Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.cer
File:                     1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.cer (raw, json)
Hash identifier:          GGNhoiHki8JzecytU5rMbcaTAmWYrJRMSF63uAqG4k4=
Subject key identifier:   18:04:D2:BC:EB:B5:6D:D0:A9:EC:96:64:C7:59:21:C6:0E:3D:96:16
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1F4E63266EAC1DB055CB22FE74E6E99F5A92C708
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Sep 2025 14:41:04 +0000
Certificate not after:    Mon 14 Sep 2026 14:46:04 +0000
Subordinate resources:    AS: 263911
                          IP: 138.204.172.0/22
                          IP: 2804:2794::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:41:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:4e:63:26:6e:ac:1d:b0:55:cb:22:fe:74:e6:e9:9f:5a:92:c7:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 15 14:41:04 2025 GMT
            Not After : Sep 14 14:46:04 2026 GMT
        Subject: CN=1804D2BCEBB56DD0A9EC9664C75921C60E3D9616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a0:b5:71:a0:69:f0:17:e9:94:23:e0:aa:bd:
                    ce:bc:bb:e9:df:b9:a8:be:bc:d4:22:27:c2:a4:0f:
                    f1:ed:2e:89:fc:8d:64:9a:40:84:06:37:ee:68:93:
                    e7:25:81:2f:3f:19:60:86:e5:38:e5:20:0c:96:4e:
                    b2:0d:e0:95:83:d3:c4:71:b7:15:0c:a1:ce:24:e0:
                    40:6c:ec:4e:9b:4e:8f:7e:4b:3a:9a:b9:98:65:3d:
                    10:3c:b7:d1:9c:18:5c:fd:d8:7f:9f:f6:a6:96:33:
                    d5:33:bc:e4:19:b9:87:b4:a3:86:c2:a0:f9:9a:61:
                    e0:fb:af:22:70:00:41:52:f2:b1:99:aa:8c:fe:88:
                    bd:7e:a4:37:8f:6c:7d:75:2f:b4:6b:85:aa:0b:1f:
                    da:7e:7f:a6:f5:20:e3:2c:a7:13:ed:4b:d4:0e:c2:
                    60:66:9e:ac:82:9f:6e:52:e8:75:b1:86:8f:76:72:
                    a2:3c:b5:ee:a9:b6:8d:79:e6:fa:3b:39:3d:15:ed:
                    ef:b9:be:dd:ed:36:48:c5:93:7a:d8:8e:16:f7:2a:
                    c5:42:1c:a4:b0:a5:cc:72:8a:ff:95:fc:b6:e0:c5:
                    56:0a:06:c0:f6:bf:74:e6:f0:22:81:4a:54:a8:ca:
                    81:3f:bc:32:ae:5f:9b:a8:06:79:71:f4:34:cd:ab:
                    23:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:04:D2:BC:EB:B5:6D:D0:A9:EC:96:64:C7:59:21:C6:0E:3D:96:16
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3oXRAqwwHFf2iwYjnZtCBjakZt16S2vPxb94wcBrsSrX/0/1804D2BCEBB56DD0A9EC9664C75921C60E3D9616.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.172.0/22
                IPv6:
                  2804:2794::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263911

    Signature Algorithm: sha256WithRSAEncryption
         56:10:51:72:9a:47:5f:7b:05:9a:52:47:3e:90:6f:fd:3c:d6:
         b0:fb:b2:3c:ac:bf:b3:e2:a7:32:32:af:05:e0:2b:e5:ba:eb:
         ef:dc:df:2c:05:c1:52:74:d0:de:be:4b:b4:31:cc:dd:42:da:
         e9:fa:de:3b:eb:7c:b7:95:59:94:28:6d:b8:b1:fd:5e:b5:01:
         2c:4b:d0:4b:ae:cb:30:07:09:40:7d:22:f7:d2:51:32:32:02:
         c6:9f:46:d9:65:03:9b:ea:29:da:45:ea:15:8b:d9:47:62:2a:
         89:31:39:3e:96:65:3e:10:84:d5:19:82:95:94:a8:a3:f2:33:
         6e:b5:aa:3e:eb:07:b9:b3:bc:5f:85:85:83:a9:4f:a3:a6:3f:
         10:c7:25:bc:2f:c4:fa:83:45:bf:39:2a:49:d6:40:83:a7:0c:
         ac:a6:0d:92:15:85:1c:c6:4f:24:2e:b8:3c:15:1e:7f:45:de:
         03:1b:27:0e:7f:c0:48:22:c2:77:2d:42:ca:3c:68:da:fe:b6:
         b4:df:48:85:fc:52:8b:7e:8d:18:28:f0:6c:9d:28:8d:72:d1:
         ce:02:6d:2b:9e:dc:f2:f6:ee:b9:49:a7:5f:ae:de:4d:eb:7a:
         ba:d7:b8:e7:e9:a8:72:eb:fe:1a:4f:ef:d7:76:50:94:18:71:
         2f:b0:ed:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:32:37 2025 by rpki-client