Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/824D48A1F5AC79336E71523D15B1A834D846F76B.cer
File:                     824D48A1F5AC79336E71523D15B1A834D846F76B.cer (raw, json)
Hash identifier:          E+cZqS+HbAG5+Q8itgyqK3zmFjAoY5oiStUbRGtxEBc=
Subject key identifier:   82:4D:48:A1:F5:AC:79:33:6E:71:52:3D:15:B1:A8:34:D8:46:F7:6B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0BB9A57C8F7CC96E03FB3750AB7A9C179F841936
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6RVar3sUGwuqQEAHvmeQ2rCFtCBabXP3toZaDCQtuWjP/0/824D48A1F5AC79336E71523D15B1A834D846F76B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6RVar3sUGwuqQEAHvmeQ2rCFtCBabXP3toZaDCQtuWjP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 04 Nov 2025 19:11:56 +0000
Certificate not after:    Tue 03 Nov 2026 19:16:56 +0000
Subordinate resources:    AS: 274834
                          IP: 201.87.236.0/22
                          IP: 2804:944c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 06 Nov 2025 01:52:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b9:a5:7c:8f:7c:c9:6e:03:fb:37:50:ab:7a:9c:17:9f:84:19:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  4 19:11:56 2025 GMT
            Not After : Nov  3 19:16:56 2026 GMT
        Subject: CN=824D48A1F5AC79336E71523D15B1A834D846F76B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9e:70:0c:d6:6f:6a:fb:62:eb:16:d4:cb:c8:
                    65:92:5f:25:f7:33:90:49:5a:ed:6d:d7:a0:a9:71:
                    a5:66:d3:9d:69:17:cf:13:e9:a7:c1:58:f9:17:77:
                    43:a6:d5:67:db:4c:4e:f0:e2:96:15:08:83:f1:c6:
                    69:f2:e8:87:4d:29:ac:f1:66:06:05:94:20:86:bf:
                    df:36:28:21:6f:fd:a7:a8:43:8a:8f:46:d0:07:fe:
                    15:d6:bb:eb:5d:8f:d5:43:fa:35:b7:83:62:17:b4:
                    c1:ea:09:c0:a6:e4:c7:db:86:15:49:af:1d:94:c2:
                    5f:07:8a:8e:36:7b:bd:db:16:25:a3:4f:21:5f:10:
                    65:14:07:3e:90:ed:53:5d:11:c2:c3:32:97:bf:36:
                    90:2b:8b:5a:5c:50:24:4e:f4:9b:53:86:67:f9:55:
                    b0:68:4d:2d:36:eb:e7:37:c4:47:9f:48:1d:15:84:
                    7a:ae:a4:b6:ab:48:93:c4:43:a9:fa:eb:cf:0e:d4:
                    9a:65:56:a3:26:53:d9:05:76:99:05:52:e1:b4:99:
                    5c:71:20:53:90:87:8c:b3:db:dd:e6:a5:cb:c8:22:
                    11:83:8d:8a:15:13:5d:93:63:48:d8:ec:f6:ed:d1:
                    a9:6f:77:2b:46:03:2c:22:40:4c:eb:a4:e5:0a:fa:
                    f1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                82:4D:48:A1:F5:AC:79:33:6E:71:52:3D:15:B1:A8:34:D8:46:F7:6B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6RVar3sUGwuqQEAHvmeQ2rCFtCBabXP3toZaDCQtuWjP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6RVar3sUGwuqQEAHvmeQ2rCFtCBabXP3toZaDCQtuWjP/0/824D48A1F5AC79336E71523D15B1A834D846F76B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.236.0/22
                IPv6:
                  2804:944c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  274834

    Signature Algorithm: sha256WithRSAEncryption
         45:a4:0e:44:8a:d7:01:bd:7b:9d:f4:82:11:ea:57:3c:0e:bd:
         ce:8a:24:06:03:fa:90:1f:5e:37:3d:78:25:51:21:e8:17:6c:
         e0:9f:7e:8b:33:5d:ad:c1:9a:fd:7c:63:9e:2c:bd:fd:68:2d:
         d1:9a:2c:29:6e:61:e8:46:64:a8:f7:d9:49:fb:13:95:80:75:
         5d:a1:5d:f9:72:31:b4:cc:ee:01:69:38:7f:97:98:3e:17:76:
         4b:e0:25:a7:b2:ab:74:50:1b:2d:f3:40:2d:b1:fe:93:af:84:
         9b:49:1e:07:51:de:0c:f6:f6:f0:c1:b8:34:cd:17:fd:84:f1:
         c1:08:b2:f3:36:14:76:90:c7:1d:ae:4e:f3:2e:5f:b7:f1:c7:
         c8:94:f7:5b:0b:f0:3c:d0:0f:df:70:73:79:ca:da:1b:b0:2e:
         44:33:68:59:15:b9:5f:d3:c2:a0:ee:0f:77:8d:ca:57:40:46:
         fa:55:d9:9e:f3:a2:a6:80:96:5a:dd:15:64:aa:b0:66:da:1c:
         f4:48:21:68:6d:0c:ac:83:49:8d:44:cc:29:48:14:f6:10:82:
         7b:9f:1d:5d:47:2e:6c:e4:33:fb:83:1f:8a:d6:4a:d7:fc:ec:
         f3:a7:ee:60:a4:3c:6c:3c:95:de:2f:29:d1:fb:cd:15:47:d0:
         00:68:b0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:42:44 2025 by rpki-client