Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/658FD2C4C8A5DA079AC1307D531512B7C57240AA.cer
File:                     658FD2C4C8A5DA079AC1307D531512B7C57240AA.cer (raw, json)
Hash identifier:          HV5vx92u+aWDXX9GBY+imDSfG1SHCK+EZjqUW5esAQ4=
Subject key identifier:   65:8F:D2:C4:C8:A5:DA:07:9A:C1:30:7D:53:15:12:B7:C5:72:40:AA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       62422CE3A05E170CDC8F1183904EC29F7C716A4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Sep 2025 18:24:10 +0000
Certificate not after:    Wed 16 Sep 2026 18:29:10 +0000
Subordinate resources:    AS: 263350
                          IP: 191.37.12.0/22
                          IP: 2804:14c8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 22:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:42:2c:e3:a0:5e:17:0c:dc:8f:11:83:90:4e:c2:9f:7c:71:6a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 17 18:24:10 2025 GMT
            Not After : Sep 16 18:29:10 2026 GMT
        Subject: CN=658FD2C4C8A5DA079AC1307D531512B7C57240AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:69:40:c0:28:2b:74:45:8c:cb:0c:db:c5:f9:
                    1f:10:0e:a9:63:9e:72:6a:92:9d:03:57:f8:80:a1:
                    c1:0b:27:a4:3b:1d:0f:a7:0a:d0:7a:23:f5:74:f9:
                    9b:ce:0a:6f:b1:4e:db:02:6b:13:e1:ea:67:0a:ac:
                    13:77:e6:56:73:8f:4a:36:30:f9:79:37:a3:48:63:
                    70:59:5c:81:e2:9e:85:52:4f:a6:ab:0a:67:50:7e:
                    a9:a0:05:ff:4e:d8:d7:fd:bb:7b:54:46:e2:d3:14:
                    78:0c:f9:50:30:cc:3c:bb:06:54:7d:26:53:45:3d:
                    01:8e:09:de:8e:1c:62:7f:95:0d:dc:87:72:23:34:
                    00:35:62:6e:45:e6:2d:98:17:0b:43:df:2c:ea:81:
                    61:cc:e1:57:ca:74:aa:50:ba:d7:e0:a4:21:48:5e:
                    18:28:e7:cf:85:91:4c:f0:6c:e4:72:93:20:90:7b:
                    be:cc:0f:85:65:ba:9c:5c:54:e1:0f:dd:fd:7b:34:
                    fa:84:21:d0:d6:06:12:3d:fc:16:cb:c7:9a:c2:f0:
                    d9:55:6d:36:23:5f:c3:82:af:74:68:eb:29:87:7c:
                    3b:1c:7f:85:d6:ef:2d:68:e4:39:f1:81:f9:27:03:
                    2a:f7:aa:44:1a:63:d4:6b:6c:b2:4a:b8:4b:cc:de:
                    52:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:8F:D2:C4:C8:A5:DA:07:9A:C1:30:7D:53:15:12:B7:C5:72:40:AA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6DYNVLLJGFFeHVwQe3CsRaEVgpyNeR1okdfU7a3pQRKf/0/658FD2C4C8A5DA079AC1307D531512B7C57240AA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.12.0/22
                IPv6:
                  2804:14c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263350

    Signature Algorithm: sha256WithRSAEncryption
         54:4b:14:4d:b2:d0:07:17:d9:44:61:31:d4:47:d2:13:0f:ac:
         a5:44:e3:21:95:3c:88:09:1e:08:b5:61:ae:57:d8:93:8a:38:
         e3:da:a7:22:e3:62:a0:dd:36:99:e8:fd:64:d5:dd:b2:3e:f7:
         4a:50:1f:c1:76:13:43:9a:d2:a2:4d:33:a8:10:cd:1b:2e:3a:
         c8:74:48:e9:46:ea:1b:0c:b4:63:62:96:98:6f:1a:b4:c0:43:
         06:d4:4c:41:01:79:56:18:31:f1:36:60:ed:a3:66:0b:fb:49:
         06:52:95:72:a4:70:0c:6f:77:37:b6:52:ea:5c:1e:d2:a3:e2:
         d2:67:a3:83:d1:c1:ac:28:8d:05:8b:e6:9e:a9:55:50:ef:f0:
         ea:10:8d:99:53:d3:dd:05:38:92:d0:67:d1:21:b0:0b:0e:0f:
         ee:ab:02:f2:e1:48:de:2c:ab:60:dd:17:a0:79:2e:01:f8:eb:
         79:4f:6f:c0:01:17:6d:02:e2:4b:8c:99:68:f2:d8:9f:7e:a5:
         08:9d:93:b0:ec:b3:c3:1c:35:55:1c:e0:a1:b5:82:14:bf:ce:
         fc:22:a1:45:ba:7f:7d:1c:4e:b5:a8:9f:ec:86:17:5f:db:fe:
         aa:35:6a:8f:62:5e:d3:64:49:91:e0:c7:76:23:0f:f1:5d:d8:
         6f:fc:7e:e8
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUYkIs46BeFwzcjxGDkE7Cn3xxakowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA5MTcxODI0MTBaFw0yNjA5MTYxODI5MTBaMDMxMTAvBgNV
BAMTKDY1OEZEMkM0QzhBNURBMDc5QUMxMzA3RDUzMTUxMkI3QzU3MjQwQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzaUDAKCt0RYzLDNvF+R8QDqlj
nnJqkp0DV/iAocELJ6Q7HQ+nCtB6I/V0+ZvOCm+xTtsCaxPh6mcKrBN35lZzj0o2
MPl5N6NIY3BZXIHinoVST6arCmdQfqmgBf9O2Nf9u3tURuLTFHgM+VAwzDy7BlR9
JlNFPQGOCd6OHGJ/lQ3ch3IjNAA1Ym5F5i2YFwtD3yzqgWHM4VfKdKpQutfgpCFI
Xhgo58+FkUzwbORykyCQe77MD4VlupxcVOEP3f17NPqEIdDWBhI9/BbLx5rC8NlV
bTYjX8OCr3Ro6ymHfDscf4XW7y1o5DnxgfknAyr3qkQaY9RrbLJKuEvM3lKZAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRlj9LEyKXaB5rB
MH1TFRK3xXJAqjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNkRZ
TlZMTEpHRkZlSFZ3UWUzQ3NSYUVWZ3B5TmVSMW9rZGZVN2EzcFFSS2YvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzZE
WU5WTExKR0ZGZUhWd1FlM0NzUmFFVmdweU5lUjFva2RmVTdhM3BRUktmLzAvNjU4
RkQyQzRDOEE1REEwNzlBQzEzMDdENTMxNTEyQjdDNTcyNDBBQS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCvyUMMA0EAgACMAcDBQAoBBTIMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQEtjANBgkqhkiG9w0BAQsFAAOCAQEAVEsUTbLQBxfZRGEx
1EfSEw+spUTjIZU8iAkeCLVhrlfYk4o449qnIuNioN02mej9ZNXdsj73SlAfwXYT
Q5rSok0zqBDNGy46yHRI6UbqGwy0Y2KWmG8atMBDBtRMQQF5Vhgx8TZg7aNmC/tJ
BlKVcqRwDG93N7ZS6lwe0qPi0mejg9HBrCiNBYvmnqlVUO/w6hCNmVPT3QU4ktBn
0SGwCw4P7qsC8uFI3iyrYN0XoHkuAfjreU9vwAEXbQLiS4yZaPLYn36lCJ2TsOyz
wxw1VRzgobWCFL/O/CKhRbp/fRxOtaif7IYXX9v+qjVqj2Je02RJkeDHdiMP8V3Y
b/x+6A==
-----END CERTIFICATE-----
Generated at Thu Sep 18 22:11:59 2025 by rpki-client