Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/7348BA474CBD3CF0B30C4911B302B711C129ACF1.cer
File:                     7348BA474CBD3CF0B30C4911B302B711C129ACF1.cer (raw, json)
Hash identifier:          fRKSjy3pgBEJUtwHiWohxaOzlBoCWwyEwfFU9cO5O1I=
Subject key identifier:   73:48:BA:47:4C:BD:3C:F0:B3:0C:49:11:B3:02:B7:11:C1:29:AC:F1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6A71F8AECAEC7A57CFCE16831C72F7C1CA829CBF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/7348BA474CBD3CF0B30C4911B302B711C129ACF1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Oct 2026 17:08:29 +0000
Certificate not after:    Mon 25 Oct 2027 17:13:29 +0000
Subordinate resources:    AS: 263427
                          IP: 45.162.240.0/22
                          IP: 170.0.200.0/22
                          IP: 177.91.44.0/22
                          IP: 2804:119c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 00:36:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:71:f8:ae:ca:ec:7a:57:cf:ce:16:83:1c:72:f7:c1:ca:82:9c:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 26 17:08:29 2026 GMT
            Not After : Oct 25 17:13:29 2027 GMT
        Subject: CN=7348BA474CBD3CF0B30C4911B302B711C129ACF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ce:5e:73:0f:19:96:47:69:b9:d3:c2:ee:11:
                    06:2d:53:82:b5:be:42:59:4f:41:d0:83:e9:1a:ba:
                    06:02:da:e7:9a:ef:ca:c7:52:55:74:de:1e:0f:c5:
                    8a:06:6b:bf:02:cc:5c:d0:08:a8:94:c5:7a:dd:da:
                    50:26:c1:56:f7:62:26:bf:c0:f5:62:7a:30:6d:ab:
                    9f:cd:95:bd:7e:83:0f:38:af:a8:cb:bb:e1:1e:9c:
                    3b:c2:80:fa:60:81:21:73:93:9e:ba:27:ca:86:f6:
                    80:a7:9e:51:5a:23:43:92:80:9a:48:10:1d:2b:3d:
                    2a:44:b7:e1:0a:b5:60:15:4a:4e:cd:67:c7:44:5f:
                    39:d9:04:7c:c3:da:32:4a:2b:54:0c:05:9b:ad:82:
                    e1:65:12:67:04:e6:34:57:77:80:a4:66:0e:da:87:
                    e5:27:72:db:55:38:f4:ff:d2:89:07:5b:36:24:13:
                    af:81:ad:07:dd:4a:2f:dd:a9:56:c5:e3:72:11:27:
                    ad:c1:ca:27:55:f4:91:41:64:d0:05:c8:3f:5d:af:
                    e1:5e:25:af:aa:26:b1:14:4e:74:52:8c:6c:6b:cf:
                    1b:94:07:70:51:96:57:9d:c1:4e:c7:6f:91:3b:8a:
                    bf:98:90:c3:55:99:e5:68:a2:c9:d8:d3:e2:7d:4e:
                    6d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                73:48:BA:47:4C:BD:3C:F0:B3:0C:49:11:B3:02:B7:11:C1:29:AC:F1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/7348BA474CBD3CF0B30C4911B302B711C129ACF1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.240.0/22
                  170.0.200.0/22
                  177.91.44.0/22
                IPv6:
                  2804:119c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263427

    Signature Algorithm: sha256WithRSAEncryption
         13:bf:b6:e0:49:df:10:9e:e5:24:6a:20:05:01:a0:6f:3a:10:
         53:03:2f:a2:26:d4:b2:c3:8e:5f:40:06:52:b6:2c:20:7d:99:
         d1:e7:d5:8d:e3:ce:fd:6d:cc:0c:54:0f:44:1d:67:36:a4:6a:
         e6:f4:85:81:36:aa:92:62:65:23:a7:87:1b:18:2e:14:19:8a:
         68:eb:1f:33:2e:1f:ac:89:b7:ab:ac:98:c2:d8:51:af:44:0c:
         7e:42:e8:01:90:da:69:3d:7c:d4:ed:5e:e0:7d:fb:1b:cf:5c:
         6e:3a:1a:1d:95:1f:df:c0:2b:74:9c:35:a5:03:a7:d8:23:0b:
         cb:4d:3d:e1:63:c8:f2:1c:38:9e:43:79:4e:1d:c1:1c:a3:8e:
         83:68:64:3b:a8:b4:d5:d4:34:76:d1:44:52:6a:37:f1:77:6a:
         c6:73:3e:4d:b1:10:c0:56:95:6a:04:92:78:77:71:ea:03:5b:
         c7:ba:92:08:9b:0e:c9:f7:11:1b:28:c2:02:53:ce:74:bc:99:
         ca:b0:ad:52:41:44:7a:72:41:5b:9e:f3:ce:0a:a7:c4:0f:3f:
         83:dd:11:1e:b6:79:6b:e7:7b:60:6c:bf:18:68:3a:9c:de:1f:
         91:d3:e0:51:4c:30:c9:7a:5d:ac:0b:37:15:6b:c2:75:12:99:
         fa:55:5f:28
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgIUanH4rsrselfPzhaDHHL3wcqCnL8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjEwMjYxNzA4MjlaFw0yNzEwMjUxNzEzMjlaMDMxMTAvBgNV
BAMTKDczNDhCQTQ3NENCRDNDRjBCMzBDNDkxMUIzMDJCNzExQzEyOUFDRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyzl5zDxmWR2m508LuEQYtU4K1
vkJZT0HQg+kaugYC2uea78rHUlV03h4PxYoGa78CzFzQCKiUxXrd2lAmwVb3Yia/
wPViejBtq5/Nlb1+gw84r6jLu+EenDvCgPpggSFzk566J8qG9oCnnlFaI0OSgJpI
EB0rPSpEt+EKtWAVSk7NZ8dEXznZBHzD2jJKK1QMBZutguFlEmcE5jRXd4CkZg7a
h+UncttVOPT/0okHWzYkE6+BrQfdSi/dqVbF43IRJ63ByidV9JFBZNAFyD9dr+Fe
Ja+qJrEUTnRSjGxrzxuUB3BRlledwU7Hb5E7ir+YkMNVmeVoosnY0+J9Tm1tAgMB
AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRzSLpHTL088LMM
SRGzArcRwSms8TAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNXdH
eHNpMlRXeHM2cWFpczNNMjZWODZHclZBc1NQTnVKQ2s4VUhWaG16TTQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzV3
R3hzaTJUV3hzNnFhaXMzTTI2Vjg2R3JWQXNTUE51SkNrOFVIVmhtek00LzAvNzM0
OEJBNDc0Q0JEM0NGMEIzMEM0OTExQjMwMkI3MTFDMTI5QUNGMS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH
AQH/BCswKTAYBAIAATASAwQCLaLwAwQCqgDIAwQCsVssMA0EAgACMAcDBQAoBBGc
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQFAzANBgkqhkiG9w0BAQsFAAOCAQEA
E7+24EnfEJ7lJGogBQGgbzoQUwMvoibUssOOX0AGUrYsIH2Z0efVjePO/W3MDFQP
RB1nNqRq5vSFgTaqkmJlI6eHGxguFBmKaOsfMy4frIm3q6yYwthRr0QMfkLoAZDa
aT181O1e4H37G89cbjoaHZUf38ArdJw1pQOn2CMLy0094WPI8hw4nkN5Th3BHKOO
g2hkO6i01dQ0dtFEUmo38XdqxnM+TbEQwFaVagSSeHdx6gNbx7qSCJsOyfcRGyjC
AlPOdLyZyrCtUkFEenJBW57zzgqnxA8/g90RHrZ5a+d7YGy/GGg6nN4fkdPgUUww
yXpdrAs3FWvCdRKZ+lVfKA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 23:47:46 2026 by rpki-client