Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D51A8889DA4DB7C213105D9FA5D4DE23BA6B4B44.cer
File:                     D51A8889DA4DB7C213105D9FA5D4DE23BA6B4B44.cer (raw, json)
Hash identifier:          CxllfNruZ6ju9sJXNV/qSY5PEJQdEhZtpWhmSOlraeE=
Subject key identifier:   D5:1A:88:89:DA:4D:B7:C2:13:10:5D:9F:A5:D4:DE:23:BA:6B:4B:44
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       545E77F679C7FFEF372F2A3AD25094823D6EB0B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/D51A8889DA4DB7C213105D9FA5D4DE23BA6B4B44.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Jul 2026 14:49:38 +0000
Certificate not after:    Tue 06 Jul 2027 14:54:38 +0000
Subordinate resources:    AS: 53097
                          IP: 187.63.208.0/20
                          IP: 2804:3190::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 14:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:5e:77:f6:79:c7:ff:ef:37:2f:2a:3a:d2:50:94:82:3d:6e:b0:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul  7 14:49:38 2026 GMT
            Not After : Jul  6 14:54:38 2027 GMT
        Subject: CN=D51A8889DA4DB7C213105D9FA5D4DE23BA6B4B44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:07:da:41:6c:d4:c1:6b:75:ca:53:5a:1e:0b:
                    63:87:fb:c0:97:b0:63:c2:c1:6e:ee:d8:ee:df:8f:
                    b2:af:df:1a:00:21:fc:59:a8:bb:cf:35:47:af:dc:
                    50:34:6f:11:35:cc:76:05:e4:ef:b1:f4:8f:fd:83:
                    e9:7f:58:53:80:c1:34:3f:45:e7:e6:bc:4e:81:b8:
                    60:e1:38:44:3d:bd:34:9d:5c:26:57:dc:ff:4f:23:
                    3c:43:02:34:34:af:41:79:5a:f7:e0:8a:f6:20:d9:
                    f4:4e:8d:31:19:4c:f2:44:18:b3:b2:9b:64:cf:82:
                    21:94:1f:52:9e:5b:59:d5:a2:d6:39:52:bb:d0:af:
                    00:b6:50:54:b7:fe:59:c7:e2:e6:06:ea:48:74:02:
                    a3:46:70:ae:59:22:31:89:0b:24:fa:c5:49:42:c9:
                    32:e3:70:17:1f:d7:b1:fd:94:7d:af:72:48:78:94:
                    2c:85:c6:e4:10:af:68:50:85:c1:34:6c:4f:fa:1e:
                    fe:45:7d:ea:4b:48:7f:e8:8a:48:eb:0d:ad:17:46:
                    20:8e:7c:29:92:c4:10:39:2b:fd:80:80:30:52:30:
                    d9:a9:8a:c9:ed:53:85:ee:87:84:88:aa:7e:12:05:
                    6c:09:99:7f:5f:fd:17:2e:bc:f2:bd:45:e5:7f:ae:
                    66:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:1A:88:89:DA:4D:B7:C2:13:10:5D:9F:A5:D4:DE:23:BA:6B:4B:44
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BDRcUWNayGQ9t7MnRBTVAYTRk3c4VmdLSa4H7KgXahPr/0/D51A8889DA4DB7C213105D9FA5D4DE23BA6B4B44.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.208.0/20
                IPv6:
                  2804:3190::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53097

    Signature Algorithm: sha256WithRSAEncryption
         c5:aa:19:70:ef:ad:09:ba:7f:43:51:1b:71:42:3a:b1:33:eb:
         dc:a8:48:f6:f9:54:3d:39:88:8a:64:92:87:38:a8:f0:e1:4a:
         0b:44:eb:ae:3a:00:fd:8b:f5:0d:5f:bd:b0:8d:5e:b6:7f:b5:
         21:86:fb:e8:02:ae:34:ef:94:99:62:e5:cf:68:e2:8d:19:06:
         09:f6:ed:7e:6b:4d:07:3f:58:c7:f5:f0:ef:62:eb:94:bc:34:
         33:74:ae:30:38:f8:d6:a7:8f:b7:f5:d9:ad:0a:e2:33:6c:09:
         14:3d:57:44:cd:75:0e:a6:f9:16:86:56:63:4c:63:50:dd:c8:
         04:e3:55:39:70:a2:d4:78:c2:d4:ef:b5:b6:12:33:75:4e:fc:
         52:c1:28:46:60:ef:42:e7:9d:95:aa:00:e7:4e:29:d6:c3:13:
         79:4b:19:3d:9b:a0:f1:f1:87:3c:49:bf:71:9e:ab:48:6b:cd:
         c8:63:88:21:29:33:27:3b:0f:42:c5:09:5b:c9:d0:17:75:2c:
         79:14:d2:f4:18:92:ea:15:e8:7f:9c:97:5b:62:56:2d:27:e1:
         be:f8:79:7e:fc:79:54:3d:22:a3:26:9f:15:54:59:98:e0:c7:
         47:9c:20:68:18:6a:f7:f8:b0:e2:7b:2f:59:64:13:93:75:bd:
         6d:b4:11:0c
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgIUVF539nnH/+83Lyo60lCUgj1usLUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA3MDcxNDQ5MzhaFw0yNzA3MDYxNDU0MzhaMDMxMTAvBgNV
BAMTKEQ1MUE4ODg5REE0REI3QzIxMzEwNUQ5RkE1RDRERTIzQkE2QjRCNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+B9pBbNTBa3XKU1oeC2OH+8CX
sGPCwW7u2O7fj7Kv3xoAIfxZqLvPNUev3FA0bxE1zHYF5O+x9I/9g+l/WFOAwTQ/
RefmvE6BuGDhOEQ9vTSdXCZX3P9PIzxDAjQ0r0F5WvfgivYg2fROjTEZTPJEGLOy
m2TPgiGUH1KeW1nVotY5UrvQrwC2UFS3/lnH4uYG6kh0AqNGcK5ZIjGJCyT6xUlC
yTLjcBcf17H9lH2vckh4lCyFxuQQr2hQhcE0bE/6Hv5FfepLSH/oikjrDa0XRiCO
fCmSxBA5K/2AgDBSMNmpisntU4Xuh4SIqn4SBWwJmX9f/RcuvPK9ReV/rmatAgMB
AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTVGoiJ2k23whMQ
XZ+l1N4jumtLRDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkRS
Y1VXTmF5R1E5dDdNblJCVFZBWVRSazNjNFZtZExTYTRIN0tnWGFoUHIvMDCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQkRS
Y1VXTmF5R1E5dDdNblJCVFZBWVRSazNjNFZtZExTYTRIN0tnWGFoUHIvMC9ENTFB
ODg4OURBNERCN0MyMTMxMDVEOUZBNUQ0REUyM0JBNkI0QjQ0Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAS7P9AwDQQCAAIwBwMFACgEMZAwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDAM9pMA0GCSqGSIb3DQEBCwUAA4IBAQDFqhlw760Jun9DURtx
QjqxM+vcqEj2+VQ9OYiKZJKHOKjw4UoLROuuOgD9i/UNX72wjV62f7UhhvvoAq40
75SZYuXPaOKNGQYJ9u1+a00HP1jH9fDvYuuUvDQzdK4wOPjWp4+39dmtCuIzbAkU
PVdEzXUOpvkWhlZjTGNQ3cgE41U5cKLUeMLU77W2EjN1TvxSwShGYO9C552VqgDn
TinWwxN5Sxk9m6Dx8Yc8Sb9xnqtIa83IY4ghKTMnOw9CxQlbydAXdSx5FNL0GJLq
Feh/nJdbYlYtJ+G++Hl+/HlUPSKjJp8VVFmY4MdHnCBoGGr3+LDiey9ZZBOTdb1t
tBEM
-----END CERTIFICATE-----
Generated at Wed Jul 8 14:20:50 2026 by rpki-client