Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E022BA9B6C64C3F4D7DA81565E3EC832773CD959.cer
File:                     E022BA9B6C64C3F4D7DA81565E3EC832773CD959.cer (raw, json)
Hash identifier:          Y3Iy2hcSjEGMBQVH6AXIHz0L37+YFffK67iEz7H26Ks=
Subject key identifier:   E0:22:BA:9B:6C:64:C3:F4:D7:DA:81:56:5E:3E:C8:32:77:3C:D9:59
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       38A6DC60C709753423E46FD0AD5D4DD6855537A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gsxgpcf5FJA1xYUPWV77ivDzyUFf6Xniw3LAhXvTvqHd/0/E022BA9B6C64C3F4D7DA81565E3EC832773CD959.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gsxgpcf5FJA1xYUPWV77ivDzyUFf6Xniw3LAhXvTvqHd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 20 Oct 2025 13:58:37 +0000
Certificate not after:    Mon 19 Oct 2026 14:03:37 +0000
Subordinate resources:    AS: 268872
                          IP: 45.175.4.0/22
                          IP: 2804:5bd8::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a6:dc:60:c7:09:75:34:23:e4:6f:d0:ad:5d:4d:d6:85:55:37:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 20 13:58:37 2025 GMT
            Not After : Oct 19 14:03:37 2026 GMT
        Subject: CN=E022BA9B6C64C3F4D7DA81565E3EC832773CD959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:52:1e:82:cf:6d:c8:c8:35:b9:ba:b0:25:da:
                    7a:55:8e:cf:1d:83:4a:bb:53:15:b8:69:53:30:ed:
                    9c:e7:78:85:83:e0:da:ae:9f:6a:f0:79:1e:c5:ec:
                    d5:69:ec:08:29:af:25:20:c2:ff:82:8d:30:8b:51:
                    8d:ab:d7:87:30:3a:8d:22:c4:21:da:ae:78:ee:87:
                    3f:59:31:38:e7:ff:59:77:25:07:48:35:a5:d0:3e:
                    91:63:dc:88:23:6f:3e:5d:3e:98:b8:cd:07:32:56:
                    e6:f8:62:41:b1:58:05:57:2c:1a:4f:77:8b:fb:30:
                    97:74:34:15:9b:53:58:2a:f4:c6:01:63:1e:62:6a:
                    12:b9:27:e1:2b:5a:e2:07:10:0f:ea:25:46:fc:55:
                    67:51:a5:74:88:fb:2b:80:6d:c3:c4:df:a5:2d:f6:
                    a9:36:09:4a:d0:98:48:37:24:31:62:bf:36:61:e4:
                    1e:31:e3:6f:5d:c3:81:e6:a8:58:5f:1e:d1:1c:68:
                    41:78:db:18:25:3c:c4:62:4a:44:9b:2b:5f:f3:a2:
                    03:c3:e7:a9:56:34:18:a0:df:2a:2f:a1:9d:12:cd:
                    4b:51:e1:2f:1b:69:44:b7:22:a2:05:8b:23:84:2a:
                    5a:1d:96:6b:08:13:d4:78:41:3f:dc:48:74:9a:c4:
                    c8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:22:BA:9B:6C:64:C3:F4:D7:DA:81:56:5E:3E:C8:32:77:3C:D9:59
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gsxgpcf5FJA1xYUPWV77ivDzyUFf6Xniw3LAhXvTvqHd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gsxgpcf5FJA1xYUPWV77ivDzyUFf6Xniw3LAhXvTvqHd/0/E022BA9B6C64C3F4D7DA81565E3EC832773CD959.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.4.0/22
                IPv6:
                  2804:5bd8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268872

    Signature Algorithm: sha256WithRSAEncryption
         d7:11:3d:c0:a5:4a:ca:86:90:00:f5:fd:1c:ea:98:d7:84:f6:
         2a:e9:f3:15:d1:22:32:ee:7a:6b:ca:af:53:4c:df:0e:7d:9b:
         d7:a9:57:61:9e:26:51:00:84:dd:72:4c:ac:8f:87:4b:97:ce:
         08:81:5c:e8:be:02:c3:95:0b:69:1a:34:b0:9d:db:10:d5:b3:
         4b:36:a8:1f:8c:7f:48:e5:1a:34:8e:fd:17:06:5e:2f:41:75:
         5f:45:52:a6:15:b6:c6:9b:87:3f:be:18:2a:77:36:f2:90:cf:
         26:e1:ee:02:13:23:00:ed:0a:0f:d9:ea:bb:1f:2c:23:b1:cd:
         b1:26:7c:84:f7:f1:8c:a5:9f:4d:a5:d7:02:2a:51:df:32:50:
         46:12:2b:31:9c:3d:75:b7:2e:bf:f3:b0:f4:68:24:fc:07:3b:
         ac:69:77:88:a9:9c:ec:12:3e:64:86:95:77:66:d3:a1:bf:04:
         88:62:a8:e5:e3:ee:b9:0f:12:0c:82:04:fe:3a:f4:65:07:7c:
         eb:92:70:ee:00:7a:b6:ad:5b:35:db:f7:f1:10:fb:0e:a2:c9:
         04:27:5f:79:4f:5b:17:57:77:15:02:d9:bf:20:1e:d2:17:21:
         f8:a5:a7:bb:2c:84:87:27:1a:ef:44:6c:4c:3f:80:58:2a:da:
         69:96:9f:eb
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUOKbcYMcJdTQj5G/QrV1N1oVVN6UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEwMjAxMzU4MzdaFw0yNjEwMTkxNDAzMzdaMDMxMTAvBgNV
BAMTKEUwMjJCQTlCNkM2NEMzRjREN0RBODE1NjVFM0VDODMyNzczQ0Q5NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPUh6Cz23IyDW5urAl2npVjs8d
g0q7UxW4aVMw7ZzneIWD4Nqun2rweR7F7NVp7AgpryUgwv+CjTCLUY2r14cwOo0i
xCHarnjuhz9ZMTjn/1l3JQdINaXQPpFj3Igjbz5dPpi4zQcyVub4YkGxWAVXLBpP
d4v7MJd0NBWbU1gq9MYBYx5iahK5J+ErWuIHEA/qJUb8VWdRpXSI+yuAbcPE36Ut
9qk2CUrQmEg3JDFivzZh5B4x429dw4HmqFhfHtEcaEF42xglPMRiSkSbK1/zogPD
56lWNBig3yovoZ0SzUtR4S8baUS3IqIFiyOEKlodlmsIE9R4QT/cSHSaxMgHAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTgIrqbbGTD9Nfa
gVZePsgydzzZWTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vR3N4
Z3BjZjVGSkExeFlVUFdWNzdpdkR6eVVGZjZYbml3M0xBaFh2VHZxSGQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dz
eGdwY2Y1RkpBMXhZVVBXVjc3aXZEenlVRmY2WG5pdzNMQWhYdlR2cUhkLzAvRTAy
MkJBOUI2QzY0QzNGNEQ3REE4MTU2NUUzRUM4MzI3NzNDRDk1OS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLa8EMA0EAgACMAcDBQAoBFvYMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQaSDANBgkqhkiG9w0BAQsFAAOCAQEA1xE9wKVKyoaQAPX9
HOqY14T2KunzFdEiMu56a8qvU0zfDn2b16lXYZ4mUQCE3XJMrI+HS5fOCIFc6L4C
w5ULaRo0sJ3bENWzSzaoH4x/SOUaNI79FwZeL0F1X0VSphW2xpuHP74YKnc28pDP
JuHuAhMjAO0KD9nqux8sI7HNsSZ8hPfxjKWfTaXXAipR3zJQRhIrMZw9dbcuv/Ow
9Ggk/Ac7rGl3iKmc7BI+ZIaVd2bTob8EiGKo5ePuuQ8SDIIE/jr0ZQd865Jw7gB6
tq1bNdv38RD7DqLJBCdfeU9bF1d3FQLZvyAe0hch+KWnuyyEhyca70RsTD+AWCra
aZaf6w==
-----END CERTIFICATE-----
Generated at Mon Nov 3 05:24:23 2025 by rpki-client