Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.cer
File:                     721FDEF0EC64EC9ECB8963D4279535836A0A16EB.cer (raw, json)
Hash identifier:          35ICtN8H2fgKSpf9socggZHdqe2P5N2JRF9nlXGHCVw=
Subject key identifier:   72:1F:DE:F0:EC:64:EC:9E:CB:89:63:D4:27:95:35:83:6A:0A:16:EB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3A12D316B6F47730C8556EB9FE53BF78A5641BFE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Oct 2025 16:24:17 +0000
Certificate not after:    Wed 21 Oct 2026 16:29:17 +0000
Subordinate resources:    AS: 268993
                          IP: 45.177.184.0/22
                          IP: 2804:5dcc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:10:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:12:d3:16:b6:f4:77:30:c8:55:6e:b9:fe:53:bf:78:a5:64:1b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 22 16:24:17 2025 GMT
            Not After : Oct 21 16:29:17 2026 GMT
        Subject: CN=721FDEF0EC64EC9ECB8963D4279535836A0A16EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:42:7f:85:36:06:0a:48:0e:92:98:dc:49:89:
                    a6:3d:e8:63:06:7b:52:75:97:6e:e9:f5:7d:e2:9a:
                    9b:bc:1f:7f:a2:0b:1d:c0:de:33:95:27:1c:dc:9e:
                    5a:d1:ee:9a:4c:d3:e1:96:51:51:18:2f:6f:3b:9f:
                    b0:6a:38:d6:91:0d:49:bd:b3:71:31:65:ce:65:0d:
                    57:c9:40:47:e8:cd:37:c6:56:31:e4:92:73:76:29:
                    63:65:45:65:bd:82:07:09:c1:dc:fd:8e:4e:0f:6c:
                    38:16:2d:10:31:ee:bd:2f:33:f1:f5:dc:c8:0e:67:
                    d9:91:73:4f:b9:18:fc:ee:d4:e3:0e:0c:22:fd:cc:
                    27:d1:e0:fc:69:80:65:c9:1c:4c:cf:18:11:2d:dd:
                    9a:a9:04:56:ad:55:b8:56:8e:87:93:d4:25:50:28:
                    8d:3c:f9:dd:13:1e:93:f0:21:80:7a:f3:06:73:48:
                    e6:39:f5:c5:e1:a5:ce:35:a1:96:26:29:c6:dd:ac:
                    07:10:39:f5:aa:36:81:e9:33:45:2b:8f:87:81:1a:
                    f5:d9:df:8f:ff:c3:94:51:a1:05:c5:4c:98:93:b2:
                    ce:90:26:71:4c:68:57:b6:c3:77:f2:58:97:41:3a:
                    91:98:91:b5:46:2f:08:bd:34:84:44:4e:15:c2:c1:
                    30:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:1F:DE:F0:EC:64:EC:9E:CB:89:63:D4:27:95:35:83:6A:0A:16:EB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/721FDEF0EC64EC9ECB8963D4279535836A0A16EB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.184.0/22
                IPv6:
                  2804:5dcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268993

    Signature Algorithm: sha256WithRSAEncryption
         71:4f:0b:60:16:96:6a:0f:33:76:e0:52:ea:c7:c9:75:2d:a7:
         ea:d6:3f:30:cd:bd:8b:c2:5a:87:e5:80:5a:d7:42:a8:38:bb:
         ae:ff:91:87:95:5d:3a:83:0c:42:9e:51:34:73:e1:a5:ee:c8:
         37:23:f3:6c:ef:a8:cc:66:0d:2e:9e:a7:b9:a8:9f:43:ba:64:
         b7:0b:9f:76:05:2a:14:bd:5f:2e:f5:3c:c1:ce:11:1a:af:ea:
         0b:fd:30:1a:c7:fe:f8:95:8e:99:ba:fb:b4:8f:63:4c:0e:24:
         9c:49:59:a3:c4:bb:c9:8d:d0:ae:70:db:39:14:90:e9:e5:8b:
         21:c3:19:b3:0c:73:f3:8d:75:b1:f6:56:0f:b6:b1:b5:53:f0:
         b2:b8:d8:c7:50:00:3f:53:10:6d:81:fa:ec:01:da:c2:8a:85:
         20:55:c8:52:70:a7:c0:c0:ab:4d:47:36:38:16:a2:b0:e8:d3:
         1f:71:27:8f:24:0e:90:e2:ea:a6:81:70:b0:84:7e:35:8d:df:
         7c:81:c1:1f:a6:65:95:ff:ea:16:c8:4f:2b:d2:86:b9:7c:41:
         fa:1a:16:ea:7a:3c:9f:61:c5:b0:38:e9:3a:22:33:57:ab:5d:
         9f:dc:44:4d:65:5a:15:51:25:00:f4:72:46:bd:12:9d:87:a6:
         73:b0:e9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:19:22 2025 by rpki-client