Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.cer
File:                     16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.cer (raw, json)
Hash identifier:          INqRGwcZt1jAGckWn27bqyejqD/XgEl4He8gJsvKgBI=
Subject key identifier:   16:DB:25:C6:0A:69:26:C5:8A:F5:C7:D7:7D:A6:93:B1:7A:DA:0D:55
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       46D1AD6CA78F2E0A950B7C5D99602A1ADB78140E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Aug 2025 19:34:21 +0000
Certificate not after:    Wed 26 Aug 2026 19:39:21 +0000
Subordinate resources:    AS: 264562
                          IP: 45.174.188.0/22
                          IP: 45.239.8.0/22
                          IP: 138.36.0.0/22
                          IP: 168.232.84.0/22
                          IP: 187.49.176.0/22
                          IP: 2804:2190::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 07:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d1:ad:6c:a7:8f:2e:0a:95:0b:7c:5d:99:60:2a:1a:db:78:14:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 27 19:34:21 2025 GMT
            Not After : Aug 26 19:39:21 2026 GMT
        Subject: CN=16DB25C60A6926C58AF5C7D77DA693B17ADA0D55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:03:73:eb:a9:4b:32:9b:03:1e:77:3d:0a:38:
                    be:f8:bb:30:64:a8:a5:e9:a3:4e:ba:bb:42:58:86:
                    e4:f3:4c:d7:8c:bd:01:c4:d3:da:2a:30:7a:a7:4d:
                    78:c6:1e:24:50:d4:33:8e:f0:ea:b9:cc:5d:43:79:
                    cb:66:a4:5e:1c:af:1a:61:b8:ed:62:a4:23:9a:da:
                    09:15:ce:b2:bf:82:61:0b:80:cb:cf:84:85:ea:3f:
                    06:bf:e0:62:83:d3:22:72:fc:9e:0f:ba:95:6b:59:
                    e9:bd:b3:7c:c6:31:51:02:5f:ea:15:ca:5c:15:24:
                    e6:b3:cf:22:62:00:94:40:9c:57:b3:e1:a9:b5:96:
                    18:f5:b7:d9:0d:1d:8b:e4:9c:aa:ad:08:06:ef:bc:
                    db:32:66:aa:0e:cc:15:97:0b:f6:f5:13:14:03:4f:
                    e5:a5:ba:b7:c8:b1:39:64:d2:d6:c5:77:dc:73:88:
                    49:17:41:f1:5b:cf:b2:c7:f1:e7:c1:94:11:94:73:
                    2f:9d:d1:f4:df:15:26:64:d2:0b:72:a5:90:e9:a8:
                    dd:4d:bb:b6:ab:28:bb:8b:1d:c7:6d:81:8d:5c:7d:
                    62:00:6a:6f:ad:18:38:71:7f:9a:1c:9e:07:f5:46:
                    1f:f3:36:c0:03:7e:31:e8:3a:e5:66:d1:f3:fd:fe:
                    3c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:DB:25:C6:0A:69:26:C5:8A:F5:C7:D7:7D:A6:93:B1:7A:DA:0D:55
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3L1nPsm3MDYHSQLP5gv89sVkD6B5xCRpQbyZPTPKUDBm/0/16DB25C60A6926C58AF5C7D77DA693B17ADA0D55.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.188.0/22
                  45.239.8.0/22
                  138.36.0.0/22
                  168.232.84.0/22
                  187.49.176.0/22
                IPv6:
                  2804:2190::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264562

    Signature Algorithm: sha256WithRSAEncryption
         b3:fa:fe:07:a2:b4:f6:d8:ec:0a:ff:28:e1:a5:38:10:1c:62:
         19:d7:6f:ab:09:49:84:3c:df:3c:c1:90:92:fe:01:1d:a2:ff:
         99:66:07:8b:33:99:64:48:74:4e:3a:b7:8f:76:06:35:ef:60:
         e9:65:0b:2b:74:44:5f:7b:e9:69:56:97:df:5a:af:c9:04:52:
         6f:ac:04:fb:9a:a1:a9:a4:45:ac:60:d5:82:7f:99:0b:dc:f3:
         bc:cb:96:d4:e0:72:73:f0:b4:a0:52:db:ed:ab:d4:6d:62:76:
         28:9b:30:82:e7:2b:ca:7c:5d:fb:a9:99:c1:39:e6:a5:63:6b:
         71:67:96:ee:9e:78:9d:24:ec:b5:78:b7:31:1a:41:b7:9c:c8:
         4d:32:92:49:87:ed:08:b2:3b:7e:d9:08:ac:4c:c8:f0:49:e4:
         0b:10:c5:63:3a:43:da:26:d4:de:a0:2d:48:89:6f:fa:e0:53:
         97:3c:e2:41:62:9d:35:01:fd:d4:5d:d3:03:92:79:14:6d:0b:
         c8:eb:85:55:e3:fb:8b:d9:34:44:92:ae:16:8b:9a:35:b1:33:
         d7:08:d4:ff:f8:59:06:4a:68:67:46:5b:f0:37:3e:95:66:88:
         c2:ea:bd:93:31:56:22:77:80:6e:58:ce:7a:d1:ff:26:55:65:
         82:29:ce:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:25:10 2025 by rpki-client