Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/03BF4AFF1AB77B0E0FD870EB679323489DF549B4.cer
File:                     03BF4AFF1AB77B0E0FD870EB679323489DF549B4.cer (raw, json)
Hash identifier:          oqEFSzt2FwYBuyEjhJ9YTnRQYU3utJRruu1oR4JhHjA=
Subject key identifier:   03:BF:4A:FF:1A:B7:7B:0E:0F:D8:70:EB:67:93:23:48:9D:F5:49:B4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       24B888418F2CE833A0D4CD993EDBAA9ED395E0AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EiGUDHHaG6diBSQrEQstPMYk4v8uvYk72AX6kNJrG6nK/0/03BF4AFF1AB77B0E0FD870EB679323489DF549B4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EiGUDHHaG6diBSQrEQstPMYk4v8uvYk72AX6kNJrG6nK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Oct 2025 17:03:00 +0000
Certificate not after:    Wed 07 Oct 2026 17:08:00 +0000
Subordinate resources:    AS: 267037
                          IP: 45.227.232.0/22
                          IP: 2804:4730::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b8:88:41:8f:2c:e8:33:a0:d4:cd:99:3e:db:aa:9e:d3:95:e0:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  8 17:03:00 2025 GMT
            Not After : Oct  7 17:08:00 2026 GMT
        Subject: CN=03BF4AFF1AB77B0E0FD870EB679323489DF549B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:df:e6:5b:76:8d:c6:97:cb:42:28:35:c6:5d:
                    9f:f8:dc:86:af:32:5d:af:12:73:8e:20:72:0b:72:
                    53:0d:31:b1:e9:d3:97:cd:5b:2e:31:cc:fc:4b:1b:
                    08:67:a5:b9:38:97:a7:0b:2b:b7:3d:01:00:15:40:
                    56:26:c9:7b:d8:11:fb:71:9a:47:8f:00:a5:73:bf:
                    43:b3:1e:99:37:8f:50:fe:77:29:0b:01:0f:7c:aa:
                    e3:77:2a:94:f2:9d:35:f2:83:95:4e:df:51:ee:c6:
                    53:09:07:a4:01:26:8f:73:40:08:d8:ef:16:82:4b:
                    de:6c:67:24:b9:d2:24:95:17:8c:53:94:98:3a:ce:
                    c4:21:28:0a:95:d3:24:ee:0d:6d:3f:40:1a:4a:e3:
                    17:4b:8d:15:3e:c9:37:38:e2:f1:48:94:89:9f:99:
                    d8:a8:8c:62:36:26:a2:c6:6d:b8:33:71:f3:05:df:
                    3d:0b:f1:a4:9f:04:ae:bf:05:11:62:b4:d5:43:ed:
                    fc:47:67:f5:ea:be:14:90:67:ab:33:ad:dc:94:fb:
                    f6:ff:e7:a4:a6:4f:ab:47:bc:36:08:aa:18:db:f6:
                    d0:c3:cc:96:52:cf:21:f2:58:06:d1:67:16:d4:35:
                    1b:f6:58:d3:63:56:90:7a:db:6d:b4:8a:66:f5:4d:
                    e7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:BF:4A:FF:1A:B7:7B:0E:0F:D8:70:EB:67:93:23:48:9D:F5:49:B4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EiGUDHHaG6diBSQrEQstPMYk4v8uvYk72AX6kNJrG6nK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EiGUDHHaG6diBSQrEQstPMYk4v8uvYk72AX6kNJrG6nK/0/03BF4AFF1AB77B0E0FD870EB679323489DF549B4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.232.0/22
                IPv6:
                  2804:4730::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267037

    Signature Algorithm: sha256WithRSAEncryption
         4d:06:a1:1e:bc:51:f6:e8:c3:bd:f7:b7:1f:4e:d7:c0:4f:d6:
         02:4b:01:3d:4a:5f:b8:4f:59:7d:f0:21:9c:47:e0:6e:71:ff:
         27:5e:68:10:3c:64:e7:d8:0c:a9:e4:72:bf:c6:ea:f0:b2:e9:
         43:d9:57:93:b0:68:d1:cb:ff:5e:f6:93:1d:1a:f4:b6:b1:d7:
         ca:ff:8c:81:f1:cc:1e:69:52:ec:ac:02:7b:a3:31:09:8d:a2:
         f3:80:0d:28:e5:a2:10:7c:fa:cc:85:7a:6e:56:06:44:84:38:
         3f:c5:a6:93:ed:3e:18:aa:67:47:0e:78:5b:39:62:31:41:45:
         bc:fd:67:1f:49:72:4d:6d:57:c3:aa:0a:2a:9e:ba:24:72:d9:
         af:64:a9:3d:2d:6e:0c:b7:86:75:6b:88:c5:10:64:0d:2c:0e:
         41:50:bb:db:7a:75:c7:83:ef:52:d0:e9:65:b4:b0:59:41:cb:
         fb:e1:6b:35:7c:02:98:9c:7b:66:2d:db:39:e0:30:fc:c0:56:
         2c:2e:ff:51:b7:a9:db:36:5b:b4:b1:f9:ff:fd:fa:bf:29:6e:
         06:52:14:c3:1e:03:ce:7d:41:75:47:d4:e4:ff:eb:6d:ef:8e:
         a2:88:e9:32:84:b8:42:0f:0c:d3:84:ea:5c:c9:a6:60:7f:a2:
         d5:46:6d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:59:36 2025 by rpki-client