Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/11332B40892A7FE90447BE6A8C1D881D90DB17FF.cer
File:                     11332B40892A7FE90447BE6A8C1D881D90DB17FF.cer (raw, json)
Hash identifier:          QaS2FiK7CaIzPQDeCIzUzkkm+CwJLwOfcn1xQFKQYbk=
Subject key identifier:   11:33:2B:40:89:2A:7F:E9:04:47:BE:6A:8C:1D:88:1D:90:DB:17:FF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       304B81F9DCA56E60D389BD5F67C8130A351BDEA8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/11332B40892A7FE90447BE6A8C1D881D90DB17FF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Oct 2025 16:32:54 +0000
Certificate not after:    Wed 28 Oct 2026 16:37:54 +0000
Subordinate resources:    AS: 271428
                          IP: 200.36.192.0/22
                          IP: 2804:7b60::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4b:81:f9:dc:a5:6e:60:d3:89:bd:5f:67:c8:13:0a:35:1b:de:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 29 16:32:54 2025 GMT
            Not After : Oct 28 16:37:54 2026 GMT
        Subject: CN=11332B40892A7FE90447BE6A8C1D881D90DB17FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:72:57:36:d6:b3:0f:9c:59:d0:0b:22:b0:c9:
                    77:20:32:a8:3f:20:0a:65:a0:01:7f:fd:53:44:3e:
                    1c:b5:eb:fa:a0:c9:43:7a:d7:1d:78:9f:ca:2a:20:
                    7f:6a:66:dc:7c:9a:0b:a1:19:35:82:ee:01:ff:99:
                    97:90:48:46:e2:6d:93:81:1e:dc:19:3f:cd:2a:ae:
                    6f:d9:80:a7:2c:b1:06:14:55:a3:23:e9:7c:1e:d7:
                    c0:69:b5:ca:0b:d7:13:76:fd:d7:eb:c4:5a:80:65:
                    3b:07:ef:f8:ca:3a:d0:37:43:1a:1c:63:a2:c6:b6:
                    f1:09:28:b7:73:f4:06:a0:c0:74:98:a7:3a:1d:fd:
                    dc:11:57:72:3e:82:5c:6a:06:fd:63:e8:d0:80:e8:
                    51:cd:cb:22:d3:87:e3:f7:62:18:fc:66:11:67:eb:
                    fd:d3:e4:6b:48:20:17:1a:20:f5:40:79:bc:10:17:
                    d0:b7:d0:66:ab:43:0e:32:78:bc:fb:ec:ba:ed:eb:
                    c9:91:13:11:ce:f3:47:50:ab:d1:1f:45:e7:39:7c:
                    34:f8:d0:f8:6a:f9:ca:31:0c:f8:0e:da:64:e9:1b:
                    1d:00:d7:55:67:7b:bf:dd:a2:b2:df:23:c6:bb:6c:
                    a5:ee:d2:26:aa:b6:2c:f9:d0:e1:7e:4d:6f:46:36:
                    c6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:33:2B:40:89:2A:7F:E9:04:47:BE:6A:8C:1D:88:1D:90:DB:17:FF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8WCE5HvAqYe2CuoYtEUx3cGYH3jLLCm19UsvVk7A9qcY/0/11332B40892A7FE90447BE6A8C1D881D90DB17FF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.192.0/22
                IPv6:
                  2804:7b60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271428

    Signature Algorithm: sha256WithRSAEncryption
         09:35:67:95:2a:46:4b:4f:8c:be:53:37:25:68:9c:18:dd:4a:
         08:46:f8:20:a9:27:f5:0c:51:e6:43:90:bd:a0:a9:c1:26:98:
         05:9f:5e:89:60:94:e1:8c:5a:6e:33:49:30:a5:bb:0d:ab:e7:
         a8:1e:b6:8d:a5:58:dc:92:c8:39:25:6c:ed:a2:6a:5f:3f:b8:
         e3:fe:98:ed:01:23:1e:aa:92:46:45:41:a2:59:2f:4c:61:ec:
         20:2a:32:ef:e0:db:a3:14:bc:fa:0f:47:2f:b5:8b:72:11:0f:
         e8:b7:b7:c4:2d:59:1e:60:b4:0e:86:52:7f:d4:79:01:bf:00:
         e0:3b:db:06:1c:a2:ec:ae:bb:1c:65:57:6f:0f:f0:b8:54:4d:
         2e:89:44:60:fe:b0:f8:62:21:36:48:71:68:ed:76:eb:a4:fe:
         18:a5:06:25:bd:aa:fa:06:59:ca:71:3d:2d:d7:71:0b:2f:d6:
         8d:c2:13:19:27:6c:67:b1:f0:dd:c8:4d:22:c0:d9:87:b4:26:
         a5:f8:86:63:0b:50:fd:7e:01:f7:d5:0e:53:7c:ac:5a:9c:20:
         41:3b:e0:fe:4a:f2:4f:16:00:9d:2c:2a:38:90:53:94:36:07:
         a6:e0:41:1d:63:12:6b:d8:2e:a8:d8:e7:0f:cf:5b:08:60:83:
         fb:86:43:ce
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUMEuB+dylbmDTib1fZ8gTCjUb3qgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEwMjkxNjMyNTRaFw0yNjEwMjgxNjM3NTRaMDMxMTAvBgNV
BAMTKDExMzMyQjQwODkyQTdGRTkwNDQ3QkU2QThDMUQ4ODFEOTBEQjE3RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeclc21rMPnFnQCyKwyXcgMqg/
IAploAF//VNEPhy16/qgyUN61x14n8oqIH9qZtx8mguhGTWC7gH/mZeQSEbibZOB
HtwZP80qrm/ZgKcssQYUVaMj6Xwe18BptcoL1xN2/dfrxFqAZTsH7/jKOtA3Qxoc
Y6LGtvEJKLdz9AagwHSYpzod/dwRV3I+glxqBv1j6NCA6FHNyyLTh+P3Yhj8ZhFn
6/3T5GtIIBcaIPVAebwQF9C30GarQw4yeLz77Lrt68mRExHO80dQq9EfRec5fDT4
0Phq+coxDPgO2mTpGx0A11Vne7/dorLfI8a7bKXu0iaqtiz50OF+TW9GNsZ7AgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQRMytAiSp/6QRH
vmqMHYgdkNsX/zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFdD
RTVIdkFxWWUyQ3VvWXRFVXgzY0dZSDNqTExDbTE5VXN2Vms3QTlxY1kvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhX
Q0U1SHZBcVllMkN1b1l0RVV4M2NHWUgzakxMQ20xOVVzdlZrN0E5cWNZLzAvMTEz
MzJCNDA4OTJBN0ZFOTA0NDdCRTZBOEMxRDg4MUQ5MERCMTdGRi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyCTAMA0EAgACMAcDBQAoBHtgMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQkRDANBgkqhkiG9w0BAQsFAAOCAQEACTVnlSpGS0+MvlM3
JWicGN1KCEb4IKkn9QxR5kOQvaCpwSaYBZ9eiWCU4YxabjNJMKW7DavnqB62jaVY
3JLIOSVs7aJqXz+44/6Y7QEjHqqSRkVBolkvTGHsICoy7+DboxS8+g9HL7WLchEP
6Le3xC1ZHmC0DoZSf9R5Ab8A4DvbBhyi7K67HGVXbw/wuFRNLolEYP6w+GIhNkhx
aO1266T+GKUGJb2q+gZZynE9LddxCy/WjcITGSdsZ7Hw3chNIsDZh7QmpfiGYwtQ
/X4B99UOU3ysWpwgQTvg/kryTxYAnSwqOJBTlDYHpuBBHWMSa9guqNjnD89bCGCD
+4ZDzg==
-----END CERTIFICATE-----
Generated at Mon Nov 3 05:20:40 2025 by rpki-client