Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9E6AC5393A7C37CC49D15B3002E58F6A2FE74425.cer
File:                     9E6AC5393A7C37CC49D15B3002E58F6A2FE74425.cer (raw, json)
Hash identifier:          tuDJ4qU3j5kmkHbzXvVfnksFjbtB4Rbrt7EXN8H5/9I=
Subject key identifier:   9E:6A:C5:39:3A:7C:37:CC:49:D1:5B:30:02:E5:8F:6A:2F:E7:44:25
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1AB63F2583433EFBD8BDA750C3367718BACA4B5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/9E6AC5393A7C37CC49D15B3002E58F6A2FE74425.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Oct 2025 19:31:26 +0000
Certificate not after:    Tue 20 Oct 2026 19:36:26 +0000
Subordinate resources:    AS: 265335
                          IP: 45.188.148.0/22
                          IP: 168.181.12.0/22
                          IP: 187.63.120.0/22
                          IP: 2804:2e44::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 00:09:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b6:3f:25:83:43:3e:fb:d8:bd:a7:50:c3:36:77:18:ba:ca:4b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 21 19:31:26 2025 GMT
            Not After : Oct 20 19:36:26 2026 GMT
        Subject: CN=9E6AC5393A7C37CC49D15B3002E58F6A2FE74425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:45:15:db:d6:56:46:bb:df:2b:25:2c:0f:31:
                    cd:1b:63:c8:c6:9d:bc:f9:10:c6:b6:9d:c6:ae:04:
                    7e:cc:5a:ee:b7:38:b6:7d:db:bf:18:fa:0e:58:e2:
                    a7:ed:25:00:76:dc:5f:0c:be:85:f6:5b:c4:b2:02:
                    6d:94:a7:46:e3:e1:4a:15:d9:06:09:5e:f0:84:5a:
                    16:8d:3d:df:0a:c6:04:8e:2b:65:e2:f1:79:9a:8c:
                    4f:65:da:fc:54:35:fb:b1:14:7c:6c:46:c3:a5:01:
                    de:a0:d8:a4:81:23:7e:18:5a:63:cd:0b:7f:87:34:
                    aa:5e:d6:61:2b:53:61:f7:ff:c3:c5:e1:65:6c:0f:
                    68:cc:a1:2f:d5:ad:7d:30:19:3c:4e:7c:fc:5c:6f:
                    69:75:cb:f5:48:78:33:2c:e7:1a:62:71:b0:3f:b1:
                    11:94:39:4e:48:a0:fa:74:36:8c:05:a1:c9:41:68:
                    f2:1e:bb:47:7f:18:cc:b6:96:30:36:94:e5:a4:3a:
                    0d:e4:7d:2c:d6:a9:78:bb:19:39:27:22:86:39:ac:
                    00:47:be:97:b2:01:8a:29:1b:d7:b6:61:59:7d:94:
                    0d:a1:5e:5a:1e:ca:3e:d6:19:c6:9b:44:92:e8:0f:
                    46:ec:31:3a:88:2b:3d:f5:a2:eb:af:d1:cf:4d:d1:
                    a7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9E:6A:C5:39:3A:7C:37:CC:49:D1:5B:30:02:E5:8F:6A:2F:E7:44:25
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/9E6AC5393A7C37CC49D15B3002E58F6A2FE74425.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.148.0/22
                  168.181.12.0/22
                  187.63.120.0/22
                IPv6:
                  2804:2e44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265335

    Signature Algorithm: sha256WithRSAEncryption
         32:cd:15:94:28:34:af:0d:be:77:0c:f7:a5:a9:61:b6:b8:7e:
         4d:a8:3c:5c:46:06:33:88:98:64:1b:07:bf:da:b2:19:af:17:
         58:71:51:90:9f:87:b6:59:4f:3f:8d:45:60:a7:1f:e8:65:a6:
         4b:d9:1e:85:36:0d:24:68:89:8b:3c:67:c4:a9:a6:7f:49:27:
         19:20:89:49:be:08:0a:41:04:8e:29:02:d5:b3:f0:e8:af:35:
         36:30:c0:53:5f:5e:3c:20:d9:aa:5f:7e:5a:a1:3f:0c:62:c9:
         71:41:a9:68:0d:05:af:51:e0:08:de:28:30:bc:4c:c3:4d:d9:
         db:80:d5:1d:9a:b7:3f:b6:6d:76:eb:68:a3:c6:26:1d:b1:c5:
         5c:8f:11:16:29:7f:53:3a:fd:ee:ba:90:4c:8b:ad:26:5c:41:
         33:f9:fa:8c:96:6e:2f:93:aa:e4:d7:3d:e0:88:13:2f:2d:cb:
         70:94:33:30:3a:d6:b3:3f:f2:c7:18:34:56:a8:bd:7d:6a:d4:
         a3:db:fc:03:9f:f3:e5:33:96:f9:04:80:64:f4:83:11:d2:dc:
         ea:93:48:20:6f:17:2b:b8:fa:07:40:fc:12:b8:8c:38:41:40:
         fd:e0:d0:52:08:ed:7f:53:3d:1f:28:0c:01:1f:81:cc:0a:27:
         c6:13:5a:d8
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgIUGrY/JYNDPvvYvadQwzZ3GLrKS1owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEwMjExOTMxMjZaFw0yNjEwMjAxOTM2MjZaMDMxMTAvBgNV
BAMTKDlFNkFDNTM5M0E3QzM3Q0M0OUQxNUIzMDAyRTU4RjZBMkZFNzQ0MjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpRRXb1lZGu98rJSwPMc0bY8jG
nbz5EMa2ncauBH7MWu63OLZ9278Y+g5Y4qftJQB23F8MvoX2W8SyAm2Up0bj4UoV
2QYJXvCEWhaNPd8KxgSOK2Xi8XmajE9l2vxUNfuxFHxsRsOlAd6g2KSBI34YWmPN
C3+HNKpe1mErU2H3/8PF4WVsD2jMoS/VrX0wGTxOfPxcb2l1y/VIeDMs5xpicbA/
sRGUOU5IoPp0NowFoclBaPIeu0d/GMy2ljA2lOWkOg3kfSzWqXi7GTknIoY5rABH
vpeyAYopG9e2YVl9lA2hXloeyj7WGcabRJLoD0bsMTqIKz31ouuv0c9N0afBAgMB
AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSeasU5Onw3zEnR
WzAC5Y9qL+dEJTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOFZQ
UDg3Rkp0WWlmcERaeks4bmRaTlhDUmJ1MnU4bUxaVjdlSnJpQWYxaG0vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhW
UFA4N0ZKdFlpZnBEWnpLOG5kWk5YQ1JidTJ1OG1MWlY3ZUpyaUFmMWhtLzAvOUU2
QUM1MzkzQTdDMzdDQzQ5RDE1QjMwMDJFNThGNkEyRkU3NDQyNS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH
AQH/BCswKTAYBAIAATASAwQCLbyUAwQCqLUMAwQCuz94MA0EAgACMAcDBQAoBC5E
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQMdzANBgkqhkiG9w0BAQsFAAOCAQEA
Ms0VlCg0rw2+dwz3palhtrh+Tag8XEYGM4iYZBsHv9qyGa8XWHFRkJ+HtllPP41F
YKcf6GWmS9kehTYNJGiJizxnxKmmf0knGSCJSb4ICkEEjikC1bPw6K81NjDAU19e
PCDZql9+WqE/DGLJcUGpaA0Fr1HgCN4oMLxMw03Z24DVHZq3P7Ztdutoo8YmHbHF
XI8RFil/Uzr97rqQTIutJlxBM/n6jJZuL5Oq5Nc94IgTLy3LcJQzMDrWsz/yxxg0
Vqi9fWrUo9v8A5/z5TOW+QSAZPSDEdLc6pNIIG8XK7j6B0D8EriMOEFA/eDQUgjt
f1M9HygMAR+BzAonxhNa2A==
-----END CERTIFICATE-----
Generated at Sun Nov 2 23:00:28 2025 by rpki-client