Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4CE80122D6DDFCAC903327698E75EF1407FA8195.cer
File:                     4CE80122D6DDFCAC903327698E75EF1407FA8195.cer (raw, json)
Hash identifier:          DGx0urdbmugLpAn00ypA5cuh1zgunXbGFnaPYq67bj8=
Subject key identifier:   4C:E8:01:22:D6:DD:FC:AC:90:33:27:69:8E:75:EF:14:07:FA:81:95
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2F6D6D9389442022780034E71F59AADD392CC9E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Aug 2025 18:28:43 +0000
Certificate not after:    Tue 11 Aug 2026 18:33:43 +0000
Subordinate resources:    AS: 271316
                          IP: 200.53.76.0/22
                          IP: 2804:799c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 11:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:6d:6d:93:89:44:20:22:78:00:34:e7:1f:59:aa:dd:39:2c:c9:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Aug 12 18:28:43 2025 GMT
            Not After : Aug 11 18:33:43 2026 GMT
        Subject: CN=4CE80122D6DDFCAC903327698E75EF1407FA8195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b0:e8:6f:a9:e5:2f:ca:17:2c:94:6e:a8:45:
                    81:b8:6d:5e:c1:fc:8a:de:b8:78:5b:53:dd:d5:32:
                    5f:27:d4:f9:14:49:c1:45:62:9f:22:24:38:b6:e4:
                    6f:a5:ff:50:3a:29:f5:da:e5:fa:de:9a:16:77:f4:
                    a1:ef:95:28:39:16:c1:d5:68:14:6a:4f:a9:42:09:
                    71:7e:c0:fb:4e:00:fa:18:29:da:4a:e5:82:58:56:
                    49:9a:6d:29:0b:bd:cb:bf:db:40:98:0c:29:c3:c4:
                    6e:bd:fe:97:a5:bb:b2:8a:7a:f2:99:57:c0:8c:c7:
                    1d:58:22:77:87:18:27:c4:1b:42:b1:c8:d6:02:48:
                    75:72:aa:63:47:74:19:ac:16:b1:06:21:63:89:57:
                    84:bf:73:88:8e:a7:7b:fc:09:44:d2:f8:a6:b4:05:
                    c3:6e:83:3a:cb:e1:95:55:51:5b:27:4f:92:4b:f7:
                    c5:2e:2b:51:51:4f:00:ed:c5:a7:d8:22:ec:8d:52:
                    c1:bb:5c:8c:72:3c:56:0f:cb:c3:7d:75:08:5a:8a:
                    cb:4d:45:77:30:4f:5a:d8:95:95:7e:3e:e3:a0:2e:
                    9f:09:31:90:b9:e4:72:bd:02:d4:f4:ca:5a:e3:a5:
                    dc:d7:49:fa:ab:65:cc:96:af:49:28:fc:56:a4:37:
                    c9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:E8:01:22:D6:DD:FC:AC:90:33:27:69:8E:75:EF:14:07:FA:81:95
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4G4EXo6p57LCuaxgHKRsFEvnhP3eDUj7NiHHGC72VAgs/0/4CE80122D6DDFCAC903327698E75EF1407FA8195.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.76.0/22
                IPv6:
                  2804:799c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271316

    Signature Algorithm: sha256WithRSAEncryption
         19:13:4a:b9:89:49:c1:17:8c:82:b3:c2:f0:3f:b0:ab:32:9a:
         3c:f9:a7:26:07:4c:b3:76:c2:4b:fc:4e:03:61:26:fd:1c:a3:
         1b:31:f5:5e:0a:aa:75:9e:62:e7:70:15:55:83:42:3a:21:61:
         93:fd:05:5a:e5:7d:55:93:1d:ec:3f:a9:63:62:b7:20:19:66:
         18:fb:55:62:87:ed:f5:d6:07:84:59:01:cd:6d:96:ed:17:90:
         11:4b:a2:d4:a2:3c:01:cf:c8:65:fe:5e:eb:54:05:ff:5e:67:
         d0:a4:87:8d:fc:79:6d:2f:80:11:2d:9b:0d:c8:78:2d:7c:c4:
         c8:de:ce:12:6c:1d:e3:7b:ab:02:b8:f8:a2:3d:74:48:b1:14:
         f9:f9:38:91:e8:68:87:8e:d5:ba:56:9e:0d:50:57:56:fa:47:
         05:4b:7f:4b:11:0a:ec:ca:d4:3d:bd:0d:4a:3b:e3:48:47:1e:
         45:62:4a:bf:a2:69:02:02:e0:99:37:c5:b2:35:ac:bd:48:ef:
         7b:56:6e:34:30:61:5a:99:ff:09:aa:c8:c5:78:43:f7:17:0f:
         ba:5a:65:2f:02:99:24:cd:37:9d:ec:90:97:50:78:3c:ab:3f:
         d1:92:4a:03:1a:02:01:18:54:e5:d4:cc:f8:63:b2:95:5e:73:
         2a:8d:c3:b8
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUL21tk4lEICJ4ADTnH1mq3TksyeMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA4MTIxODI4NDNaFw0yNjA4MTExODMzNDNaMDMxMTAvBgNV
BAMTKDRDRTgwMTIyRDZEREZDQUM5MDMzMjc2OThFNzVFRjE0MDdGQTgxOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIsOhvqeUvyhcslG6oRYG4bV7B
/IreuHhbU93VMl8n1PkUScFFYp8iJDi25G+l/1A6KfXa5fremhZ39KHvlSg5FsHV
aBRqT6lCCXF+wPtOAPoYKdpK5YJYVkmabSkLvcu/20CYDCnDxG69/pelu7KKevKZ
V8CMxx1YIneHGCfEG0KxyNYCSHVyqmNHdBmsFrEGIWOJV4S/c4iOp3v8CUTS+Ka0
BcNugzrL4ZVVUVsnT5JL98UuK1FRTwDtxafYIuyNUsG7XIxyPFYPy8N9dQhaistN
RXcwT1rYlZV+PuOgLp8JMZC55HK9AtT0ylrjpdzXSfqrZcyWr0ko/FakN8mhAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRM6AEi1t38rJAz
J2mOde8UB/qBlTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNEc0
RVhvNnA1N0xDdWF4Z0hLUnNGRXZuaFAzZURVajdOaUhIR0M3MlZBZ3MvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRH
NEVYbzZwNTdMQ3VheGdIS1JzRkV2bmhQM2VEVWo3TmlISEdDNzJWQWdzLzAvNENF
ODAxMjJENkRERkNBQzkwMzMyNzY5OEU3NUVGMTQwN0ZBODE5NS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyDVMMA0EAgACMAcDBQAoBHmcMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQj1DANBgkqhkiG9w0BAQsFAAOCAQEAGRNKuYlJwReMgrPC
8D+wqzKaPPmnJgdMs3bCS/xOA2Em/RyjGzH1XgqqdZ5i53AVVYNCOiFhk/0FWuV9
VZMd7D+pY2K3IBlmGPtVYoft9dYHhFkBzW2W7ReQEUui1KI8Ac/IZf5e61QF/15n
0KSHjfx5bS+AES2bDch4LXzEyN7OEmwd43urArj4oj10SLEU+fk4kehoh47Vulae
DVBXVvpHBUt/SxEK7MrUPb0NSjvjSEceRWJKv6JpAgLgmTfFsjWsvUjve1ZuNDBh
Wpn/CarIxXhD9xcPulplLwKZJM03neyQl1B4PKs/0ZJKAxoCARhU5dTM+GOylV5z
Ko3DuA==
-----END CERTIFICATE-----
Generated at Wed Aug 20 11:56:49 2025 by rpki-client