Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/970837BD94B7C2456C803FB74190973C3A36E88E.cer
File:                     970837BD94B7C2456C803FB74190973C3A36E88E.cer (raw, json)
Hash identifier:          oHt3yKFxaacjPb2g7nUI2HQxxjIhr2K9n8lJG1RRzjY=
Subject key identifier:   97:08:37:BD:94:B7:C2:45:6C:80:3F:B7:41:90:97:3C:3A:36:E8:8E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1BD60BFB6006B004CE70E8D58F405567CF8949B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 25 Jul 2025 15:17:55 +0000
Certificate not after:    Fri 24 Jul 2026 15:22:55 +0000
Subordinate resources:    AS: 262470
                          IP: 131.255.168.0/22
                          IP: 143.0.152.0/22
                          IP: 170.233.132.0/22
                          IP: 177.47.192.0/20
                          IP: 179.97.0.0/21
                          IP: 2804:2068::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 Aug 2025 02:34:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d6:0b:fb:60:06:b0:04:ce:70:e8:d5:8f:40:55:67:cf:89:49:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 25 15:17:55 2025 GMT
            Not After : Jul 24 15:22:55 2026 GMT
        Subject: CN=970837BD94B7C2456C803FB74190973C3A36E88E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8c:e5:66:d1:9a:9a:69:f5:e3:6b:d3:c4:f0:
                    da:17:d4:88:bf:0b:86:c0:3a:d0:69:d7:b3:c3:09:
                    7e:3f:38:ff:d1:bc:30:e7:87:48:30:64:6f:11:75:
                    ab:28:c0:71:e7:c8:89:bb:99:21:e9:1c:ee:8d:87:
                    b8:5e:7e:40:d9:87:2a:59:73:84:be:99:7b:f4:7b:
                    63:49:2e:36:3b:b9:63:fb:60:58:94:08:ae:34:c6:
                    96:8d:6f:38:e4:11:b5:0f:b6:17:88:0f:f0:65:58:
                    68:0b:41:4f:48:83:0d:ea:04:ad:d4:e5:4e:d3:52:
                    96:cc:6e:06:38:55:71:79:4e:20:6c:a8:03:f2:c7:
                    be:76:0a:98:ab:e0:61:85:c0:b7:b7:2b:5a:38:57:
                    c3:3f:f7:d7:98:69:56:06:22:72:53:ab:2a:fc:84:
                    d8:63:f3:10:6c:4c:14:1b:cc:f0:82:04:66:61:cb:
                    67:c0:11:bf:d5:e6:7d:89:f9:f9:81:40:c4:d1:f1:
                    11:ed:af:6c:b9:de:a4:df:72:ea:10:d3:98:c3:bf:
                    88:2a:5c:a9:25:0f:76:63:da:ba:d3:56:bb:f2:fd:
                    e0:47:85:15:07:44:6a:0d:07:b9:18:8a:31:0c:a6:
                    57:bd:0f:67:17:5f:d2:49:ab:04:c9:ae:21:6e:ab:
                    75:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:08:37:BD:94:B7:C2:45:6C:80:3F:B7:41:90:97:3C:3A:36:E8:8E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9YoTA71R8vh28N7Ukhwob1kKUv4N2uQk1gZEmH5X6rUo/0/970837BD94B7C2456C803FB74190973C3A36E88E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.168.0/22
                  143.0.152.0/22
                  170.233.132.0/22
                  177.47.192.0/20
                  179.97.0.0/21
                IPv6:
                  2804:2068::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262470

    Signature Algorithm: sha256WithRSAEncryption
         64:a3:f2:4f:e1:0c:08:36:6e:b6:f9:5c:07:15:02:f3:8a:c0:
         d2:70:a4:1e:ca:b7:ab:f3:19:6a:c6:55:4b:85:1c:b6:82:6f:
         5d:cf:fd:7c:01:b5:ef:27:ff:7b:73:5c:f1:48:3b:aa:d9:e7:
         a5:df:b9:6b:0d:e6:f4:78:71:f6:7f:8b:a6:7f:4f:c8:89:b4:
         13:a6:36:ab:39:c8:ea:b7:69:32:7d:79:0b:9a:0b:5b:c2:ba:
         9f:bd:fa:a2:0a:df:e6:a4:5f:b6:57:3c:23:e9:b0:7f:6e:0d:
         9b:92:6f:8c:79:0f:ce:b4:3d:b9:7b:23:75:37:cd:58:fa:c0:
         75:e3:84:12:f2:7e:9e:b9:74:f0:f6:7b:6d:61:0a:37:18:4a:
         a1:24:7b:84:ac:0e:07:67:30:c7:ef:f9:be:57:c5:e7:8e:48:
         51:0b:6c:df:5b:e0:57:2a:62:b4:ff:36:02:3b:5b:3d:6d:79:
         cc:6d:3d:96:44:67:e1:3d:86:4e:e0:2b:b7:9c:85:78:47:31:
         15:c1:18:cb:18:12:59:8d:87:a5:74:6c:75:67:54:86:ce:84:
         fb:1a:b0:76:6e:14:4c:1e:fa:61:c0:ab:20:1a:98:97:13:89:
         7c:29:f5:d0:98:74:b0:70:8d:71:07:c3:9c:96:5b:32:a0:85:
         56:a2:bb:86
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUG9YL+2AGsATOcOjVj0BVZ8+JSbkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA3MjUxNTE3NTVaFw0yNjA3MjQxNTIyNTVaMDMxMTAvBgNV
BAMTKDk3MDgzN0JEOTRCN0MyNDU2QzgwM0ZCNzQxOTA5NzNDM0EzNkU4OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMjOVm0ZqaafXja9PE8NoX1Ii/
C4bAOtBp17PDCX4/OP/RvDDnh0gwZG8RdasowHHnyIm7mSHpHO6Nh7hefkDZhypZ
c4S+mXv0e2NJLjY7uWP7YFiUCK40xpaNbzjkEbUPtheID/BlWGgLQU9Igw3qBK3U
5U7TUpbMbgY4VXF5TiBsqAPyx752Cpir4GGFwLe3K1o4V8M/99eYaVYGInJTqyr8
hNhj8xBsTBQbzPCCBGZhy2fAEb/V5n2J+fmBQMTR8RHtr2y53qTfcuoQ05jDv4gq
XKklD3Zj2rrTVrvy/eBHhRUHRGoNB7kYijEMple9D2cXX9JJqwTJriFuq3URAgMB
AAGjggNSMIIDTjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSXCDe9lLfCRWyA
P7dBkJc8OjbojjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOVlv
VEE3MVI4dmgyOE43VWtod29iMWtLVXY0TjJ1UWsxZ1pFbUg1WDZyVW8vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlZ
b1RBNzFSOHZoMjhON1VraHdvYjFrS1V2NE4ydVFrMWdaRW1INVg2clVvLzAvOTcw
ODM3QkQ5NEI3QzI0NTZDODAzRkI3NDE5MDk3M0MzQTM2RTg4RS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEH
AQH/BDcwNTAkBAIAATAeAwQCg/+oAwQCjwCYAwQCqumEAwQEsS/AAwQDs2EAMA0E
AgACMAcDBQAoBCBoMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQBRjANBgkqhkiG
9w0BAQsFAAOCAQEAZKPyT+EMCDZutvlcBxUC84rA0nCkHsq3q/MZasZVS4UctoJv
Xc/9fAG17yf/e3Nc8Ug7qtnnpd+5aw3m9Hhx9n+Lpn9PyIm0E6Y2qznI6rdpMn15
C5oLW8K6n736ogrf5qRftlc8I+mwf24Nm5JvjHkPzrQ9uXsjdTfNWPrAdeOEEvJ+
nrl08PZ7bWEKNxhKoSR7hKwOB2cwx+/5vlfF545IUQts31vgVypitP82AjtbPW15
zG09lkRn4T2GTuArt5yFeEcxFcEYyxgSWY2HpXRsdWdUhs6E+xqwdm4UTB76YcCr
IBqYlxOJfCn10Jh0sHCNcQfDnJZbMqCFVqK7hg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:15:24 2025 by rpki-client