Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer
File:                     A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.cer (raw, json)
Hash identifier:          PqfL8S2X6Ni9CyssuS4RASPz4yRAOFYvyvy5y73X0qM=
Subject key identifier:   A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3DA26C727E2D58AE7528CD6D88E9AF299A095E37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Oct 2025 13:59:45 +0000
Certificate not after:    Thu 22 Oct 2026 14:04:45 +0000
Subordinate resources:    AS: 262797
                          IP: 131.72.92.0/22
                          IP: 179.97.64.0/21
                          IP: 186.237.0.0/20
                          IP: 2804:23c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 11:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a2:6c:72:7e:2d:58:ae:75:28:cd:6d:88:e9:af:29:9a:09:5e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 23 13:59:45 2025 GMT
            Not After : Oct 22 14:04:45 2026 GMT
        Subject: CN=A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7f:94:9a:fb:fb:09:45:2c:f1:d8:34:c5:c4:
                    e4:e7:f1:21:b6:4a:a4:fc:ba:97:ab:64:b3:9b:5c:
                    04:b2:69:a0:0f:56:98:63:ff:09:0a:a3:ce:ae:4d:
                    a4:b8:49:0a:6e:a3:8b:43:92:e3:b1:fb:95:b3:ee:
                    40:3b:7e:3c:7a:7f:a0:67:7c:cc:d5:de:16:51:be:
                    f2:ff:ab:f9:aa:4c:95:c8:8b:a4:48:d6:c2:94:4f:
                    3c:64:c3:e8:b8:36:2c:f7:c0:ba:48:53:a2:89:ae:
                    b1:9c:30:71:91:8f:e3:ce:4b:fe:62:8f:79:1d:c2:
                    0a:eb:28:f4:06:84:3d:34:8a:dd:ec:29:3f:ba:f8:
                    14:14:5d:a2:c7:c8:ed:df:d1:98:a6:f9:5b:24:58:
                    fd:d6:34:e2:86:67:a5:d4:64:1c:2f:69:e7:c2:7b:
                    10:e8:b6:c0:2a:39:c1:49:0f:11:a5:67:61:89:ad:
                    3b:31:6c:c8:0e:a9:02:72:7f:56:c3:f7:52:0a:95:
                    88:fc:bb:46:3f:47:56:7e:4b:ac:67:55:c5:cd:3d:
                    23:31:2a:1a:27:95:da:f7:a0:b9:69:05:5b:67:73:
                    f4:b5:39:3c:c0:cf:10:17:d7:8c:f2:9d:a9:0a:f4:
                    22:0b:2a:2d:5e:e0:0a:d3:06:e7:f4:40:c1:79:26:
                    60:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:2C:DA:4A:E4:B5:CA:D7:3B:06:8C:F6:1D:2E:E8:2C:BE:90:C2:0B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CYpPsBtEta9JL8S2SgoTnz9v2y4C56FH89bWgVBFTNPS/2/A62CDA4AE4B5CAD73B068CF61D2EE82CBE90C20B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.92.0/22
                  179.97.64.0/21
                  186.237.0.0/20
                IPv6:
                  2804:23c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262797

    Signature Algorithm: sha256WithRSAEncryption
         92:40:55:4d:4a:ad:5e:2c:bf:29:2c:6f:80:98:5e:2d:82:5a:
         fe:6f:f8:78:7a:cc:11:bb:6a:96:f8:c4:7b:ee:9a:ac:d0:86:
         93:8e:72:21:d4:e6:5f:d0:49:9c:98:5a:b5:80:cd:4d:79:51:
         5c:ce:ba:b7:28:db:4d:6f:d8:f3:6d:17:0d:99:c4:7b:a3:a6:
         70:76:76:b8:b7:4b:2b:62:f5:d6:12:aa:87:67:5d:2a:8c:3d:
         70:ae:34:cc:2a:23:07:64:78:93:03:b2:52:ef:c5:bb:3a:93:
         4d:aa:5c:0c:dc:2f:00:72:cc:ff:fd:07:13:05:1b:df:c6:14:
         78:d7:5b:4a:04:8c:7e:cb:c5:43:29:e6:5f:85:e0:52:31:35:
         5f:d3:15:03:d5:ff:61:cf:63:40:b2:c0:d8:3a:d2:6b:85:9c:
         b5:1c:f2:6e:7d:72:2c:3d:ea:be:d9:59:b4:98:b3:7e:e2:0f:
         29:78:f6:ab:c9:d2:2e:86:77:a5:86:40:aa:a3:be:12:75:e0:
         73:47:07:ed:fd:05:88:a8:42:76:0b:98:65:c5:e0:77:49:2e:
         8a:81:06:a2:59:3c:92:8a:b3:95:d7:df:de:40:50:1f:8a:31:
         c8:86:98:1f:02:96:85:89:fd:4e:43:1c:02:6e:43:fa:70:f4:
         2a:35:e7:3a
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgIUPaJscn4tWK51KM1tiOmvKZoJXjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEwMjMxMzU5NDVaFw0yNjEwMjIxNDA0NDVaMDMxMTAvBgNV
BAMTKEE2MkNEQTRBRTRCNUNBRDczQjA2OENGNjFEMkVFODJDQkU5MEMyMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDf5Sa+/sJRSzx2DTFxOTn8SG2
SqT8uperZLObXASyaaAPVphj/wkKo86uTaS4SQpuo4tDkuOx+5Wz7kA7fjx6f6Bn
fMzV3hZRvvL/q/mqTJXIi6RI1sKUTzxkw+i4Niz3wLpIU6KJrrGcMHGRj+POS/5i
j3kdwgrrKPQGhD00it3sKT+6+BQUXaLHyO3f0Zim+VskWP3WNOKGZ6XUZBwvaefC
exDotsAqOcFJDxGlZ2GJrTsxbMgOqQJyf1bD91IKlYj8u0Y/R1Z+S6xnVcXNPSMx
Khonldr3oLlpBVtnc/S1OTzAzxAX14zynakK9CILKi1e4ArTBuf0QMF5JmB3AgMB
AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSmLNpK5LXK1zsG
jPYdLugsvpDCCzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQ1lw
UHNCdEV0YTlKTDhTMlNnb1Ruejl2Mnk0QzU2Rkg4OWJXZ1ZCRlROUFMvMi8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NZ
cFBzQnRFdGE5Skw4UzJTZ29Ubno5djJ5NEM1NkZIODliV2dWQkZUTlBTLzIvQTYy
Q0RBNEFFNEI1Q0FENzNCMDY4Q0Y2MUQyRUU4MkNCRTkwQzIwQi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH
AQH/BCswKTAYBAIAATASAwQCg0hcAwQDs2FAAwQEuu0AMA0EAgACMAcDBQAoBAI8
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQCjTANBgkqhkiG9w0BAQsFAAOCAQEA
kkBVTUqtXiy/KSxvgJheLYJa/m/4eHrMEbtqlvjEe+6arNCGk45yIdTmX9BJnJha
tYDNTXlRXM66tyjbTW/Y820XDZnEe6OmcHZ2uLdLK2L11hKqh2ddKow9cK40zCoj
B2R4kwOyUu/FuzqTTapcDNwvAHLM//0HEwUb38YUeNdbSgSMfsvFQynmX4XgUjE1
X9MVA9X/Yc9jQLLA2DrSa4WctRzybn1yLD3qvtlZtJizfuIPKXj2q8nSLoZ3pYZA
qqO+EnXgc0cH7f0FiKhCdguYZcXgd0kuioEGolk8koqzldff3kBQH4oxyIaYHwKW
hYn9TkMcAm5D+nD0KjXnOg==
-----END CERTIFICATE-----
Generated at Mon Nov 3 11:56:19 2025 by rpki-client