Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47.cer
File:                     DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47.cer (raw, json)
Hash identifier:          VtXvJyy/tVSh6qY5WAi9tIcQ8QSM/1CsohhbVBHwiAc=
Subject key identifier:   DE:DA:C8:0F:3C:5C:D2:67:DD:9C:CC:70:5E:AE:A7:F5:11:88:2C:47
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6DE55D7E1777881BC82A81EC192EEECEB8FDD576
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/0/DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Oct 2025 19:39:31 +0000
Certificate not after:    Mon 26 Oct 2026 19:44:31 +0000
Subordinate resources:    AS: 264255
                          IP: 138.117.175.0/24
                          IP: 138.118.0.0/22
                          IP: 170.245.68.0/22
                          IP: 2804:250c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:10:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e5:5d:7e:17:77:88:1b:c8:2a:81:ec:19:2e:ee:ce:b8:fd:d5:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 27 19:39:31 2025 GMT
            Not After : Oct 26 19:44:31 2026 GMT
        Subject: CN=DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:09:a7:6a:c6:61:61:01:c1:0b:91:bd:db:77:
                    7b:0a:06:af:10:3f:c1:f6:be:6d:21:b8:2a:52:e8:
                    d5:ea:35:a2:67:2f:b8:bb:d0:d4:8a:2f:7e:45:80:
                    58:26:8c:25:63:9e:95:fe:2e:5e:6b:c3:86:ba:d0:
                    de:41:4e:fb:a9:c6:e7:f4:9d:9b:fc:19:20:fd:3a:
                    68:d9:61:be:42:14:1d:2b:b5:98:c1:11:a7:20:fb:
                    46:d5:fa:7a:07:cf:5b:26:31:3f:fa:1e:45:1e:ef:
                    c1:42:0c:58:03:99:9a:16:13:0a:37:ea:55:e0:c7:
                    0b:49:09:7c:ba:7e:54:59:53:90:4b:7a:b4:4d:a3:
                    92:77:01:a1:c1:d8:73:01:16:8c:12:e1:77:48:d4:
                    21:99:06:e8:45:65:8d:8c:41:81:01:e0:45:1a:7d:
                    31:2c:99:b7:c4:ee:cd:62:88:76:21:74:66:8d:ba:
                    3b:4f:39:33:df:1f:74:93:18:24:ab:70:13:c6:99:
                    d8:fd:39:dd:e2:6b:8e:86:de:61:4c:03:8c:1b:2d:
                    94:b6:0c:b8:83:3a:f3:f1:da:c8:0c:5a:45:d8:0a:
                    3c:69:e1:da:91:a9:a4:9e:95:de:77:38:e8:5c:47:
                    37:76:6f:17:21:42:a1:ff:e0:9c:6a:4d:7f:cf:28:
                    59:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DE:DA:C8:0F:3C:5C:D2:67:DD:9C:CC:70:5E:AE:A7:F5:11:88:2C:47
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JEJZHSapprugny3vnv9Bc4ZatRCfFkSy6Js68yRouSNC/0/DEDAC80F3C5CD267DD9CCC705EAEA7F511882C47.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.175.0/24
                  138.118.0.0/22
                  170.245.68.0/22
                IPv6:
                  2804:250c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264255

    Signature Algorithm: sha256WithRSAEncryption
         a8:72:44:22:9c:f2:05:4d:1c:b7:34:be:c0:4e:b8:39:a8:58:
         c2:b3:b0:4d:42:10:ca:37:70:91:31:bd:86:08:c3:69:8b:b4:
         0b:07:eb:a3:81:d0:71:ab:2d:cb:7e:e3:9a:f6:4e:ea:82:57:
         41:b1:20:7a:0d:fa:67:32:5c:27:c2:a2:57:1c:bf:7c:c9:69:
         46:4e:99:c8:3d:66:67:bc:37:c5:ba:05:d6:f5:7e:09:d3:5b:
         97:2b:2b:b8:48:e4:ce:91:ab:fa:ec:61:d6:a3:39:ab:70:52:
         06:bf:a0:b1:94:f1:03:e4:f8:54:20:f5:a5:3c:2a:f1:6c:33:
         59:4d:1a:0c:7a:8d:6a:9d:50:ad:0c:1c:f0:c2:a9:7b:24:cd:
         6d:6b:70:1b:5d:14:51:21:eb:6e:aa:5f:53:be:b4:50:ee:91:
         0e:58:61:1b:fa:6d:71:92:13:6d:b7:64:6b:01:86:90:2c:74:
         6f:d5:5b:54:45:48:bc:6e:0a:b7:f9:81:fe:f9:ac:5c:f1:44:
         65:77:8f:28:69:2a:e4:4e:70:96:f9:9b:8a:7d:9d:04:47:49:
         73:14:82:96:e3:c8:b3:aa:5d:59:eb:bb:5e:3f:fa:14:b1:89:
         75:af:1a:df:64:97:bb:ce:cd:5e:3f:dd:36:ac:80:ee:4c:ca:
         bc:c6:31:92
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgIUbeVdfhd3iBvIKoHsGS7uzrj91XYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEwMjcxOTM5MzFaFw0yNjEwMjYxOTQ0MzFaMDMxMTAvBgNV
BAMTKERFREFDODBGM0M1Q0QyNjdERDlDQ0M3MDVFQUVBN0Y1MTE4ODJDNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTCadqxmFhAcELkb3bd3sKBq8Q
P8H2vm0huCpS6NXqNaJnL7i70NSKL35FgFgmjCVjnpX+Ll5rw4a60N5BTvupxuf0
nZv8GSD9OmjZYb5CFB0rtZjBEacg+0bV+noHz1smMT/6HkUe78FCDFgDmZoWEwo3
6lXgxwtJCXy6flRZU5BLerRNo5J3AaHB2HMBFowS4XdI1CGZBuhFZY2MQYEB4EUa
fTEsmbfE7s1iiHYhdGaNujtPOTPfH3STGCSrcBPGmdj9Od3ia46G3mFMA4wbLZS2
DLiDOvPx2sgMWkXYCjxp4dqRqaSeld53OOhcRzd2bxchQqH/4JxqTX/PKFn/AgMB
AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTe2sgPPFzSZ92c
zHBerqf1EYgsRzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSkVK
WkhTYXBwcnVnbnkzdm52OUJjNFphdFJDZkZrU3k2SnM2OHlSb3VTTkMvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0pF
SlpIU2FwcHJ1Z255M3ZudjlCYzRaYXRSQ2ZGa1N5NkpzNjh5Um91U05DLzAvREVE
QUM4MEYzQzVDRDI2N0REOUNDQzcwNUVBRUE3RjUxMTg4MkM0Ny5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH
AQH/BCswKTAYBAIAATASAwQAinWvAwQCinYAAwQCqvVEMA0EAgACMAcDBQAoBCUM
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQIPzANBgkqhkiG9w0BAQsFAAOCAQEA
qHJEIpzyBU0ctzS+wE64OahYwrOwTUIQyjdwkTG9hgjDaYu0Cwfro4HQcasty37j
mvZO6oJXQbEgeg36ZzJcJ8KiVxy/fMlpRk6ZyD1mZ7w3xboF1vV+CdNblysruEjk
zpGr+uxh1qM5q3BSBr+gsZTxA+T4VCD1pTwq8WwzWU0aDHqNap1QrQwc8MKpeyTN
bWtwG10UUSHrbqpfU760UO6RDlhhG/ptcZITbbdkawGGkCx0b9VbVEVIvG4Kt/mB
/vmsXPFEZXePKGkq5E5wlvmbin2dBEdJcxSCluPIs6pdWeu7Xj/6FLGJda8a32SX
u87NXj/dNqyA7kzKvMYxkg==
-----END CERTIFICATE-----
Generated at Mon Nov 3 05:19:28 2025 by rpki-client