Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.cer
File:                     7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.cer (raw, json)
Hash identifier:          BrwFL46gZ9inHAVRtjNt65jV+QRLOQom+jBvP6UZY9A=
Subject key identifier:   7E:7A:96:BA:6C:40:87:7E:5B:4E:BD:C5:0E:C2:32:C6:DF:C4:6D:E0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       242E56E70B346EB2636A436A9E35C581CCC692E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 31 Oct 2025 23:19:03 +0000
Certificate not after:    Fri 30 Oct 2026 23:24:03 +0000
Subordinate resources:    AS: 270865
                          IP: 177.53.28.0/22
                          IP: 2804:72a0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2e:56:e7:0b:34:6e:b2:63:6a:43:6a:9e:35:c5:81:cc:c6:92:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 31 23:19:03 2025 GMT
            Not After : Oct 30 23:24:03 2026 GMT
        Subject: CN=7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6c:aa:82:11:08:65:30:41:aa:4a:ad:6f:06:
                    b6:e0:ee:f5:a8:4c:77:37:5c:82:26:e7:7e:0c:60:
                    d0:3d:4c:a7:02:3b:11:1c:87:f2:a6:5b:25:d8:4e:
                    46:39:d8:1b:ed:32:9d:f5:9d:c7:71:81:e0:67:f6:
                    6c:d1:5e:11:a8:29:a5:8e:41:df:49:25:66:27:ec:
                    ac:33:f6:e8:72:ed:f8:2b:ae:7a:a4:32:a2:b4:1c:
                    61:34:60:00:2e:18:12:a3:d7:e9:ec:c7:34:13:df:
                    17:f0:ce:08:7f:28:c3:b9:9d:95:e4:cf:6a:89:a4:
                    d0:7b:7d:13:20:cc:aa:66:fa:cd:30:ae:bd:9d:e2:
                    95:ff:d9:0e:30:99:5e:0b:b2:7b:30:3e:5e:ff:0b:
                    9e:73:82:1f:2b:ba:ef:b3:c5:c9:70:71:51:99:13:
                    8e:13:a6:ec:2d:85:88:a2:bf:af:10:b8:be:ac:f8:
                    9a:6d:67:96:fc:2c:4f:73:2e:24:26:e4:a5:fd:8f:
                    89:8d:f1:59:a1:f1:e7:86:0e:29:e4:0c:3b:a5:19:
                    3b:59:34:a1:8d:72:61:a5:bd:50:90:e6:e1:a4:ca:
                    08:6e:b6:ea:c9:0c:4d:de:e8:94:6b:91:f3:38:4d:
                    2c:26:a8:9d:cb:f5:21:38:2c:23:61:7f:25:db:b8:
                    c6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:7A:96:BA:6C:40:87:7E:5B:4E:BD:C5:0E:C2:32:C6:DF:C4:6D:E0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/7E7A96BA6C40877E5B4EBDC50EC232C6DFC46DE0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.28.0/22
                IPv6:
                  2804:72a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270865

    Signature Algorithm: sha256WithRSAEncryption
         1d:37:a2:56:2d:8b:c7:de:ee:88:e8:6c:9a:28:a6:22:bd:4d:
         4f:11:e2:a3:62:6f:d3:d3:57:b3:1c:16:62:80:ed:50:ed:de:
         76:04:bc:0d:f6:28:19:c4:04:f5:88:83:e6:9d:a9:c6:fe:4f:
         8c:24:5d:f5:31:3f:09:8f:3d:3f:3c:69:47:87:67:94:66:04:
         f3:28:ca:23:f4:b4:58:f3:86:05:8d:55:2a:1f:66:75:1d:19:
         02:47:96:e6:9a:5d:5b:b6:e6:dc:ec:dc:bd:2e:ee:7c:fa:bd:
         2b:09:30:41:b7:71:a4:11:a2:ab:8c:24:48:7d:7a:1c:e1:64:
         63:6e:16:ee:43:91:9c:d0:65:e8:fc:68:b1:49:89:f1:df:c7:
         af:ad:d9:6c:be:89:fc:e2:b3:65:46:97:ab:b1:84:bc:59:46:
         a7:d3:4a:5b:b2:c5:2e:3a:77:07:4f:94:dd:fc:a4:74:17:83:
         9d:b9:a8:e9:d0:db:b5:d4:9f:68:87:a0:98:f6:30:93:56:ef:
         b4:95:e7:a7:00:4a:40:39:90:61:8c:23:58:ef:b8:22:77:e9:
         08:20:3d:f3:40:0c:af:79:31:66:f6:a6:61:36:88:05:7d:06:
         46:ed:c1:88:72:50:45:eb:32:4f:be:c9:7e:de:1b:b3:1e:0f:
         6e:f8:74:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:19:18 2025 by rpki-client