Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer
File:                     8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.cer (raw, json)
Hash identifier:          3/RG1Yk2Vwch0TaLdVmpKTK98pxRe/b5wF4s3WnAAqw=
Subject key identifier:   8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       19DCD2F1EC1390804E16B81B819F4E73BDBEDD84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Sep 2025 15:30:05 +0000
Certificate not after:    Fri 11 Sep 2026 15:35:05 +0000
Subordinate resources:    AS: 265461
                          IP: 168.196.152.0/22
                          IP: 2804:347c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 04:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:dc:d2:f1:ec:13:90:80:4e:16:b8:1b:81:9f:4e:73:bd:be:dd:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 12 15:30:05 2025 GMT
            Not After : Sep 11 15:35:05 2026 GMT
        Subject: CN=8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:97:fa:90:7c:76:37:18:3f:fb:34:ec:35:8e:
                    c4:eb:91:42:3c:dc:0c:cc:46:76:ce:6c:ea:6b:9c:
                    d5:a8:5e:fb:18:a6:59:d5:c0:3d:df:a2:25:c7:4a:
                    a9:25:63:ec:cb:16:08:98:cd:07:4e:e7:76:78:cc:
                    19:40:55:3a:e5:58:b3:3d:59:62:ed:00:04:0d:34:
                    d1:a2:c7:a2:87:df:88:ad:ed:68:4c:b3:1e:cf:ac:
                    cd:cb:fd:ee:f2:76:5f:d2:59:b1:5b:59:06:6e:4e:
                    03:8b:bd:68:d8:63:f5:fa:2a:45:61:d9:ff:f7:0a:
                    d1:3c:12:34:4e:2c:83:8d:6c:0a:90:41:4b:32:de:
                    a1:a0:c6:a8:37:37:83:de:2c:f1:9e:c5:cc:07:73:
                    18:1b:1e:38:ef:93:0f:f4:83:06:85:a3:61:eb:d1:
                    b8:5c:7d:04:57:0e:2f:16:d9:d3:e1:a6:85:66:33:
                    e8:49:6f:8c:ba:c2:60:bd:55:aa:bc:43:c8:96:da:
                    61:6a:45:a4:db:e6:ac:fa:91:ca:36:53:ae:4b:9c:
                    07:ed:eb:dc:6b:eb:8a:6a:8d:7b:56:b0:ca:48:60:
                    c5:67:95:e4:a7:78:10:ff:ef:12:4a:26:0b:f4:ae:
                    34:52:dd:13:6a:69:a4:22:c1:e8:9c:55:e7:77:21:
                    e9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:7B:5F:1D:F8:C6:59:D6:DC:9F:CC:53:2A:93:B9:EF:1C:43:C5:69
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9ZYtUbZiphQ9iw9yVc4vsdGHhEBYu8bgxmoXLfHfcb2w/0/8C7B5F1DF8C659D6DC9FCC532A93B9EF1C43C569.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.152.0/22
                IPv6:
                  2804:347c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265461

    Signature Algorithm: sha256WithRSAEncryption
         61:ac:41:93:37:0c:25:40:b0:c1:23:af:0b:49:82:2f:50:09:
         33:8e:a2:5a:eb:15:17:1f:28:7f:b0:f4:b2:1e:1c:c7:b1:66:
         b3:43:09:ea:2c:9f:c3:3a:f0:76:26:93:2c:5c:2d:ca:08:de:
         d4:09:3f:ee:d2:18:94:8f:9f:01:6e:76:b8:65:79:a1:fe:66:
         38:34:5e:f5:90:63:f8:4a:22:6a:8a:6b:47:15:bb:cb:5b:dd:
         aa:90:b0:2a:8d:2d:b0:ce:c6:7e:8a:3e:c2:01:73:8c:dc:24:
         4d:26:d1:72:74:3d:23:81:8f:6d:55:d9:9c:1d:21:b6:fa:c5:
         c2:a2:66:24:25:9c:3b:d0:5a:5a:e8:fe:39:6d:84:54:b8:f3:
         21:03:83:4b:2c:d1:d0:a6:fd:16:10:e1:9e:52:f2:08:91:22:
         cc:c2:6a:eb:9d:fb:0b:d9:21:c3:0b:5b:11:03:68:46:7e:19:
         7e:f7:ab:c5:9c:1e:58:8e:c4:ee:08:3d:c1:a3:60:04:26:f7:
         7a:3c:b6:97:47:fc:90:7b:a6:21:65:c9:34:cd:94:65:47:39:
         c6:a0:2c:0e:22:74:4b:ec:b1:b5:bc:e4:88:d4:15:93:2a:56:
         8f:44:20:18:ae:1b:5d:36:1b:83:cd:92:2e:dc:d1:07:2e:c7:
         9a:7e:3a:fe
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUGdzS8ewTkIBOFrgbgZ9Oc72+3YQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA5MTIxNTMwMDVaFw0yNjA5MTExNTM1MDVaMDMxMTAvBgNV
BAMTKDhDN0I1RjFERjhDNjU5RDZEQzlGQ0M1MzJBOTNCOUVGMUM0M0M1NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFl/qQfHY3GD/7NOw1jsTrkUI8
3AzMRnbObOprnNWoXvsYplnVwD3foiXHSqklY+zLFgiYzQdO53Z4zBlAVTrlWLM9
WWLtAAQNNNGix6KH34it7WhMsx7PrM3L/e7ydl/SWbFbWQZuTgOLvWjYY/X6KkVh
2f/3CtE8EjROLIONbAqQQUsy3qGgxqg3N4PeLPGexcwHcxgbHjjvkw/0gwaFo2Hr
0bhcfQRXDi8W2dPhpoVmM+hJb4y6wmC9Vaq8Q8iW2mFqRaTb5qz6kco2U65LnAft
69xr64pqjXtWsMpIYMVnleSneBD/7xJKJgv0rjRS3RNqaaQiweicVed3IenbAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSMe18d+MZZ1tyf
zFMqk7nvHEPFaTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVpZ
dFViWmlwaFE5aXc5eVZjNHZzZEdIaEVCWXU4Ymd4bW9YTGZIZmNiMncvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzla
WXRVYlppcGhROWl3OXlWYzR2c2RHSGhFQll1OGJneG1vWExmSGZjYjJ3LzAvOEM3
QjVGMURGOEM2NTlENkRDOUZDQzUzMkE5M0I5RUYxQzQzQzU2OS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqMSYMA0EAgACMAcDBQAoBDR8MBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQM9TANBgkqhkiG9w0BAQsFAAOCAQEAYaxBkzcMJUCwwSOv
C0mCL1AJM46iWusVFx8of7D0sh4cx7Fms0MJ6iyfwzrwdiaTLFwtygje1Ak/7tIY
lI+fAW52uGV5of5mODRe9ZBj+EoiaoprRxW7y1vdqpCwKo0tsM7Gfoo+wgFzjNwk
TSbRcnQ9I4GPbVXZnB0htvrFwqJmJCWcO9BaWuj+OW2EVLjzIQODSyzR0Kb9FhDh
nlLyCJEizMJq6537C9khwwtbEQNoRn4ZfverxZweWI7E7gg9waNgBCb3ejy2l0f8
kHumIWXJNM2UZUc5xqAsDiJ0S+yxtbzkiNQVkypWj0QgGK4bXTYbg82SLtzRBy7H
mn46/g==
-----END CERTIFICATE-----
Generated at Thu Sep 18 04:44:35 2025 by rpki-client