Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B937F473A95655C5D7B945095573D217C3A1DC11.cer
File:                     B937F473A95655C5D7B945095573D217C3A1DC11.cer (raw, json)
Hash identifier:          JkFAvCdUhDJJl0SOlZgf58CAbTEzWCl8CnigN27d9p4=
Subject key identifier:   B9:37:F4:73:A9:56:55:C5:D7:B9:45:09:55:73:D2:17:C3:A1:DC:11
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4AAD6601871306547C33CFE9BD78B41B034F7227
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Oct 2025 10:51:28 +0000
Certificate not after:    Tue 13 Oct 2026 10:56:28 +0000
Subordinate resources:    AS: 273661
                          IP: 2804:8a50::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 19:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ad:66:01:87:13:06:54:7c:33:cf:e9:bd:78:b4:1b:03:4f:72:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 14 10:51:28 2025 GMT
            Not After : Oct 13 10:56:28 2026 GMT
        Subject: CN=B937F473A95655C5D7B945095573D217C3A1DC11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:b8:81:22:67:f1:4e:00:10:c4:4c:32:61:1f:
                    aa:8b:1d:61:98:e5:df:f4:8b:66:da:24:9d:1a:a6:
                    58:64:14:d2:d8:61:a3:04:8e:0b:1c:ba:48:08:ff:
                    f4:a1:09:70:e4:bf:13:cc:2b:cd:30:78:52:9c:a3:
                    fd:9e:98:5c:79:6b:fb:56:ad:36:56:c6:c7:90:a3:
                    48:78:42:0a:59:24:e2:be:8b:7a:cf:3f:15:cb:17:
                    c4:da:24:0c:79:2a:b9:b3:bc:93:8e:44:93:58:72:
                    44:c3:21:38:53:63:70:92:8e:80:d8:89:59:33:8f:
                    df:10:72:f8:54:c6:d2:f7:18:f8:0c:95:3b:5a:bd:
                    b2:ea:8d:9f:4f:45:c3:fc:19:42:7f:e2:a9:e3:11:
                    90:28:48:35:11:b1:93:48:f6:1b:66:17:53:a1:f7:
                    8d:2e:44:ec:18:68:39:ed:93:62:60:bf:bf:ad:33:
                    4c:f0:0e:29:14:93:5d:a6:41:64:66:4a:f4:70:aa:
                    1a:e9:11:34:28:ca:68:bb:96:49:d5:a5:67:ee:64:
                    08:c8:e8:9f:b8:0c:91:7e:e7:eb:14:14:3b:3f:ba:
                    d6:18:c2:b0:9f:c2:a5:b1:14:da:5e:3a:03:74:6f:
                    c7:60:a4:1a:0a:be:a5:c5:58:4c:53:a9:65:8f:a9:
                    f8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:37:F4:73:A9:56:55:C5:D7:B9:45:09:55:73:D2:17:C3:A1:DC:11
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4vR65iE8sfjw7tUbfgRXwyBdLPxM7rtaF44ekdwSts33/0/B937F473A95655C5D7B945095573D217C3A1DC11.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273661

    Signature Algorithm: sha256WithRSAEncryption
         45:15:4b:ba:94:7b:2c:be:62:25:33:c2:74:c7:c6:32:ee:8f:
         f4:f5:7e:f2:63:c3:e6:34:c3:1d:11:4e:94:88:46:6d:b8:e3:
         33:77:e0:99:2a:9b:ae:50:5f:97:9e:8f:a4:a7:28:e1:ac:aa:
         36:54:a7:91:4e:6d:1b:db:3f:64:5b:3f:04:ab:00:09:69:2e:
         91:cb:33:60:b6:21:1b:71:f0:56:ea:6f:a5:ad:cb:c0:b3:09:
         34:77:5e:36:76:8e:bc:ee:5f:b3:a3:59:b5:02:86:c1:28:b7:
         d1:aa:57:3a:ea:ff:f7:b1:0f:d1:dc:02:b7:5d:b0:f9:08:da:
         e3:9e:e8:d1:bc:b6:ea:99:e5:58:70:05:c2:df:2c:81:17:56:
         9c:3e:d7:9d:69:96:a1:3d:41:4d:c3:ca:3d:f8:8b:95:32:eb:
         76:1e:44:9b:3e:a2:63:02:19:da:7f:26:51:1e:e3:37:ed:a6:
         99:64:11:29:88:24:fe:a9:7e:9c:b4:2f:4c:90:55:ef:fb:0c:
         0c:82:6e:92:31:f8:b4:53:20:d0:ca:62:8a:9b:8d:f4:61:dc:
         ab:b0:83:cb:a4:0d:a1:71:ab:fc:97:08:07:30:90:f7:41:fd:
         f4:71:76:0d:2d:81:63:4c:5e:03:57:e0:da:29:09:a3:05:c5:
         d9:22:37:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:11:33 2025 by rpki-client