Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D64747AF7EF5FA19149F0E7E47116B18191BD499.cer
File:                     D64747AF7EF5FA19149F0E7E47116B18191BD499.cer (raw, json)
Hash identifier:          FLn+TRyKdBo5w8vRgimGV2hithS+vT0ZdUGSrnNXmv4=
Subject key identifier:   D6:47:47:AF:7E:F5:FA:19:14:9F:0E:7E:47:11:6B:18:19:1B:D4:99
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       242B43BF8DE4828E3E8E574272726FB9CF5D1446
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BoWor2r3o7tGDkpcpCYMTejwBGNAnbLNgbA79hyVZhTR/0/D64747AF7EF5FA19149F0E7E47116B18191BD499.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BoWor2r3o7tGDkpcpCYMTejwBGNAnbLNgbA79hyVZhTR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Apr 2026 14:49:31 +0000
Certificate not after:    Thu 15 Apr 2027 14:54:31 +0000
Subordinate resources:    AS: 61803
                          IP: 201.148.208.0/22
                          IP: 2804:1990::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 20:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2b:43:bf:8d:e4:82:8e:3e:8e:57:42:72:72:6f:b9:cf:5d:14:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr 16 14:49:31 2026 GMT
            Not After : Apr 15 14:54:31 2027 GMT
        Subject: CN=D64747AF7EF5FA19149F0E7E47116B18191BD499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:07:e3:42:35:d8:da:85:48:4b:73:9f:00:52:
                    67:99:87:05:f0:4e:3c:60:59:da:aa:65:31:c8:a7:
                    71:ea:46:62:e1:91:c6:f7:61:20:36:06:3e:84:c7:
                    1a:24:aa:cb:80:32:78:1e:9b:d5:ae:de:9a:50:ac:
                    2b:e6:7a:5d:4f:26:3d:04:43:83:7f:7f:8c:ee:c7:
                    2e:06:24:80:11:5a:b5:51:c0:ce:e0:07:67:29:6d:
                    c3:bf:c5:83:1f:6a:bf:b6:f4:71:78:ea:fc:d4:f3:
                    c7:19:d6:c8:62:21:26:3b:a7:e4:f5:83:e4:0b:21:
                    8e:9e:f5:d1:ee:91:3c:8a:8c:2e:bb:97:55:25:b1:
                    1f:98:1d:64:df:e9:58:6c:11:2f:5d:3c:a6:bb:b4:
                    b6:6c:e9:46:dc:c4:b7:b1:69:b5:0b:57:7f:64:f3:
                    aa:54:e7:06:c7:c7:ea:a5:1b:c3:de:80:7a:16:b5:
                    8c:a1:21:2e:e1:96:0f:67:61:4f:49:b3:fc:27:fc:
                    a2:7c:08:c7:58:5f:0a:f8:21:b9:37:df:2c:5d:68:
                    dd:93:2a:64:16:d6:32:dd:51:f3:36:87:a2:a4:e3:
                    ea:25:ec:b6:3e:6f:ab:b9:a2:05:02:94:61:19:a1:
                    82:13:10:57:2d:7e:f2:5f:b7:31:3a:48:2e:98:8e:
                    49:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:47:47:AF:7E:F5:FA:19:14:9F:0E:7E:47:11:6B:18:19:1B:D4:99
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BoWor2r3o7tGDkpcpCYMTejwBGNAnbLNgbA79hyVZhTR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BoWor2r3o7tGDkpcpCYMTejwBGNAnbLNgbA79hyVZhTR/0/D64747AF7EF5FA19149F0E7E47116B18191BD499.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.208.0/22
                IPv6:
                  2804:1990::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61803

    Signature Algorithm: sha256WithRSAEncryption
         af:b2:17:84:51:f4:1c:79:db:c9:0f:45:7b:fd:79:2c:25:eb:
         1e:9e:be:89:e1:2c:5f:55:b8:4c:98:cc:51:c4:5e:8d:ed:8b:
         72:30:7f:81:9e:fe:4c:93:c2:33:aa:46:34:45:d6:58:8f:b9:
         04:40:1d:0c:ff:55:f9:31:a1:e6:32:ac:2f:49:81:34:6e:95:
         98:94:3f:6c:87:7e:24:9a:03:b4:9e:b8:dc:51:32:30:0b:2e:
         4e:be:40:6d:5c:ad:9f:b0:73:4c:16:4f:96:f6:11:7d:a9:92:
         50:42:35:cc:62:6c:1e:c6:1f:98:12:88:43:04:5a:2d:13:cc:
         38:eb:31:ec:ae:ca:6a:35:2f:e4:16:61:59:8e:fc:1c:a6:9d:
         d7:72:8a:34:23:b4:ae:5a:9c:23:91:a1:c9:29:3a:ae:a7:a5:
         78:ad:e6:85:d4:6a:77:c5:9d:0e:33:eb:6a:2f:89:8b:df:11:
         7a:25:65:40:13:08:ac:b8:69:58:12:67:a8:c5:35:e1:ed:53:
         6a:38:2e:b3:a3:a5:70:59:fd:7f:f4:bb:e1:e9:f9:d8:68:05:
         5c:43:25:d8:bb:91:67:d3:94:91:97:38:3e:ba:ee:5a:8b:c3:
         f9:27:d6:b4:73:d5:8f:ac:fa:f6:27:4b:c0:9f:00:40:4e:53:
         92:02:d0:d9
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUJCtDv43kgo4+jldCcnJvuc9dFEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA0MTYxNDQ5MzFaFw0yNzA0MTUxNDU0MzFaMDMxMTAvBgNV
BAMTKEQ2NDc0N0FGN0VGNUZBMTkxNDlGMEU3RTQ3MTE2QjE4MTkxQkQ0OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQB+NCNdjahUhLc58AUmeZhwXw
TjxgWdqqZTHIp3HqRmLhkcb3YSA2Bj6ExxokqsuAMngem9Wu3ppQrCvmel1PJj0E
Q4N/f4zuxy4GJIARWrVRwM7gB2cpbcO/xYMfar+29HF46vzU88cZ1shiISY7p+T1
g+QLIY6e9dHukTyKjC67l1UlsR+YHWTf6VhsES9dPKa7tLZs6UbcxLexabULV39k
86pU5wbHx+qlG8PegHoWtYyhIS7hlg9nYU9Js/wn/KJ8CMdYXwr4Ibk33yxdaN2T
KmQW1jLdUfM2h6Kk4+ol7LY+b6u5ogUClGEZoYITEFctfvJftzE6SC6YjkkXAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTWR0evfvX6GRSf
Dn5HEWsYGRvUmTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQm9X
b3IycjNvN3RHRGtwY3BDWU1UZWp3QkdOQW5iTE5nYkE3OWh5VlpoVFIvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Jv
V29yMnIzbzd0R0RrcGNwQ1lNVGVqd0JHTkFuYkxOZ2JBNzloeVZaaFRSLzAvRDY0
NzQ3QUY3RUY1RkExOTE0OUYwRTdFNDcxMTZCMTgxOTFCRDQ5OS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCyZTQMA0EAgACMAcDBQAoBBmQMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwDxazANBgkqhkiG9w0BAQsFAAOCAQEAr7IXhFH0HHnbyQ9F
e/15LCXrHp6+ieEsX1W4TJjMUcReje2LcjB/gZ7+TJPCM6pGNEXWWI+5BEAdDP9V
+TGh5jKsL0mBNG6VmJQ/bId+JJoDtJ643FEyMAsuTr5AbVytn7BzTBZPlvYRfamS
UEI1zGJsHsYfmBKIQwRaLRPMOOsx7K7KajUv5BZhWY78HKad13KKNCO0rlqcI5Gh
ySk6rqeleK3mhdRqd8WdDjPrai+Ji98ReiVlQBMIrLhpWBJnqMU14e1Tajgus6Ol
cFn9f/S74en52GgFXEMl2LuRZ9OUkZc4PrruWovD+SfWtHPVj6z69idLwJ8AQE5T
kgLQ2Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:32:33 2026 by rpki-client