Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/84ACF88ACA346C7A6B6E07F73752AA4425C83727.cer
File:                     84ACF88ACA346C7A6B6E07F73752AA4425C83727.cer (raw, json)
Hash identifier:          kaM2uM7gNuxoHW6abfXiveGYtV2RFvYZgTmgv2movkg=
Subject key identifier:   84:AC:F8:8A:CA:34:6C:7A:6B:6E:07:F7:37:52:AA:44:25:C8:37:27
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6C893182411442962D98B67E3E43C672EBE342F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/84ACF88ACA346C7A6B6E07F73752AA4425C83727.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 14 Jul 2025 21:47:43 +0000
Certificate not after:    Mon 13 Jul 2026 21:52:43 +0000
Subordinate resources:    AS: 61776
                          IP: 143.208.136.0/22
                          IP: 177.53.136.0/22
                          IP: 200.196.136.0/22
                          IP: 2804:192c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 08:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:89:31:82:41:14:42:96:2d:98:b6:7e:3e:43:c6:72:eb:e3:42:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 14 21:47:43 2025 GMT
            Not After : Jul 13 21:52:43 2026 GMT
        Subject: CN=84ACF88ACA346C7A6B6E07F73752AA4425C83727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e6:0f:67:aa:cd:4d:83:6f:2d:a0:c5:2d:35:
                    af:77:3d:3d:28:9d:b5:e7:12:1f:57:cb:1d:3a:2e:
                    52:31:1f:79:a8:ef:61:2c:8e:96:d9:c5:e7:21:d8:
                    6f:ce:08:6c:f4:e5:e2:59:e0:b9:cb:2c:49:1a:a0:
                    27:87:d1:53:29:69:08:2d:59:b0:15:d2:c9:48:8a:
                    a0:58:45:7c:48:7f:a1:b4:7d:b6:38:27:8d:55:56:
                    8f:18:a7:c6:6c:2c:cd:e5:ca:21:45:ca:f8:fc:91:
                    61:7d:67:f3:67:16:3b:7a:19:14:bd:e9:04:b2:ac:
                    d3:e4:7b:10:35:ac:f7:e0:98:dc:6f:ee:d5:6d:01:
                    64:1f:77:34:b6:12:12:47:dd:04:82:f8:24:58:9e:
                    4a:e6:fd:e4:8b:1b:8d:dd:f9:c8:f2:54:64:3e:a8:
                    d7:6a:91:2e:e7:b7:5f:a1:1b:d7:4c:32:4a:72:dc:
                    15:ae:48:62:26:ed:aa:16:dd:53:53:19:b8:ab:79:
                    d6:9d:ce:07:71:2b:09:f9:b2:a9:e0:8d:34:81:3f:
                    d5:cf:30:f0:1f:4e:1e:98:04:c3:7e:d1:17:07:9f:
                    c1:88:f1:de:f1:b9:a6:2d:fa:3c:6d:51:86:a9:b6:
                    a0:36:61:39:e9:af:c8:1b:da:a3:f0:77:b1:74:c6:
                    ea:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                84:AC:F8:8A:CA:34:6C:7A:6B:6E:07:F7:37:52:AA:44:25:C8:37:27
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/84ACF88ACA346C7A6B6E07F73752AA4425C83727.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.136.0/22
                  177.53.136.0/22
                  200.196.136.0/22
                IPv6:
                  2804:192c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61776

    Signature Algorithm: sha256WithRSAEncryption
         42:26:26:55:18:ae:60:c6:e6:3c:18:4f:9c:ee:11:66:f9:12:
         d2:ac:f3:5e:1d:2c:88:7d:d8:84:1b:e0:62:7e:97:2c:1e:71:
         88:a5:7b:a4:87:e4:67:73:95:8e:58:94:92:2e:cc:60:72:53:
         d2:6d:78:81:8f:02:98:a0:63:5e:d6:7c:c4:27:88:72:94:cb:
         8e:c7:d7:01:b0:fb:89:cf:ea:cc:36:ca:c1:9c:5c:a7:7e:2b:
         1a:1e:0a:0c:f5:9d:85:ea:8f:0d:5f:3c:7a:5b:89:d0:e0:b7:
         a8:c9:f4:2d:74:63:4d:a0:19:de:f2:43:c6:a6:01:84:60:16:
         5f:16:58:c0:8c:60:57:26:41:2e:8d:c3:e1:ca:d3:ed:4c:fc:
         fc:73:6f:4e:73:41:35:50:4a:09:26:e7:ad:3e:d3:82:10:66:
         eb:77:e2:6d:2c:e7:35:e1:a8:dc:d9:e1:96:d6:49:b4:69:92:
         00:c8:64:67:d8:40:6a:c1:a7:30:4b:d7:da:40:08:80:71:4a:
         7f:4d:61:a9:53:56:48:16:2f:10:fb:30:b0:bb:be:6c:b2:d8:
         68:d3:ba:70:34:21:4a:5f:87:23:29:5d:1b:95:90:cd:38:6f:
         5b:c0:ab:3a:7c:af:fd:a3:9e:c1:6f:ac:7c:84:b3:58:2a:34:
         5b:d3:22:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:35:53 2025 by rpki-client