Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/722C40902C50F6C00FEFB65E6CAB6BE0A009CFC1.cer
File:                     722C40902C50F6C00FEFB65E6CAB6BE0A009CFC1.cer (raw, json)
Hash identifier:          aiheB6t3fRzeC7jBFdFNVOi+bagyaQkDpo50X4o7VgA=
Subject key identifier:   72:2C:40:90:2C:50:F6:C0:0F:EF:B6:5E:6C:AB:6B:E0:A0:09:CF:C1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2E6D47AC9F757558CDC7F5B35257A40BA49A41A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9P5K1ZWLQouNfCtpsuVdwQa8RxzwZJsUyRuNF6aGL62U/0/722C40902C50F6C00FEFB65E6CAB6BE0A009CFC1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9P5K1ZWLQouNfCtpsuVdwQa8RxzwZJsUyRuNF6aGL62U/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Oct 2025 17:52:25 +0000
Certificate not after:    Mon 12 Oct 2026 17:57:25 +0000
Subordinate resources:    AS: 270534
                          IP: 187.103.204.0/22
                          IP: 2804:6d74::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:6d:47:ac:9f:75:75:58:cd:c7:f5:b3:52:57:a4:0b:a4:9a:41:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 13 17:52:25 2025 GMT
            Not After : Oct 12 17:57:25 2026 GMT
        Subject: CN=722C40902C50F6C00FEFB65E6CAB6BE0A009CFC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f7:55:da:cb:a7:d2:2c:c8:f7:ff:e7:9a:f2:
                    29:34:fb:20:05:28:b7:b6:99:6a:06:d7:6e:8b:b2:
                    57:34:bc:ce:e9:2b:09:c3:83:4e:a3:10:7a:26:e9:
                    24:d0:74:31:0b:a0:a4:cc:f5:9a:19:8b:d8:19:d5:
                    e8:01:1a:32:7f:da:3c:5a:da:18:3b:62:9d:cf:1a:
                    7a:05:24:12:4c:c0:fe:ee:02:1a:6e:56:15:ae:7a:
                    a4:b1:fc:5d:14:61:5e:43:d2:a9:a1:67:c1:df:13:
                    e1:ff:08:9e:c2:6f:42:f8:56:92:4b:59:56:32:47:
                    54:cd:51:4c:e8:a6:5d:3f:64:01:e0:8b:e0:ed:82:
                    d3:58:54:16:57:c2:77:04:ee:fa:96:50:6a:b7:7a:
                    3d:0f:79:1d:e6:6f:95:fa:3f:7e:8d:a1:75:53:5d:
                    d3:21:54:34:cb:f0:04:59:c4:d2:78:79:4e:84:dd:
                    5f:e6:70:a4:7a:a2:9a:6f:30:5f:32:9b:ee:7d:c8:
                    c8:84:1b:67:ba:0a:eb:12:cb:17:27:ef:c3:cc:05:
                    17:fc:bc:4b:a4:30:43:e6:38:f3:a2:13:ee:d4:da:
                    5f:92:43:50:dc:dd:33:1b:db:83:0b:e7:39:54:eb:
                    e9:b3:5a:40:ae:cf:45:bc:3b:60:f7:4b:8c:1f:22:
                    4c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:2C:40:90:2C:50:F6:C0:0F:EF:B6:5E:6C:AB:6B:E0:A0:09:CF:C1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9P5K1ZWLQouNfCtpsuVdwQa8RxzwZJsUyRuNF6aGL62U/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9P5K1ZWLQouNfCtpsuVdwQa8RxzwZJsUyRuNF6aGL62U/0/722C40902C50F6C00FEFB65E6CAB6BE0A009CFC1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.204.0/22
                IPv6:
                  2804:6d74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270534

    Signature Algorithm: sha256WithRSAEncryption
         b5:a5:c3:d1:a8:54:87:6f:55:1b:6b:7a:8f:21:67:b3:42:4a:
         09:30:19:de:df:23:b1:b3:51:76:f2:2b:49:84:61:90:fc:6e:
         47:97:51:f0:eb:8d:18:a8:99:ae:f1:54:cc:be:29:30:64:a9:
         e5:4e:2d:7c:e5:bb:9c:60:34:11:f4:7d:b1:36:b3:b6:b2:52:
         e3:5c:0d:bd:df:9d:9c:ed:9a:72:8a:23:83:88:63:92:d1:f4:
         72:04:fd:07:8a:58:15:a7:ee:df:80:1f:7a:6f:5d:5d:da:ec:
         08:7b:05:5e:a0:af:23:23:6b:8d:01:c5:c9:21:a0:15:e9:f5:
         36:66:1b:5a:c7:6c:0e:af:c3:58:dd:e2:3b:d3:16:3c:92:e6:
         cb:89:9e:f8:e9:49:c5:a8:07:fa:fa:10:5e:7a:db:26:35:90:
         20:b0:b2:9a:f9:7d:a4:9b:2c:20:e9:58:02:5a:ee:64:e0:7b:
         76:f8:9a:bd:54:8d:01:d3:d6:3e:fb:55:81:85:51:3a:d7:43:
         2c:94:c3:f7:0b:1a:8e:f3:2b:7f:41:57:d7:49:f5:45:f7:45:
         20:a6:e7:63:51:d0:4c:92:5f:f8:da:29:54:18:81:d2:b5:15:
         24:a7:1d:fc:95:7a:e4:d4:b1:dc:8a:e1:7f:97:ff:86:c8:c3:
         be:70:ac:9b
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIULm1HrJ91dVjNx/WzUlekC6SaQaMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEwMTMxNzUyMjVaFw0yNjEwMTIxNzU3MjVaMDMxMTAvBgNV
BAMTKDcyMkM0MDkwMkM1MEY2QzAwRkVGQjY1RTZDQUI2QkUwQTAwOUNGQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx91Xay6fSLMj3/+ea8ik0+yAF
KLe2mWoG126Lslc0vM7pKwnDg06jEHom6STQdDELoKTM9ZoZi9gZ1egBGjJ/2jxa
2hg7Yp3PGnoFJBJMwP7uAhpuVhWueqSx/F0UYV5D0qmhZ8HfE+H/CJ7Cb0L4VpJL
WVYyR1TNUUzopl0/ZAHgi+DtgtNYVBZXwncE7vqWUGq3ej0PeR3mb5X6P36NoXVT
XdMhVDTL8ARZxNJ4eU6E3V/mcKR6oppvMF8ym+59yMiEG2e6CusSyxcn78PMBRf8
vEukMEPmOPOiE+7U2l+SQ1Dc3TMb24ML5zlU6+mzWkCuz0W8O2D3S4wfIkwRAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRyLECQLFD2wA/v
tl5sq2vgoAnPwTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVA1
SzFaV0xRb3VOZkN0cHN1VmR3UWE4Unh6d1pKc1V5UnVORjZhR0w2MlUvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlQ
NUsxWldMUW91TmZDdHBzdVZkd1FhOFJ4endaSnNVeVJ1TkY2YUdMNjJVLzAvNzIy
QzQwOTAyQzUwRjZDMDBGRUZCNjVFNkNBQjZCRTBBMDA5Q0ZDMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCu2fMMA0EAgACMAcDBQAoBG10MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQgxjANBgkqhkiG9w0BAQsFAAOCAQEAtaXD0ahUh29VG2t6
jyFns0JKCTAZ3t8jsbNRdvIrSYRhkPxuR5dR8OuNGKiZrvFUzL4pMGSp5U4tfOW7
nGA0EfR9sTaztrJS41wNvd+dnO2acoojg4hjktH0cgT9B4pYFafu34Afem9dXdrs
CHsFXqCvIyNrjQHFySGgFen1NmYbWsdsDq/DWN3iO9MWPJLmy4me+OlJxagH+voQ
XnrbJjWQILCymvl9pJssIOlYAlruZOB7dviavVSNAdPWPvtVgYVROtdDLJTD9wsa
jvMrf0FX10n1RfdFIKbnY1HQTJJf+NopVBiB0rUVJKcd/JV65NSx3Irhf5f/hsjD
vnCsmw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:15:37 2025 by rpki-client