Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BCF164423C31F706BBCFAC64A8699B70E19DE775.cer
File:                     BCF164423C31F706BBCFAC64A8699B70E19DE775.cer (raw, json)
Hash identifier:          wcWkWahbkesuZWq61irpmz0gWAs5ng4ghi03uyKoDA4=
Subject key identifier:   BC:F1:64:42:3C:31:F7:06:BB:CF:AC:64:A8:69:9B:70:E1:9D:E7:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       09BEBD45EEB8C55798D3C1E6D0DB1F5B01ED7CAE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9Eg2BPvEz6PKNb377Ho8aTpc6SjaMb2jAEoBEc4P266P/0/BCF164423C31F706BBCFAC64A8699B70E19DE775.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9Eg2BPvEz6PKNb377Ho8aTpc6SjaMb2jAEoBEc4P266P/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Oct 2025 20:19:36 +0000
Certificate not after:    Fri 02 Oct 2026 20:24:36 +0000
Subordinate resources:    AS: 264378
                          IP: 131.161.128.0/22
                          IP: 2804:1d90::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 07:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:be:bd:45:ee:b8:c5:57:98:d3:c1:e6:d0:db:1f:5b:01:ed:7c:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  3 20:19:36 2025 GMT
            Not After : Oct  2 20:24:36 2026 GMT
        Subject: CN=BCF164423C31F706BBCFAC64A8699B70E19DE775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cf:62:f4:5a:3b:40:d6:6f:19:c3:02:cf:27:
                    e8:db:6c:68:48:54:c5:33:3e:3f:25:60:cb:d5:07:
                    66:06:01:41:06:d1:71:5f:1c:04:76:0f:67:cb:51:
                    8a:c0:7b:ac:87:5b:ab:de:ba:1d:1b:4e:ca:84:d9:
                    c3:5c:64:2e:ed:06:a2:c5:a5:d5:87:6d:48:20:10:
                    28:a2:31:bd:ee:6c:37:10:69:7c:7f:c5:e2:f7:13:
                    e3:df:01:c7:63:d3:14:37:52:ec:73:80:59:dc:8f:
                    45:76:f0:25:11:a6:88:e9:26:98:97:58:1e:21:df:
                    76:b3:b3:4c:44:f9:c0:e1:dc:37:91:2b:80:06:d0:
                    44:cf:b2:33:de:2e:bf:a9:60:a0:59:4c:ee:cb:95:
                    02:d3:55:bf:01:3f:5c:a6:82:ce:3c:3a:d3:4b:22:
                    ae:01:3c:55:3d:67:4d:a9:30:a7:d4:e0:59:be:3c:
                    e3:9c:c7:d9:be:c8:25:d4:0a:2b:fe:93:4d:70:41:
                    9e:28:60:24:3d:7e:cc:75:63:ad:27:2a:3f:f5:ff:
                    fb:41:c2:52:8d:dc:c4:92:56:dd:f0:f3:84:0b:a1:
                    c0:98:c2:ef:6f:9f:e4:6a:e5:37:41:97:6f:ce:c4:
                    54:c7:a3:52:7d:c2:d7:9d:73:80:d0:0a:6a:20:22:
                    8c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:F1:64:42:3C:31:F7:06:BB:CF:AC:64:A8:69:9B:70:E1:9D:E7:75
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9Eg2BPvEz6PKNb377Ho8aTpc6SjaMb2jAEoBEc4P266P/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9Eg2BPvEz6PKNb377Ho8aTpc6SjaMb2jAEoBEc4P266P/0/BCF164423C31F706BBCFAC64A8699B70E19DE775.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.128.0/22
                IPv6:
                  2804:1d90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264378

    Signature Algorithm: sha256WithRSAEncryption
         76:3f:16:b9:93:e3:49:82:0f:2c:62:92:19:45:82:5c:55:0d:
         ad:35:2c:9b:bd:cb:e9:01:8c:c4:6a:fb:a0:93:40:3d:07:8a:
         3a:b9:8c:4d:4c:f6:0f:6b:68:d1:a2:ac:b2:5e:d3:d5:59:78:
         1e:8d:4f:df:46:cc:42:1d:cf:30:fb:36:e3:10:d1:a1:fc:56:
         ea:6e:73:84:19:2c:62:84:10:96:bf:bc:13:ba:61:e6:f0:ec:
         c0:f1:18:cb:98:c9:41:af:b4:fc:d4:08:8f:2f:bb:98:7f:db:
         e5:6e:10:71:62:bc:89:dc:f4:5f:e5:d6:61:c9:7a:82:0a:7d:
         cb:17:f8:1c:ea:98:79:d3:11:e0:bc:5f:30:70:c7:52:3d:e8:
         05:85:0c:62:bc:54:bb:c4:04:e2:cf:3e:e2:93:c2:b1:99:ea:
         80:3d:82:3b:a4:9e:d6:b0:1a:d9:f7:52:7c:d0:ba:7b:59:a5:
         be:d2:b7:87:fb:76:33:58:e5:9a:eb:cd:9c:b2:69:79:27:6c:
         6f:28:4c:a3:73:4d:32:5c:e4:6b:41:0e:75:70:cc:d0:75:06:
         22:e9:1c:f7:e8:f9:05:66:df:00:c1:37:a7:9d:17:7b:85:2b:
         21:06:d3:69:6c:8a:bf:bf:cc:2c:59:80:f4:9d:4c:3b:d5:25:
         22:52:cb:2c
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUCb69Re64xVeY08Hm0NsfWwHtfK4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTEwMDMyMDE5MzZaFw0yNjEwMDIyMDI0MzZaMDMxMTAvBgNV
BAMTKEJDRjE2NDQyM0MzMUY3MDZCQkNGQUM2NEE4Njk5QjcwRTE5REU3NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNz2L0WjtA1m8ZwwLPJ+jbbGhI
VMUzPj8lYMvVB2YGAUEG0XFfHAR2D2fLUYrAe6yHW6veuh0bTsqE2cNcZC7tBqLF
pdWHbUggECiiMb3ubDcQaXx/xeL3E+PfAcdj0xQ3UuxzgFncj0V28CURpojpJpiX
WB4h33azs0xE+cDh3DeRK4AG0ETPsjPeLr+pYKBZTO7LlQLTVb8BP1ymgs48OtNL
Iq4BPFU9Z02pMKfU4Fm+POOcx9m+yCXUCiv+k01wQZ4oYCQ9fsx1Y60nKj/1//tB
wlKN3MSSVt3w84QLocCYwu9vn+Rq5TdBl2/OxFTHo1J9wtedc4DQCmogIowDAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS88WRCPDH3BrvP
rGSoaZtw4Z3ndTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOUVn
MkJQdkV6NlBLTmIzNzdIbzhhVHBjNlNqYU1iMmpBRW9CRWM0UDI2NlAvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlF
ZzJCUHZFejZQS05iMzc3SG84YVRwYzZTamFNYjJqQUVvQkVjNFAyNjZQLzAvQkNG
MTY0NDIzQzMxRjcwNkJCQ0ZBQzY0QTg2OTlCNzBFMTlERTc3NS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCg6GAMA0EAgACMAcDBQAoBB2QMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQIujANBgkqhkiG9w0BAQsFAAOCAQEAdj8WuZPjSYIPLGKS
GUWCXFUNrTUsm73L6QGMxGr7oJNAPQeKOrmMTUz2D2to0aKssl7T1Vl4Ho1P30bM
Qh3PMPs24xDRofxW6m5zhBksYoQQlr+8E7ph5vDswPEYy5jJQa+0/NQIjy+7mH/b
5W4QcWK8idz0X+XWYcl6ggp9yxf4HOqYedMR4LxfMHDHUj3oBYUMYrxUu8QE4s8+
4pPCsZnqgD2CO6Se1rAa2fdSfNC6e1mlvtK3h/t2M1jlmuvNnLJpeSdsbyhMo3NN
Mlzka0EOdXDM0HUGIukc9+j5BWbfAME3p50Xe4UrIQbTaWyKv7/MLFmA9J1MO9Ul
IlLLLA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:34:59 2025 by rpki-client