Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A3A85B48B681F54A053A076EA1B720D0B68447AA.cer
File:                     A3A85B48B681F54A053A076EA1B720D0B68447AA.cer (raw, json)
Hash identifier:          FiQ1I7CAgS+yUHwDxK9Cpx8liV9RE/gyoNMTCcJhz2Q=
Subject key identifier:   A3:A8:5B:48:B6:81:F5:4A:05:3A:07:6E:A1:B7:20:D0:B6:84:47:AA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       690244ACD12D2BEDD44A2999391DF720C4A87B6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/A3A85B48B681F54A053A076EA1B720D0B68447AA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Oct 2025 14:45:17 +0000
Certificate not after:    Tue 27 Oct 2026 14:50:17 +0000
Subordinate resources:    AS: 271007
                          IP: 170.254.236.0/22
                          IP: 2804:74d8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:02:44:ac:d1:2d:2b:ed:d4:4a:29:99:39:1d:f7:20:c4:a8:7b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 28 14:45:17 2025 GMT
            Not After : Oct 27 14:50:17 2026 GMT
        Subject: CN=A3A85B48B681F54A053A076EA1B720D0B68447AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3a:0b:ff:b7:49:ed:6c:d3:1d:59:8f:a0:68:
                    27:34:9f:de:6f:fd:19:48:b3:e8:14:1f:2e:71:f5:
                    b1:74:44:22:91:a6:94:3c:65:e1:84:be:55:97:ec:
                    22:eb:ef:eb:33:4e:18:0b:fe:54:e2:17:07:1b:34:
                    ec:06:5c:27:8e:dd:ea:2d:5e:01:4d:50:25:a9:48:
                    57:bd:07:1c:32:4d:c7:24:a0:f9:5f:d2:f5:61:be:
                    56:fb:c9:a1:cb:a5:ed:6b:5d:53:3f:b5:04:eb:9b:
                    ef:46:c8:6d:da:bc:01:ee:0e:bd:ea:61:ed:6d:dd:
                    5c:86:f5:ae:d1:da:13:4a:6f:2e:8d:aa:02:7f:dd:
                    62:60:59:b6:88:ae:f3:d4:5f:02:ae:55:63:cc:87:
                    d6:1f:14:cf:95:2d:4c:88:c5:5a:88:9d:03:39:71:
                    c1:f5:d8:00:c9:dc:75:11:58:02:7b:76:24:23:25:
                    54:74:b5:d4:c9:d4:47:60:b3:b1:f2:05:ad:72:42:
                    0c:1b:ef:65:57:73:fd:22:c1:eb:41:66:fc:3c:4c:
                    bf:c3:92:d6:6e:07:bc:fe:98:57:d5:bb:5a:ec:71:
                    58:b3:0a:02:f1:34:36:69:21:ef:c0:cb:ac:46:e2:
                    93:f7:80:47:6d:be:2c:53:eb:fc:14:4c:40:5e:33:
                    07:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A3:A8:5B:48:B6:81:F5:4A:05:3A:07:6E:A1:B7:20:D0:B6:84:47:AA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/A3A85B48B681F54A053A076EA1B720D0B68447AA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.236.0/22
                IPv6:
                  2804:74d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271007

    Signature Algorithm: sha256WithRSAEncryption
         0f:e3:8f:58:7a:5a:1c:7b:cc:64:cb:c8:d4:57:18:96:a7:0f:
         33:15:e2:65:38:8c:f2:e0:e2:a4:2b:1b:7f:9d:b0:a0:e9:04:
         21:ad:4c:05:d4:61:c0:61:b5:db:ba:9b:91:b4:61:21:22:d9:
         ba:46:ce:9d:37:08:a1:2f:31:a9:0a:e6:de:b1:1c:8d:48:b5:
         a7:5d:b8:d0:24:12:78:ad:92:3b:95:f1:83:23:19:5c:8e:17:
         04:d3:96:f1:ba:26:ac:2f:c5:b4:e5:81:d5:97:bc:5a:99:fa:
         65:e1:19:a0:34:d0:82:78:97:73:12:4b:19:25:24:60:84:ea:
         b1:a6:b6:eb:4b:12:e4:ea:a8:19:08:bc:b1:0e:bd:9b:0d:97:
         31:65:c5:08:b2:e0:84:e3:77:37:e9:7c:9a:8c:17:7e:fe:c9:
         42:64:c6:24:07:68:ac:1f:40:0b:78:6c:2a:18:f4:4e:3b:2f:
         7a:5a:75:49:81:4f:3b:b4:9f:c4:3b:b9:88:52:f3:9c:32:05:
         98:8a:df:04:3a:a2:42:95:5e:0f:85:b9:dc:bd:a5:99:e3:80:
         e4:0c:a7:4f:cc:0e:b9:1c:a5:a5:71:71:89:1f:65:bc:b1:b3:
         60:11:d2:ce:32:2b:e5:41:f6:10:b3:ba:e6:dc:78:68:b6:27:
         eb:50:20:87
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUaQJErNEtK+3USimZOR33IMSoe2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEwMjgxNDQ1MTdaFw0yNjEwMjcxNDUwMTdaMDMxMTAvBgNV
BAMTKEEzQTg1QjQ4QjY4MUY1NEEwNTNBMDc2RUExQjcyMEQwQjY4NDQ3QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQOgv/t0ntbNMdWY+gaCc0n95v
/RlIs+gUHy5x9bF0RCKRppQ8ZeGEvlWX7CLr7+szThgL/lTiFwcbNOwGXCeO3eot
XgFNUCWpSFe9BxwyTcckoPlf0vVhvlb7yaHLpe1rXVM/tQTrm+9GyG3avAHuDr3q
Ye1t3VyG9a7R2hNKby6NqgJ/3WJgWbaIrvPUXwKuVWPMh9YfFM+VLUyIxVqInQM5
ccH12ADJ3HURWAJ7diQjJVR0tdTJ1Edgs7HyBa1yQgwb72VXc/0iwetBZvw8TL/D
ktZuB7z+mFfVu1rscVizCgLxNDZpIe/Ay6xG4pP3gEdtvixT6/wUTEBeMwflAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSjqFtItoH1SgU6
B26htyDQtoRHqjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQWtR
c1BaOXZkcDJBTldSb2Y3TmYya3dtcEpxcmhIWHZTQ3l1YkxSZTdGdzMvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Fr
UXNQWjl2ZHAyQU5XUm9mN05mMmt3bXBKcXJoSFh2U0N5dWJMUmU3RnczLzAvQTNB
ODVCNDhCNjgxRjU0QTA1M0EwNzZFQTFCNzIwRDBCNjg0NDdBQS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCqv7sMA0EAgACMAcDBQAoBHTYMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQinzANBgkqhkiG9w0BAQsFAAOCAQEAD+OPWHpaHHvMZMvI
1FcYlqcPMxXiZTiM8uDipCsbf52woOkEIa1MBdRhwGG127qbkbRhISLZukbOnTcI
oS8xqQrm3rEcjUi1p1240CQSeK2SO5XxgyMZXI4XBNOW8bomrC/FtOWB1Ze8Wpn6
ZeEZoDTQgniXcxJLGSUkYITqsaa260sS5OqoGQi8sQ69mw2XMWXFCLLghON3N+l8
mowXfv7JQmTGJAdorB9AC3hsKhj0Tjsvelp1SYFPO7SfxDu5iFLznDIFmIrfBDqi
QpVeD4W53L2lmeOA5AynT8wOuRylpXFxiR9lvLGzYBHSzjIr5UH2ELO65tx4aLYn
61Aghw==
-----END CERTIFICATE-----
Generated at Mon Nov 3 05:24:16 2025 by rpki-client