Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
File:                     77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer (raw, json)
Hash identifier:          krHDeqRcN3D2xEBiHphkxtGE/aV1f63X1kPtWHXwEQA=
Subject key identifier:   77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       478C5B4E4DE8BC0E8EC455FB333C09484D1446E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Oct 2025 20:41:12 +0000
Certificate not after:    Wed 21 Oct 2026 20:46:12 +0000
Subordinate resources:    AS: 262765
                          IP: 131.221.56.0/22
                          IP: 138.121.252.0/22
                          IP: 168.232.72.0/22
                          IP: 170.80.152.0/22
                          IP: 186.227.0.0/20
                          IP: 2804:1dfc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 12:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8c:5b:4e:4d:e8:bc:0e:8e:c4:55:fb:33:3c:09:48:4d:14:46:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 22 20:41:12 2025 GMT
            Not After : Oct 21 20:46:12 2026 GMT
        Subject: CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ec:f5:de:97:47:7e:13:5e:64:84:c0:57:fd:
                    74:99:ab:e2:a4:3e:9d:13:8c:a7:5c:8e:99:01:60:
                    e0:71:95:81:c3:44:91:65:f1:fe:7d:3b:83:6e:ed:
                    ba:3e:fa:d1:88:ea:c1:d8:51:c8:ad:32:6c:d9:05:
                    ae:ad:63:76:26:6b:1f:9b:c5:95:83:96:4f:43:2e:
                    f5:da:a1:10:83:2f:a7:0d:53:64:c1:a5:0c:14:38:
                    3b:16:c8:ff:03:70:24:a1:96:e5:6f:c6:a9:3f:54:
                    e3:1e:7b:eb:ad:ef:8d:ee:0c:6b:f7:94:45:0a:e6:
                    b7:f0:0d:05:7b:07:61:26:1a:82:d2:0c:b4:46:67:
                    10:f6:a0:a0:b4:77:ad:6f:26:07:71:2a:bb:16:e4:
                    af:3c:cd:6e:1b:01:99:8b:f0:f8:23:d7:4f:a2:67:
                    63:29:69:3e:81:24:e8:21:c7:cd:d6:d2:18:4d:8b:
                    5e:f0:f2:5e:51:fa:cc:e9:99:0d:e4:16:0e:ed:1d:
                    22:e3:b5:e6:0b:58:d8:bd:57:11:86:3c:7f:a9:56:
                    00:cf:dc:3e:f9:29:fa:d3:16:2a:ee:2e:45:fa:f9:
                    bc:45:5b:f9:cb:e4:48:aa:ed:10:61:61:12:b3:0e:
                    fe:b3:af:39:8c:31:39:87:e5:95:8e:65:74:a0:21:
                    2f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.56.0/22
                  138.121.252.0/22
                  168.232.72.0/22
                  170.80.152.0/22
                  186.227.0.0/20
                IPv6:
                  2804:1dfc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262765

    Signature Algorithm: sha256WithRSAEncryption
         0f:50:b3:3d:ae:30:92:88:64:14:25:24:f3:11:c3:e1:38:91:
         ab:77:21:94:4f:e3:86:21:d9:bc:0c:c9:6b:8f:5a:35:4d:bd:
         4d:f9:85:60:87:82:f4:ee:c0:66:64:cf:b2:49:78:83:6d:5f:
         01:aa:c5:0b:7e:82:e5:7d:40:7d:d0:9b:3a:53:92:ff:4d:5c:
         9b:8e:48:2c:b1:c3:33:c0:c7:b1:7f:6a:90:4e:da:dc:ae:d5:
         cc:cd:12:84:4d:fb:8a:57:2d:02:ba:26:90:10:fb:b7:ef:6d:
         56:44:9b:58:e8:ca:35:96:23:cf:be:2b:5e:89:3d:88:c0:02:
         d0:31:2c:18:bd:c3:b9:03:21:4a:d9:6f:75:c6:14:ff:29:bc:
         1d:a4:0b:ec:9a:ae:fe:9e:6b:17:5b:cd:d0:9a:fe:b2:a4:15:
         fd:26:70:3f:ab:50:c8:a5:69:71:fa:af:04:1f:11:ac:3d:63:
         76:17:e2:70:3b:85:c7:3f:08:45:a7:66:c3:f2:1d:53:7a:d8:
         39:48:c6:e8:b0:81:b8:4f:87:12:c3:23:78:5b:c4:c4:ce:a7:
         a2:d1:4b:e9:77:01:89:09:60:d7:df:a9:dc:f4:89:f1:d9:ff:
         5f:c2:e1:2c:9a:45:20:57:cf:25:95:1a:36:9e:4a:68:17:2b:
         f6:79:19:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 11:56:15 2025 by rpki-client