Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A238987D0DCDD2E9A9A971D52BB6651198981252.cer
File:                     A238987D0DCDD2E9A9A971D52BB6651198981252.cer (raw, json)
Hash identifier:          bFSL9Gxg/rnnCDeLfQrpThHUBkVQl2A7JaYxl5vU17g=
Subject key identifier:   A2:38:98:7D:0D:CD:D2:E9:A9:A9:71:D5:2B:B6:65:11:98:98:12:52
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       087CDCA04999A914763F9C99E99BD394CBA3DE0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/71D1qjPxsifGuYSrcfmVG6n4Rugb3nCpKoCH2kxRbBmT/0/A238987D0DCDD2E9A9A971D52BB6651198981252.mft
caRepository:             rsync://rpki-repo.registro.br/repo/71D1qjPxsifGuYSrcfmVG6n4Rugb3nCpKoCH2kxRbBmT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 25 Jul 2025 22:24:39 +0000
Certificate not after:    Fri 24 Jul 2026 22:29:39 +0000
Subordinate resources:    AS: 267064
                          IP: 45.228.128.0/22
                          IP: 2804:4798::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 08 Aug 2025 22:53:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:7c:dc:a0:49:99:a9:14:76:3f:9c:99:e9:9b:d3:94:cb:a3:de:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 25 22:24:39 2025 GMT
            Not After : Jul 24 22:29:39 2026 GMT
        Subject: CN=A238987D0DCDD2E9A9A971D52BB6651198981252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:da:67:98:de:5f:c1:4e:33:e7:15:0b:45:86:
                    bd:0b:f2:9a:3d:ff:dd:93:f0:ae:88:6d:13:a4:7a:
                    d0:33:8e:9f:77:70:6a:12:23:9a:45:19:8d:d9:95:
                    98:8e:d0:fc:6a:a9:8d:d0:ee:22:8b:7c:8c:68:53:
                    6a:95:ee:ee:a6:93:57:c4:ec:24:14:a5:a2:8b:4e:
                    22:af:41:9e:68:19:57:a6:3b:fe:15:5a:ff:c9:3d:
                    07:32:b9:0a:9a:ef:0d:0c:76:8e:cb:a6:73:e0:6c:
                    a6:37:16:b2:5f:44:84:29:bd:54:40:ad:04:58:1c:
                    d0:8d:f6:94:92:dc:5c:2c:7a:37:13:89:e6:07:e1:
                    44:07:ae:fb:bb:10:f9:7e:f1:da:f7:fc:8a:2b:5e:
                    2e:7b:2a:17:20:f3:85:95:df:7a:d6:81:a1:45:9a:
                    b0:b5:80:96:25:0f:e7:ba:30:98:29:b4:47:88:97:
                    40:fd:cb:bf:52:e3:b4:eb:38:d2:4a:e7:6b:46:4d:
                    9a:8d:a7:0b:51:4f:db:65:d9:63:53:15:7c:85:79:
                    48:33:5a:ff:8f:30:71:0a:cb:a6:c7:fa:8d:26:a5:
                    fe:41:56:bf:43:74:74:8c:e7:57:ae:e9:08:98:25:
                    b1:b0:a9:96:8d:0b:50:78:71:fc:aa:3d:73:32:eb:
                    68:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A2:38:98:7D:0D:CD:D2:E9:A9:A9:71:D5:2B:B6:65:11:98:98:12:52
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/71D1qjPxsifGuYSrcfmVG6n4Rugb3nCpKoCH2kxRbBmT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/71D1qjPxsifGuYSrcfmVG6n4Rugb3nCpKoCH2kxRbBmT/0/A238987D0DCDD2E9A9A971D52BB6651198981252.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.128.0/22
                IPv6:
                  2804:4798::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267064

    Signature Algorithm: sha256WithRSAEncryption
         07:c9:3a:c7:fd:d0:06:ed:97:ce:6e:e6:ab:31:12:82:c6:55:
         dc:3d:59:52:e2:6c:69:f8:7b:81:e3:f0:5a:bf:8d:18:1d:04:
         a1:61:3a:5a:72:06:f6:3b:28:09:bf:f2:fc:4f:05:65:c3:8e:
         46:2d:90:07:00:a3:75:4f:ea:0a:c3:c3:b2:c7:f5:30:25:2f:
         ae:75:97:17:da:f6:76:60:98:34:4f:ff:42:8f:1f:21:31:46:
         8f:f3:a2:7f:50:82:7c:90:51:97:41:76:21:b1:30:f3:53:d4:
         99:e6:58:2d:b6:cd:e3:96:98:89:71:da:ad:23:15:e8:a9:51:
         bf:37:c3:26:8b:73:80:1e:0b:ac:b8:fa:4d:00:8a:f9:89:9f:
         c7:e9:6e:16:f5:14:f0:e5:8c:39:2f:1a:69:f9:2e:f7:dd:6e:
         8c:09:20:52:a7:bf:a9:97:6c:a2:73:54:66:06:34:1b:cf:7c:
         fb:2e:db:1b:54:fd:4e:34:03:2a:05:4d:72:25:f6:35:7c:af:
         f5:c0:f7:79:53:cb:c6:3e:c5:5f:b8:4b:72:5e:33:69:59:be:
         38:b7:8a:93:e3:2a:3f:e5:b3:08:62:a2:89:12:ec:35:8d:60:
         9c:07:dc:82:a3:f1:f6:59:5b:a1:c3:5b:df:60:7d:de:10:f5:
         36:0d:d8:c1
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUCHzcoEmZqRR2P5yZ6ZvTlMuj3gswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTA3MjUyMjI0MzlaFw0yNjA3MjQyMjI5MzlaMDMxMTAvBgNV
BAMTKEEyMzg5ODdEMERDREQyRTlBOUE5NzFENTJCQjY2NTExOTg5ODEyNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC2meY3l/BTjPnFQtFhr0L8po9
/92T8K6IbROketAzjp93cGoSI5pFGY3ZlZiO0PxqqY3Q7iKLfIxoU2qV7u6mk1fE
7CQUpaKLTiKvQZ5oGVemO/4VWv/JPQcyuQqa7w0Mdo7LpnPgbKY3FrJfRIQpvVRA
rQRYHNCN9pSS3FwsejcTieYH4UQHrvu7EPl+8dr3/IorXi57Khcg84WV33rWgaFF
mrC1gJYlD+e6MJgptEeIl0D9y79S47TrONJK52tGTZqNpwtRT9tl2WNTFXyFeUgz
Wv+PMHEKy6bH+o0mpf5BVr9DdHSM51eu6QiYJbGwqZaNC1B4cfyqPXMy62iZAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSiOJh9Dc3S6amp
cdUrtmURmJgSUjAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vNzFE
MXFqUHhzaWZHdVlTcmNmbVZHNm40UnVnYjNuQ3BLb0NIMmt4UmJCbVQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzcx
RDFxalB4c2lmR3VZU3JjZm1WRzZuNFJ1Z2IzbkNwS29DSDJreFJiQm1ULzAvQTIz
ODk4N0QwRENERDJFOUE5QTk3MUQ1MkJCNjY1MTE5ODk4MTI1Mi5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCLeSAMA0EAgACMAcDBQAoBEeYMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQTODANBgkqhkiG9w0BAQsFAAOCAQEAB8k6x/3QBu2Xzm7m
qzESgsZV3D1ZUuJsafh7gePwWr+NGB0EoWE6WnIG9jsoCb/y/E8FZcOORi2QBwCj
dU/qCsPDssf1MCUvrnWXF9r2dmCYNE//Qo8fITFGj/Oif1CCfJBRl0F2IbEw81PU
meZYLbbN45aYiXHarSMV6KlRvzfDJotzgB4LrLj6TQCK+Ymfx+luFvUU8OWMOS8a
afku991ujAkgUqe/qZdsonNUZgY0G898+y7bG1T9TjQDKgVNciX2NXyv9cD3eVPL
xj7FX7hLcl4zaVm+OLeKk+MqP+WzCGKiiRLsNY1gnAfcgqPx9llbocNb32B93hD1
Ng3YwQ==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:32:09 2025 by rpki-client