Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer
File:                     725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.cer (raw, json)
Hash identifier:          fzAuBwaghtn2E6oae8AJbNBZrXl011X0c5YnKTVITJM=
Subject key identifier:   72:5C:FB:34:4D:3B:C8:D4:D1:28:A6:DE:8A:52:7D:9D:1E:3C:70:A5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       30E1C6D95E3478092803884E4FB6742B47FD4178
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 Apr 2026 06:43:27 +0000
Certificate not after:    Thu 01 Apr 2027 06:48:27 +0000
Subordinate resources:    AS: 262764
                          IP: 186.226.192.0/21
                          IP: 2804:1b8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 Apr 2026 07:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e1:c6:d9:5e:34:78:09:28:03:88:4e:4f:b6:74:2b:47:fd:41:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  2 06:43:27 2026 GMT
            Not After : Apr  1 06:48:27 2027 GMT
        Subject: CN=725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a5:45:c4:40:44:0c:be:b7:24:85:f5:1a:29:
                    36:80:8b:cc:b8:c2:22:98:1e:ab:b1:b3:fb:46:2b:
                    a8:32:76:ab:78:f7:7b:87:ab:a0:9e:12:05:a1:51:
                    75:98:03:d0:53:c4:b9:bc:fc:e7:de:88:33:6c:af:
                    38:c8:fc:4f:30:48:a3:35:17:d9:ba:b2:66:1e:cb:
                    88:d3:1b:8b:03:92:1b:94:91:ef:f2:3e:8f:bf:bc:
                    9a:90:6e:92:30:3a:26:e3:bd:74:74:aa:fa:56:26:
                    e9:12:63:ec:e9:63:43:56:d2:ba:fc:96:2c:89:20:
                    73:9b:a1:d5:ca:ce:d5:6f:47:09:a3:69:22:25:48:
                    14:f3:c7:a4:68:26:f7:10:c1:ec:15:84:a9:3a:e2:
                    0b:0f:fa:0e:79:86:ee:cc:3b:a4:e5:4f:17:10:52:
                    a2:c2:28:af:7d:87:03:0a:d7:0b:b6:ff:ac:23:54:
                    64:f2:58:4b:e2:4b:e7:ec:35:4e:3b:bc:53:81:8d:
                    3e:b8:b1:bc:4e:48:28:6d:8e:b7:7d:f4:72:33:de:
                    d0:ce:51:36:aa:dd:64:ff:51:91:66:1c:de:af:96:
                    62:6c:d9:2f:d9:31:f8:f0:20:45:33:e5:a3:97:89:
                    8a:a7:ca:cc:6a:11:f9:58:4f:6d:a3:7d:7f:47:64:
                    80:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:5C:FB:34:4D:3B:C8:D4:D1:28:A6:DE:8A:52:7D:9D:1E:3C:70:A5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9PRMef3Xmk1hGk2fY7KhA2RrQ76rgijJxudnjZxZFxXC/0/725CFB344D3BC8D4D128A6DE8A527D9D1E3C70A5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.192.0/21
                IPv6:
                  2804:1b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262764

    Signature Algorithm: sha256WithRSAEncryption
         24:75:ee:ec:b6:77:06:dd:d7:bb:83:63:1e:31:1d:ae:4f:86:
         98:1f:66:78:15:c7:b0:76:c7:b7:0e:41:e9:11:ac:4d:08:48:
         81:a6:49:90:5e:f1:5c:68:63:c8:36:c8:86:d9:9b:89:a3:db:
         54:3c:f5:d1:2b:81:dd:1f:1b:94:02:eb:b2:96:c3:38:f9:2e:
         b5:a5:06:cb:d3:b2:05:f0:d7:a8:25:b5:5b:ad:1d:32:39:68:
         bf:fb:de:65:e0:87:0b:54:00:21:b1:b6:16:cb:09:de:a7:f2:
         52:1b:63:71:32:55:f5:69:8f:e0:99:b7:13:ea:32:9a:53:b4:
         91:8f:01:38:36:7a:d5:2f:ae:10:f5:d7:9d:5e:7e:12:ff:a7:
         27:48:7a:02:32:d9:52:a2:2a:37:97:69:e7:19:3c:62:95:f9:
         47:09:32:18:f0:44:5a:23:10:43:21:90:4b:85:8b:c8:6e:f7:
         31:ce:07:6e:8e:7f:c0:4f:48:7b:88:1a:27:21:ab:95:47:e6:
         7a:e2:46:3e:60:d9:cb:93:70:d8:89:1a:2d:2a:18:fb:81:10:
         6b:a3:df:23:7c:21:8d:ab:12:64:cf:11:11:dc:bb:08:1c:94:
         05:a6:64:66:02:ad:42:a3:58:2d:ca:1f:6b:94:35:93:8a:af:
         8d:aa:4f:81
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUMOHG2V40eAkoA4hOT7Z0K0f9QXgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA0MDIwNjQzMjdaFw0yNzA0MDEwNjQ4MjdaMDMxMTAvBgNV
BAMTKDcyNUNGQjM0NEQzQkM4RDREMTI4QTZERThBNTI3RDlEMUUzQzcwQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLpUXEQEQMvrckhfUaKTaAi8y4
wiKYHquxs/tGK6gydqt493uHq6CeEgWhUXWYA9BTxLm8/OfeiDNsrzjI/E8wSKM1
F9m6smYey4jTG4sDkhuUke/yPo+/vJqQbpIwOibjvXR0qvpWJukSY+zpY0NW0rr8
liyJIHObodXKztVvRwmjaSIlSBTzx6RoJvcQwewVhKk64gsP+g55hu7MO6TlTxcQ
UqLCKK99hwMK1wu2/6wjVGTyWEviS+fsNU47vFOBjT64sbxOSChtjrd99HIz3tDO
UTaq3WT/UZFmHN6vlmJs2S/ZMfjwIEUz5aOXiYqnysxqEflYT22jfX9HZIDPAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRyXPs0TTvI1NEo
pt6KUn2dHjxwpTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVBS
TWVmM1htazFoR2syZlk3S2hBMlJyUTc2cmdpakp4dWRualp4WkZ4WEMvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlQ
Uk1lZjNYbWsxaEdrMmZZN0toQTJSclE3NnJnaWpKeHVkbmpaeFpGeFhDLzAvNzI1
Q0ZCMzQ0RDNCQzhENEQxMjhBNkRFOEE1MjdEOUQxRTNDNzBBNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQDuuLAMA0EAgACMAcDBQAoBAG4MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQCbDANBgkqhkiG9w0BAQsFAAOCAQEAJHXu7LZ3Bt3Xu4Nj
HjEdrk+GmB9meBXHsHbHtw5B6RGsTQhIgaZJkF7xXGhjyDbIhtmbiaPbVDz10SuB
3R8blALrspbDOPkutaUGy9OyBfDXqCW1W60dMjlov/veZeCHC1QAIbG2FssJ3qfy
UhtjcTJV9WmP4Jm3E+oymlO0kY8BODZ61S+uEPXXnV5+Ev+nJ0h6AjLZUqIqN5dp
5xk8YpX5RwkyGPBEWiMQQyGQS4WLyG73Mc4Hbo5/wE9Ie4gaJyGrlUfmeuJGPmDZ
y5Nw2IkaLSoY+4EQa6PfI3whjasSZM8REdy7CByUBaZkZgKtQqNYLcofa5Q1k4qv
japPgQ==
-----END CERTIFICATE-----
Generated at Thu Apr 9 09:49:22 2026 by rpki-client