75:5d:28:
                    c8:3c:da:19:67:fc:f6:e0:f7:04:22:1b:30:7f:74:
                    70:f2:72:a3:f6:a3:49:35:35:57:8b:82:f3:39:55:
                    14:86:b2:1a:e1:e2:de:e9:ba:1c:0c:10:07:d4:c3:
                    9b:01:f7:d3:6d:f6:8a:bd:8f:1c:6b:2d:60:80:08:
                    49:11:89:28:c9:a9:de:18:77:41:a2:da:2f:71:12:
                    02:b9:f1:22:51:bd:c1:3c:01:71:82:6c:8f:c6:4b:
                    c8:88:c2:cf:0e:0c:75:a6:fd:98:62:6b:fd:f9:64:
                    b1:4f:75:c7:6b:b9:2b:22:fb:27:da:f7:c3:6f:a6:
                    55:76:53:71:fe:3f:58:11:1d:61:97:ef:f4:34:88:
                    ca:56:20:79:5b:5e:06:70:fc:0c:6b:b3:cd:3c:6d:
                    4a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:4B:83:44:A5:42:76:7D:88:F5:B5:44:B3:EA:21:DA:DC:8E:A1:C8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FfSM8YWcWKWSftQERgf9MYV2EQDvf6oK3NhrAobQtK5K/0/624B8344A542767D88F5B544B3EA21DADC8EA1C8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.176.0/20
                IPv6:
                  2804:acc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52923

    Signature Algorithm: sha256WithRSAEncryption
         7c:cd:e3:2b:f7:a4:c5:b5:13:5c:13:3b:0f:91:67:72:fc:c7:
         ec:80:b1:79:fb:90:ba:ac:fc:e0:61:8f:22:5d:17:1f:08:1b:
         84:05:b9:71:8a:3f:04:03:12:25:5a:b0:76:48:c2:a4:63:e6:
         4d:d6:db:3a:8c:78:8b:9f:34:4f:be:aa:5c:b8:aa:2c:0d:62:
         b7:59:78:ad:b2:54:bf:eb:d0:0a:50:f7:09:87:0a:49:6b:ab:
         ec:8d:8b:4f:a9:bf:9c:68:79:50:d1:35:11:29:d6:10:fb:18:
         02:fe:26:bd:77:47:dc:aa:3d:77:f7:79:40:a5:25:e3:f2:3b:
         4a:e4:48:13:70:3a:76:a9:53:34:4a:fe:08:45:fa:21:8c:b2:
         17:49:83:88:e7:d6:f4:06:f6:16:55:06:e3:f1:8c:9a:90:96:
         f5:d4:0f:0d:d0:ef:e5:ac:9c:dc:64:95:ac:0a:e7:07:23:a8:
         75:bf:91:75:03:32:f1:ad:fb:20:65:4e:14:b0:95:54:5a:33:
         a0:16:2f:28:86:1d:69:8f:5b:11:83:1e:05:c1:ed:0e:40:f1:
         24:35:3f:1f:6c:0a:06:18:73:ab:a3:87:cc:17:d6:9c:a7:b1:
         f1:c5:a0:b4:b8:6c:4c:00:c6:86:2a:c8:51:ae:70:a8:fc:4d:
         f4:74:6e:1d
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUJV0d9dTOnb2hefdIf9OX3k5qYY4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA5MjkxNzIxMTZaFw0yNjA5MjgxNzI2MTZaMDMxMTAvBgNV
BAMTKDYyNEI4MzQ0QTU0Mjc2N0Q4OEY1QjU0NEIzRUEyMURBREM4RUExQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/6DDkLovc8oqwFp3lSZjFHm9M
sQipoGDDHoG5ry76t63xbDeiOq7CgmA0b9Ys8rS7dhcKUM/2k1YqnFV1g9pRWPEd
Z1i0N7OFdWTzNSceGm5pqsYi1nMgzecy2jfc1JXo4niG23VdKMg82hln/Pbg9wQi
GzB/dHDycqP2o0k1NVeLgvM5VRSGshrh4t7puhwMEAfUw5sB99Nt9oq9jxxrLWCA
CEkRiSjJqd4Yd0Gi2i9xEgK58SJRvcE8AXGCbI/GS8iIws8ODHWm/Zhia/35ZLFP
dcdruSsi+yfa98NvplV2U3H+P1gRHWGX7/Q0iMpWIHlbXgZw/Axrs808bUqBAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRiS4NEpUJ2fYj1
tUSz6iHa3I6hyDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmZT
TThZV2NXS1dTZnRRRVJnZjlNWVYyRVFEdmY2b0szTmhyQW9iUXRLNUsvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zm
U004WVdjV0tXU2Z0UUVSZ2Y5TVlWMkVRRHZmNm9LM05ockFvYlF0SzVLLzAvNjI0
QjgzNDRBNTQyNzY3RDg4RjVCNTQ0QjNFQTIxREFEQzhFQTFDOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQEsbiwMA0EAgACMAcDBQAoBArMMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwDOuzANBgkqhkiG9w0BAQsFAAOCAQEAfM3jK/ekxbUTXBM7
D5FncvzH7ICxefuQuqz84GGPIl0XHwgbhAW5cYo/BAMSJVqwdkjCpGPmTdbbOox4
i580T76qXLiqLA1it1l4rbJUv+vQClD3CYcKSWur7I2LT6m/nGh5UNE1ESnWEPsY
Av4mvXdH3Ko9d/d5QKUl4/I7SuRIE3A6dqlTNEr+CEX6IYyyF0mDiOfW9Ab2FlUG
4/GMmpCW9dQPDdDv5ayc3GSVrArnByOodb+RdQMy8a37IGVOFLCVVFozoBYvKIYd
aY9bEYMeBcHtDkDxJDU/H2wKBhhzq6OHzBfWnKex8cWgtLhsTADGhirIUa5wqPxN
9HRuHQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:50:14 2025 by rpki-client