Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/88FFBC1DCE1883EA3D495F3FC58416D571724853.cer
File:                     88FFBC1DCE1883EA3D495F3FC58416D571724853.cer (raw, json)
Hash identifier:          NiwI2EDaJuSE4q0GwaTgDFkEg1aj4Ktu1Gt4Dhdu3Z4=
Subject key identifier:   88:FF:BC:1D:CE:18:83:EA:3D:49:5F:3F:C5:84:16:D5:71:72:48:53
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6061A22881024FD2FE20B31293464F487B5393D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/88FFBC1DCE1883EA3D495F3FC58416D571724853.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Sep 2025 16:47:53 +0000
Certificate not after:    Mon 21 Sep 2026 16:52:53 +0000
Subordinate resources:    AS: 273412
                          IP: 200.196.40.0/22
                          IP: 2804:8e3c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:61:a2:28:81:02:4f:d2:fe:20:b3:12:93:46:4f:48:7b:53:93:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 22 16:47:53 2025 GMT
            Not After : Sep 21 16:52:53 2026 GMT
        Subject: CN=88FFBC1DCE1883EA3D495F3FC58416D571724853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:72:1e:16:ff:65:8e:8e:ee:5d:c3:9e:89:96:
                    6b:79:64:30:ae:f2:29:e7:f4:80:af:c8:23:9c:8e:
                    19:76:84:18:d3:b8:ed:c1:c9:0c:42:12:5c:20:f6:
                    02:cc:29:98:0c:b1:3b:95:78:20:f4:1d:ce:0b:e2:
                    f1:be:3f:f0:fa:0e:5d:7e:b3:4b:2e:76:33:b1:59:
                    66:94:91:3b:fa:bc:5d:d6:bc:e3:05:87:bb:7d:0f:
                    5c:a9:73:ba:53:4a:c6:67:9d:77:af:e6:13:47:9f:
                    d2:1d:e6:cb:cb:c0:16:2b:56:0a:6e:aa:d9:b1:1d:
                    dd:e2:9e:fe:72:58:37:33:9a:50:8a:58:87:06:41:
                    2f:f2:62:a5:2f:16:c0:e9:87:3c:8b:e5:1e:56:fb:
                    7a:0e:14:af:35:be:a0:b8:d4:c9:b1:cf:cc:f0:c3:
                    8d:56:c6:f1:3d:71:b8:c7:96:4f:f8:68:1f:69:64:
                    76:c4:13:30:0f:ea:8e:c9:09:0e:28:ab:55:36:28:
                    0e:54:f8:91:c5:1f:7b:82:30:5a:59:f6:4c:d8:ab:
                    81:da:fa:57:85:ff:2e:97:32:c0:45:b9:73:95:fb:
                    22:a8:41:52:6e:1f:f6:01:da:8f:3b:26:cb:0b:da:
                    5b:dc:f1:65:a8:3a:80:b4:2b:44:cf:8a:df:1f:c5:
                    e1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                88:FF:BC:1D:CE:18:83:EA:3D:49:5F:3F:C5:84:16:D5:71:72:48:53
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/88FFBC1DCE1883EA3D495F3FC58416D571724853.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.40.0/22
                IPv6:
                  2804:8e3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273412

    Signature Algorithm: sha256WithRSAEncryption
         48:cd:8e:8a:98:be:63:b8:f0:2e:f3:40:0d:19:b4:6e:80:25:
         b9:80:52:b4:45:44:1c:d2:80:f2:89:f4:79:17:f1:d9:5b:92:
         88:e9:89:83:e8:77:14:b3:e3:f8:a4:4b:8f:75:33:e9:22:c6:
         cd:1a:23:04:fc:91:f1:e2:8a:2e:0e:85:84:f0:06:02:f9:10:
         9d:52:36:4e:20:b3:86:1b:1c:e8:43:59:e8:14:6c:e0:a2:1d:
         90:9c:cc:c5:d9:92:8e:0c:0d:f5:ac:16:4e:29:19:6a:14:9b:
         e9:ad:76:51:7b:3c:88:8c:13:74:6c:76:71:5f:fb:c1:83:de:
         0b:a2:ae:e9:98:93:dc:cf:00:6c:f0:3b:fc:ac:1b:fc:aa:da:
         91:57:20:45:f0:a8:6e:ab:55:1a:cc:ec:91:56:26:74:06:e2:
         47:dc:9c:d7:c8:7d:9b:d4:55:5d:be:16:24:49:b1:22:cc:2d:
         1c:cf:ad:df:24:ed:1e:46:9b:88:fd:7f:58:a2:4e:5e:f3:fe:
         7d:7d:84:d6:27:50:bf:4c:04:db:16:76:a2:78:19:15:5e:e1:
         ca:f5:e1:54:bd:cf:e2:83:01:db:59:16:ca:e9:be:42:92:96:
         9c:89:9e:89:db:e0:3f:1c:c3:c1:71:3d:c1:49:0c:2d:f9:b1:
         de:fc:0e:3f
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUYGGiKIECT9L+ILMSk0ZPSHtTk9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA5MjIxNjQ3NTNaFw0yNjA5MjExNjUyNTNaMDMxMTAvBgNV
BAMTKDg4RkZCQzFEQ0UxODgzRUEzRDQ5NUYzRkM1ODQxNkQ1NzE3MjQ4NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEch4W/2WOju5dw56Jlmt5ZDCu
8inn9ICvyCOcjhl2hBjTuO3ByQxCElwg9gLMKZgMsTuVeCD0Hc4L4vG+P/D6Dl1+
s0sudjOxWWaUkTv6vF3WvOMFh7t9D1ypc7pTSsZnnXev5hNHn9Id5svLwBYrVgpu
qtmxHd3inv5yWDczmlCKWIcGQS/yYqUvFsDphzyL5R5W+3oOFK81vqC41Mmxz8zw
w41WxvE9cbjHlk/4aB9pZHbEEzAP6o7JCQ4oq1U2KA5U+JHFH3uCMFpZ9kzYq4Ha
+leF/y6XMsBFuXOV+yKoQVJuH/YB2o87JssL2lvc8WWoOoC0K0TPit8fxeHzAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSI/7wdzhiD6j1J
Xz/FhBbVcXJIUzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNkI4
Z0puZTd2NXcxQ3Y3dGdUZGhiak5kWUt0UjQ0YzVwcUhRM2NIQ1BWdjEvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZC
OGdKbmU3djV3MUN2N3RnVGRoYmpOZFlLdFI0NGM1cHFIUTNjSENQVnYxLzAvODhG
RkJDMURDRTE4ODNFQTNENDk1RjNGQzU4NDE2RDU3MTcyNDg1My5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyMQoMA0EAgACMAcDBQAoBI48MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQsBDANBgkqhkiG9w0BAQsFAAOCAQEASM2Oipi+Y7jwLvNA
DRm0boAluYBStEVEHNKA8on0eRfx2VuSiOmJg+h3FLPj+KRLj3Uz6SLGzRojBPyR
8eKKLg6FhPAGAvkQnVI2TiCzhhsc6ENZ6BRs4KIdkJzMxdmSjgwN9awWTikZahSb
6a12UXs8iIwTdGx2cV/7wYPeC6Ku6ZiT3M8AbPA7/Kwb/KrakVcgRfCobqtVGszs
kVYmdAbiR9yc18h9m9RVXb4WJEmxIswtHM+t3yTtHkabiP1/WKJOXvP+fX2E1idQ
v0wE2xZ2ongZFV7hyvXhVL3P4oMB21kWyum+QpKWnImeidvgPxzDwXE9wUkMLfmx
3vwOPw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:10:57 2025 by rpki-client