Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AD74CAB99F32EE468020770D4BDB780560E9ECEF.cer
File:                     AD74CAB99F32EE468020770D4BDB780560E9ECEF.cer (raw, json)
Hash identifier:          bkRNgLAA2ngPALHmFIw187pbFtqPJ6HLis6Ljw0JI9Y=
Subject key identifier:   AD:74:CA:B9:9F:32:EE:46:80:20:77:0D:4B:DB:78:05:60:E9:EC:EF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0947EE3F8FEA718D289E1F58ACF047704FB31D27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HtbpJmV5cxyGBXzebsPTRbaiNatLyo9TL88mZkHz7vai/0/AD74CAB99F32EE468020770D4BDB780560E9ECEF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HtbpJmV5cxyGBXzebsPTRbaiNatLyo9TL88mZkHz7vai/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 25 Oct 2025 14:31:37 +0000
Certificate not after:    Sat 24 Oct 2026 14:36:37 +0000
Subordinate resources:    AS: 274557
                          IP: 2804:95f0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:47:ee:3f:8f:ea:71:8d:28:9e:1f:58:ac:f0:47:70:4f:b3:1d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 25 14:31:37 2025 GMT
            Not After : Oct 24 14:36:37 2026 GMT
        Subject: CN=AD74CAB99F32EE468020770D4BDB780560E9ECEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7c:c8:b8:b1:c5:d5:57:cd:cf:da:1f:38:dc:
                    2b:56:0e:a0:85:78:bd:02:34:87:a6:28:b5:e3:7f:
                    09:65:ab:1b:ba:94:f5:14:d9:eb:4e:f5:33:4f:d2:
                    3b:fa:4f:13:8b:a0:0d:4d:aa:39:2c:e9:9a:a6:10:
                    e6:81:2d:ae:d2:41:37:73:ec:7b:e6:f9:e7:3e:ee:
                    18:25:f2:c7:9c:0d:46:ae:2c:3e:ff:b2:7d:46:30:
                    71:64:ea:53:8e:52:b4:f8:ed:71:9a:d4:a0:db:75:
                    d0:7f:25:41:70:88:13:9e:f1:3f:9a:fe:84:63:ab:
                    e7:39:1a:a7:26:f2:0b:c4:71:f8:d2:b0:bc:fa:f1:
                    e5:4c:65:07:82:5f:17:a9:da:88:65:5c:68:50:fa:
                    53:4e:cf:4c:da:3f:01:fa:d8:9f:67:9b:00:0e:5a:
                    67:2b:e6:99:35:48:7a:8a:f4:3a:d9:95:5b:ac:c1:
                    63:2a:3b:ab:3e:c5:41:96:a5:77:a9:46:f4:31:25:
                    ca:9a:df:d7:59:63:67:e7:a8:d4:29:b2:be:26:99:
                    34:46:73:d5:d6:52:2f:12:1c:a6:09:ad:f9:79:95:
                    de:37:5a:ca:11:f7:f5:6b:c9:8a:a3:68:05:d6:77:
                    df:7f:05:23:8e:9d:8d:3f:9f:a8:97:0e:45:98:7e:
                    af:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:74:CA:B9:9F:32:EE:46:80:20:77:0D:4B:DB:78:05:60:E9:EC:EF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HtbpJmV5cxyGBXzebsPTRbaiNatLyo9TL88mZkHz7vai/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HtbpJmV5cxyGBXzebsPTRbaiNatLyo9TL88mZkHz7vai/0/AD74CAB99F32EE468020770D4BDB780560E9ECEF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:95f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274557

    Signature Algorithm: sha256WithRSAEncryption
         2c:75:6f:eb:47:d0:c2:dc:32:91:14:0c:c4:e2:4b:e9:e6:f4:
         b7:79:39:f3:61:23:98:4b:a8:12:87:9f:8e:a6:7c:83:44:71:
         cb:cf:bd:1c:5b:9b:c1:0e:27:77:ce:5b:f9:95:bb:80:7f:4f:
         8e:b9:dd:3d:be:fa:c9:28:94:aa:95:2a:4e:c6:07:7c:50:73:
         77:93:da:56:c3:a1:7f:1c:26:f5:e7:a9:cd:0c:bd:d4:c7:5f:
         52:c7:ad:ec:5d:67:47:18:6c:0d:af:7f:7d:bf:ff:ae:d3:c1:
         0c:33:d5:b4:50:3c:c5:e2:cb:18:1c:63:9b:1e:a3:10:3d:fd:
         40:8c:e9:49:25:21:41:1c:45:6e:73:f4:e2:52:86:50:59:a5:
         4f:51:f6:00:fa:3f:f9:02:74:5b:e9:db:88:c0:db:9e:89:9b:
         c4:eb:3d:16:8b:59:88:b4:5c:8e:63:9a:f7:68:45:df:40:fc:
         e1:af:2e:15:50:07:a9:53:14:9c:83:f2:73:0b:56:13:a8:26:
         ff:4d:75:9c:bc:9d:95:c7:ad:02:dd:4a:45:c5:63:3d:99:7b:
         9d:43:c6:a5:c9:ab:74:6f:28:af:75:2c:84:62:57:fc:f8:bf:
         18:82:86:c3:d3:87:0b:62:ef:33:ed:fa:f8:b2:36:88:da:73:
         be:cf:26:b4
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIUCUfuP4/qcY0onh9YrPBHcE+zHScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEwMjUxNDMxMzdaFw0yNjEwMjQxNDM2MzdaMDMxMTAvBgNV
BAMTKEFENzRDQUI5OUYzMkVFNDY4MDIwNzcwRDRCREI3ODA1NjBFOUVDRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClfMi4scXVV83P2h843CtWDqCF
eL0CNIemKLXjfwllqxu6lPUU2etO9TNP0jv6TxOLoA1Nqjks6ZqmEOaBLa7SQTdz
7Hvm+ec+7hgl8secDUauLD7/sn1GMHFk6lOOUrT47XGa1KDbddB/JUFwiBOe8T+a
/oRjq+c5Gqcm8gvEcfjSsLz68eVMZQeCXxep2ohlXGhQ+lNOz0zaPwH62J9nmwAO
Wmcr5pk1SHqK9DrZlVuswWMqO6s+xUGWpXepRvQxJcqa39dZY2fnqNQpsr4mmTRG
c9XWUi8SHKYJrfl5ld43WsoR9/VryYqjaAXWd99/BSOOnY0/n6iXDkWYfq99AgMB
AAGjggMsMIIDKDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBStdMq5nzLuRoAg
dw1L23gFYOns7zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSHRi
cEptVjVjeHlHQlh6ZWJzUFRSYmFpTmF0THlvOVRMODhtWmtIejd2YWkvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0h0
YnBKbVY1Y3h5R0JYemVic1BUUmJhaU5hdEx5bzlUTDg4bVprSHo3dmFpLzAvQUQ3
NENBQjk5RjMyRUU0NjgwMjA3NzBENEJEQjc4MDU2MEU5RUNFRi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKASV8DAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
MH0wDQYJKoZIhvcNAQELBQADggEBACx1b+tH0MLcMpEUDMTiS+nm9Ld5OfNhI5hL
qBKHn46mfINEccvPvRxbm8EOJ3fOW/mVu4B/T4653T2++skolKqVKk7GB3xQc3eT
2lbDoX8cJvXnqc0MvdTHX1LHrexdZ0cYbA2vf32//67TwQwz1bRQPMXiyxgcY5se
oxA9/UCM6UklIUEcRW5z9OJShlBZpU9R9gD6P/kCdFvp24jA256Jm8TrPRaLWYi0
XI5jmvdoRd9A/OGvLhVQB6lTFJyD8nMLVhOoJv9NdZy8nZXHrQLdSkXFYz2Ze51D
xqXJq3RvKK91LIRiV/z4vxiChsPThwti7zPt+viyNojac77PJrQ=
-----END CERTIFICATE-----
Generated at Mon Nov 3 05:19:17 2025 by rpki-client