Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.cer
File:                     0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.cer (raw, json)
Hash identifier:          dwcafhkmiXSugBjlQnqpgJB7jrpJJjY5z12kGG1wLz4=
Subject key identifier:   0B:F2:84:1F:A2:33:6A:7C:8B:D1:92:BC:93:5F:8F:3A:53:F7:F0:F9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0563F3F00F624B3A635D62708941A5D8B1C1DDCC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 27 Sep 2025 17:41:51 +0000
Certificate not after:    Sat 26 Sep 2026 17:46:51 +0000
Subordinate resources:    AS: 272169
                          IP: 2804:82fc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:63:f3:f0:0f:62:4b:3a:63:5d:62:70:89:41:a5:d8:b1:c1:dd:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 27 17:41:51 2025 GMT
            Not After : Sep 26 17:46:51 2026 GMT
        Subject: CN=0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:16:1a:e7:c7:cc:5b:ba:ac:cc:f4:cb:6b:5d:
                    6f:c9:84:91:15:8e:25:0b:8f:2b:80:b3:96:fb:81:
                    3f:cf:4b:00:a6:55:4d:81:5c:50:eb:7f:54:7f:75:
                    ee:49:1f:1f:d3:6f:46:1f:86:01:4d:5f:85:c5:69:
                    da:9f:f1:d6:8b:fc:22:25:ef:04:31:ee:cf:26:d3:
                    4f:97:52:15:e3:d6:8f:a9:75:e6:c7:5b:b7:6e:b5:
                    06:94:89:da:47:1e:15:7a:87:1b:a7:52:77:de:cb:
                    55:01:df:72:d5:99:e4:dd:02:0b:e8:26:93:d9:99:
                    72:d1:42:0e:b6:4c:c5:ae:8a:1b:c6:59:4a:7b:a0:
                    d1:b8:44:cf:5d:b6:0e:df:47:67:1e:1d:a8:f8:61:
                    ff:6d:cb:b1:a1:34:33:b8:1e:e0:c3:ab:de:89:5d:
                    d9:89:38:80:ae:d3:91:38:20:bf:68:d4:6a:72:9b:
                    80:87:18:0c:cf:fe:b6:08:d7:d7:49:a2:a4:51:0d:
                    dd:63:94:74:81:a7:90:04:63:bc:69:7c:fd:4b:7a:
                    bc:b5:28:c3:e4:ed:67:8d:c8:06:9d:fb:21:b3:6e:
                    52:72:51:18:30:0a:72:ea:31:60:6b:96:b1:e9:11:
                    dc:73:7e:07:b6:89:e0:21:ea:ed:07:13:2f:ec:9c:
                    2d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:F2:84:1F:A2:33:6A:7C:8B:D1:92:BC:93:5F:8F:3A:53:F7:F0:F9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CnSEa4HhCZQbLs8sgyaaxrY2hfEU7PTgdnse4LqnRMuX/0/0BF2841FA2336A7C8BD192BC935F8F3A53F7F0F9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:82fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272169

    Signature Algorithm: sha256WithRSAEncryption
         2e:28:d1:ff:6b:ff:41:3c:b3:6a:f7:6a:77:5c:60:4e:31:80:
         88:99:49:f2:e4:30:08:8d:14:2f:9b:70:d5:8b:17:66:38:ac:
         a4:7c:03:24:37:1b:ef:03:fa:c1:4b:98:ee:d4:72:d3:ed:19:
         63:ee:f6:8a:7c:41:8a:76:0a:94:e3:cc:d6:a3:f8:4f:b1:31:
         79:89:79:e8:0d:83:62:6d:d1:5c:c0:4c:ff:86:9e:af:e6:ae:
         cc:b5:bc:90:ea:e8:13:f4:b7:36:13:1d:58:ed:26:ea:df:6b:
         1a:00:27:f5:4d:3f:e9:51:f9:6f:69:a6:ff:44:76:78:d3:06:
         5a:d6:f1:0e:9c:23:3b:7f:94:c1:1e:77:05:3b:f7:bf:47:38:
         e6:39:f2:8c:81:7b:75:62:46:93:61:ee:ab:ee:02:2d:c6:64:
         5d:6a:55:97:e6:e3:93:94:3b:0a:3f:05:88:1c:45:1e:42:7d:
         9b:2e:c2:c0:5c:52:66:d8:7f:87:af:77:56:7f:5a:bb:a5:65:
         1b:fb:e7:b6:0c:b5:e7:8d:1f:95:af:26:38:d5:1a:fa:5c:c6:
         c1:72:88:8b:d7:30:0b:14:81:1b:8f:83:51:fd:2f:f0:eb:d1:
         e3:a9:e1:9b:9e:18:6c:43:08:d8:bd:2f:e5:d0:f0:d9:4a:e9:
         1e:75:aa:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:14:53 2025 by rpki-client