Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/BCF164423C31F706BBCFAC64A8699B70E19DE775.cer
File:                     BCF164423C31F706BBCFAC64A8699B70E19DE775.cer (raw, json)
Hash identifier:          4mv3XI+Uasz07tInFPpKD+o2n+tq4CzP4pGdBRIfBSE=
Subject key identifier:   BC:F1:64:42:3C:31:F7:06:BB:CF:AC:64:A8:69:9B:70:E1:9D:E7:75
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       40330A312B20EF8541AEEFE9C8CB9A174CFFB1B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9Eg2BPvEz6PKNb377Ho8aTpc6SjaMb2jAEoBEc4P266P/0/BCF164423C31F706BBCFAC64A8699B70E19DE775.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9Eg2BPvEz6PKNb377Ho8aTpc6SjaMb2jAEoBEc4P266P/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 05 Sep 2026 03:56:01 +0000
Certificate not after:    Sat 04 Sep 2027 04:01:01 +0000
Subordinate resources:    AS: 264378
                          IP: 131.161.128.0/22
                          IP: 2804:1d90::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 20:33:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:33:0a:31:2b:20:ef:85:41:ae:ef:e9:c8:cb:9a:17:4c:ff:b1:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  5 03:56:01 2026 GMT
            Not After : Sep  4 04:01:01 2027 GMT
        Subject: CN=BCF164423C31F706BBCFAC64A8699B70E19DE775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cf:62:f4:5a:3b:40:d6:6f:19:c3:02:cf:27:
                    e8:db:6c:68:48:54:c5:33:3e:3f:25:60:cb:d5:07:
                    66:06:01:41:06:d1:71:5f:1c:04:76:0f:67:cb:51:
                    8a:c0:7b:ac:87:5b:ab:de:ba:1d:1b:4e:ca:84:d9:
                    c3:5c:64:2e:ed:06:a2:c5:a5:d5:87:6d:48:20:10:
                    28:a2:31:bd:ee:6c:37:10:69:7c:7f:c5:e2:f7:13:
                    e3:df:01:c7:63:d3:14:37:52:ec:73:80:59:dc:8f:
                    45:76:f0:25:11:a6:88:e9:26:98:97:58:1e:21:df:
                    76:b3:b3:4c:44:f9:c0:e1:dc:37:91:2b:80:06:d0:
                    44:cf:b2:33:de:2e:bf:a9:60:a0:59:4c:ee:cb:95:
                    02:d3:55:bf:01:3f:5c:a6:82:ce:3c:3a:d3:4b:22:
                    ae:01:3c:55:3d:67:4d:a9:30:a7:d4:e0:59:be:3c:
                    e3:9c:c7:d9:be:c8:25:d4:0a:2b:fe:93:4d:70:41:
                    9e:28:60:24:3d:7e:cc:75:63:ad:27:2a:3f:f5:ff:
                    fb:41:c2:52:8d:dc:c4:92:56:dd:f0:f3:84:0b:a1:
                    c0:98:c2:ef:6f:9f:e4:6a:e5:37:41:97:6f:ce:c4:
                    54:c7:a3:52:7d:c2:d7:9d:73:80:d0:0a:6a:20:22:
                    8c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:F1:64:42:3C:31:F7:06:BB:CF:AC:64:A8:69:9B:70:E1:9D:E7:75
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9Eg2BPvEz6PKNb377Ho8aTpc6SjaMb2jAEoBEc4P266P/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9Eg2BPvEz6PKNb377Ho8aTpc6SjaMb2jAEoBEc4P266P/0/BCF164423C31F706BBCFAC64A8699B70E19DE775.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.128.0/22
                IPv6:
                  2804:1d90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264378

    Signature Algorithm: sha256WithRSAEncryption
         71:26:bc:64:5e:8f:3d:13:b7:1c:2c:67:cc:25:3b:0a:95:a7:
         a6:e1:5e:1d:a3:be:80:f5:a0:f7:88:01:ee:e7:2d:7b:dd:ab:
         d9:02:ce:7f:1f:af:16:e6:eb:e3:fb:a6:57:79:a6:8c:44:a9:
         f1:87:48:08:f4:7a:50:c3:2f:4d:23:fa:93:ef:e3:3f:92:07:
         97:51:ba:02:cf:59:10:76:a2:09:f0:ba:43:8d:62:e1:87:6d:
         93:7c:89:b7:f8:70:ae:f3:49:c3:72:2e:17:54:d6:76:09:6f:
         27:d4:40:41:b7:44:d0:f7:78:47:28:e7:4f:83:31:df:9b:09:
         a6:72:ca:fa:e4:f7:fa:0a:e4:6d:b0:cc:1d:b5:f1:69:c3:3f:
         9f:32:f4:38:81:9c:b9:fe:c8:72:f9:47:23:9d:a3:be:ba:c8:
         7f:fd:52:54:15:10:28:b5:53:72:cc:1f:72:a8:df:72:d6:2a:
         a0:39:3b:03:fb:f0:4e:a4:22:a2:de:75:3e:c2:44:87:41:84:
         5a:7d:66:d0:b2:89:04:fe:3a:ea:43:54:92:f0:5e:d1:6f:9d:
         57:cd:24:7f:a0:5f:39:69:00:2f:5c:9d:5a:66:5e:1b:7e:a0:
         d3:a4:75:50:3a:58:b1:22:54:bd:a7:86:fd:d1:46:0a:cb:b1:
         01:39:f6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:51:43 2026 by rpki-client