Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/718FD7745122924B2C0447ECC4439A2FA495E189.cer
File:                     718FD7745122924B2C0447ECC4439A2FA495E189.cer (raw, json)
Hash identifier:          qnzQ4ufPr5XjI0rwC3O1RPGCjeGj2ijbKln53A/mU7U=
Subject key identifier:   71:8F:D7:74:51:22:92:4B:2C:04:47:EC:C4:43:9A:2F:A4:95:E1:89
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       41B361183FBDD0B6DF5F4F219D5BE49C22ABB183
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/718FD7745122924B2C0447ECC4439A2FA495E189.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 30 Oct 2025 06:03:12 +0000
Certificate not after:    Thu 29 Oct 2026 06:08:12 +0000
Subordinate resources:    AS: 263467
                          IP: 177.221.240.0/20
                          IP: 2804:1248::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b3:61:18:3f:bd:d0:b6:df:5f:4f:21:9d:5b:e4:9c:22:ab:b1:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 30 06:03:12 2025 GMT
            Not After : Oct 29 06:08:12 2026 GMT
        Subject: CN=718FD7745122924B2C0447ECC4439A2FA495E189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:21:9c:74:58:6f:e9:02:a3:77:7c:bc:3a:1c:
                    91:cc:57:b4:ba:79:26:7d:19:cc:18:c5:81:c7:85:
                    d2:09:39:dd:da:20:99:bd:4d:da:51:b9:96:9c:5f:
                    0c:48:84:c5:9b:03:a2:d0:83:5f:de:d9:38:fe:a8:
                    90:dc:69:e8:7a:0b:11:20:09:94:0a:0e:c4:06:0b:
                    85:b1:b3:0e:3c:b6:e7:da:96:86:0f:09:68:91:46:
                    a9:f4:af:65:e8:1f:86:3a:8e:9e:53:d3:c7:3c:0a:
                    98:9f:25:cc:8d:bf:8a:64:9e:b1:07:1f:87:20:ec:
                    2f:37:f8:fc:34:18:42:5a:11:7e:4b:10:b0:38:ec:
                    57:b9:bd:d3:42:27:4b:6b:ae:77:9e:05:e9:0a:65:
                    8e:f4:f8:dc:f3:69:8d:c7:8c:8a:77:21:3f:c3:6a:
                    17:e1:a0:26:2e:c6:af:32:d4:32:33:a1:d6:ab:92:
                    fa:dd:ff:40:52:5b:f1:2d:e6:b2:04:84:bc:10:72:
                    fd:ee:65:aa:64:76:70:a4:d6:56:20:19:ef:32:c1:
                    67:2b:93:3b:e1:40:25:70:62:2d:b1:4d:fa:61:db:
                    16:4f:59:fc:a9:d3:e8:6c:6e:f9:1a:23:6c:9b:d3:
                    a8:8b:2a:a4:fe:ec:1a:58:04:37:45:f3:4a:cc:f4:
                    37:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:8F:D7:74:51:22:92:4B:2C:04:47:EC:C4:43:9A:2F:A4:95:E1:89
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F9cTRCzPZicfnZtWKAmRceaFEX2XZTbSDjuJEARW53mc/0/718FD7745122924B2C0447ECC4439A2FA495E189.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.240.0/20
                IPv6:
                  2804:1248::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263467

    Signature Algorithm: sha256WithRSAEncryption
         a3:6e:40:c2:69:c9:df:f3:42:9a:71:3f:1f:86:70:0e:ec:8c:
         95:cb:5e:c3:1e:a5:dd:53:95:b5:03:9a:68:e4:00:e7:92:ff:
         b7:db:c5:fc:a8:fc:46:e1:28:1c:a4:58:15:7c:e9:25:63:41:
         f7:92:0c:c6:35:86:e8:21:f4:59:13:40:9b:3f:08:09:85:98:
         e7:26:0d:5e:9b:40:fc:33:92:28:f5:cd:45:ca:76:ee:52:18:
         1a:86:5f:6d:31:30:da:86:95:a6:f6:0c:c3:ee:94:0f:a3:8f:
         68:68:4d:68:07:55:83:5b:b1:1c:b6:10:46:d0:1b:7a:27:33:
         9c:cf:91:f2:f1:da:ad:fc:0c:a2:be:2e:6e:be:a8:4b:54:05:
         d5:fe:ce:6d:d4:f6:cd:7b:1b:27:99:89:bd:9a:17:a5:f7:82:
         2d:a8:2e:c1:d8:79:41:20:b8:58:d5:21:e3:6a:31:2f:8d:8b:
         2f:57:cc:55:58:37:ba:60:5e:fc:7b:bb:84:df:8a:6e:79:e3:
         30:3e:f9:82:c4:91:3f:86:c8:38:5a:aa:85:95:d1:ab:90:e0:
         0b:db:28:ea:0c:cc:7f:de:b1:71:59:bd:1f:2b:6f:01:c8:93:
         4f:37:a7:d0:ae:63:cb:45:ee:36:94:4f:7f:2e:3d:b7:4d:ba:
         21:62:6c:40
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUQbNhGD+90LbfX08hnVvknCKrsYMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEwMzAwNjAzMTJaFw0yNjEwMjkwNjA4MTJaMDMxMTAvBgNV
BAMTKDcxOEZENzc0NTEyMjkyNEIyQzA0NDdFQ0M0NDM5QTJGQTQ5NUUxODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3IZx0WG/pAqN3fLw6HJHMV7S6
eSZ9GcwYxYHHhdIJOd3aIJm9TdpRuZacXwxIhMWbA6LQg1/e2Tj+qJDcaeh6CxEg
CZQKDsQGC4Wxsw48tufaloYPCWiRRqn0r2XoH4Y6jp5T08c8CpifJcyNv4pknrEH
H4cg7C83+Pw0GEJaEX5LELA47Fe5vdNCJ0trrneeBekKZY70+NzzaY3HjIp3IT/D
ahfhoCYuxq8y1DIzodarkvrd/0BSW/Et5rIEhLwQcv3uZapkdnCk1lYgGe8ywWcr
kzvhQCVwYi2xTfph2xZPWfyp0+hsbvkaI2yb06iLKqT+7BpYBDdF80rM9DfBAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRxj9d0USKSSywE
R+zEQ5ovpJXhiTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRjlj
VFJDelBaaWNmblp0V0tBbVJjZWFGRVgyWFpUYlNEanVKRUFSVzUzbWMvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Y5
Y1RSQ3pQWmljZm5adFdLQW1SY2VhRkVYMlhaVGJTRGp1SkVBUlc1M21jLzAvNzE4
RkQ3NzQ1MTIyOTI0QjJDMDQ0N0VDQzQ0MzlBMkZBNDk1RTE4OS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQEsd3wMA0EAgACMAcDBQAoBBJIMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQFKzANBgkqhkiG9w0BAQsFAAOCAQEAo25AwmnJ3/NCmnE/
H4ZwDuyMlctewx6l3VOVtQOaaOQA55L/t9vF/Kj8RuEoHKRYFXzpJWNB95IMxjWG
6CH0WRNAmz8ICYWY5yYNXptA/DOSKPXNRcp27lIYGoZfbTEw2oaVpvYMw+6UD6OP
aGhNaAdVg1uxHLYQRtAbeicznM+R8vHarfwMor4ubr6oS1QF1f7ObdT2zXsbJ5mJ
vZoXpfeCLaguwdh5QSC4WNUh42oxL42LL1fMVVg3umBe/Hu7hN+KbnnjMD75gsSR
P4bIOFqqhZXRq5DgC9so6gzMf96xcVm9HytvAciTTzen0K5jy0XuNpRPfy49t026
IWJsQA==
-----END CERTIFICATE-----
Generated at Mon Nov 3 05:31:28 2025 by rpki-client