Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
File:                     BF45F5442049793490E484E18AD1516C8FDC8087.cer (raw, json)
Hash identifier:          TzmI33lsiQNUJ19rt3HBczzCkYzU7OS8kBrpXVMeXbY=
Subject key identifier:   BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       361998CEE080DB5F4E18965F9EF74FE9AACB923B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 Sep 2025 16:16:28 +0000
Certificate not after:    Mon 21 Sep 2026 16:21:28 +0000
Subordinate resources:    AS: 271193
                          IP: 179.49.144.0/22
                          IP: 2804:77b0::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:19:98:ce:e0:80:db:5f:4e:18:96:5f:9e:f7:4f:e9:aa:cb:92:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 22 16:16:28 2025 GMT
            Not After : Sep 21 16:21:28 2026 GMT
        Subject: CN=BF45F5442049793490E484E18AD1516C8FDC8087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ef:77:2e:6a:4a:2c:f1:e6:f6:c7:1e:ce:ad:
                    58:64:16:cd:e1:a7:b0:29:e0:39:4d:6d:10:cf:80:
                    89:64:19:9f:ab:3e:ed:3b:4c:b9:94:5c:a5:24:e0:
                    2c:5b:33:e0:09:86:1f:e2:37:14:3c:ea:b6:e6:97:
                    66:3d:c8:5a:fb:76:c8:85:de:3f:65:78:ac:4d:15:
                    3c:11:77:37:fa:40:b4:7c:ae:0a:99:82:6a:b6:ad:
                    36:64:88:20:cb:67:b9:29:30:55:87:16:b1:32:ad:
                    c0:53:5c:f4:f7:5e:12:db:07:be:69:3f:4c:9a:b2:
                    3a:32:c7:40:8b:e5:58:bc:e3:32:f5:14:f7:8a:ba:
                    1f:78:ab:41:42:49:65:c4:37:82:ce:6a:3d:3f:ae:
                    60:b1:ef:d8:7a:33:dc:3b:c1:f8:0d:2e:d6:61:39:
                    1d:5c:54:d3:b3:3a:47:17:7f:a4:ec:12:14:b8:ce:
                    6b:ba:40:a9:eb:e9:e9:58:d9:6e:64:11:97:4f:0c:
                    07:a1:39:97:7e:12:98:ac:f1:31:00:d7:63:f4:db:
                    77:3e:51:8e:6b:27:09:24:00:03:e2:7e:ba:93:b9:
                    f8:00:73:c4:f4:87:9c:b1:90:39:23:03:71:bc:71:
                    b4:c7:5d:e4:77:db:e0:47:b9:6c:f0:87:1b:36:4f:
                    25:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.144.0/22
                IPv6:
                  2804:77b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271193

    Signature Algorithm: sha256WithRSAEncryption
         d8:a4:d1:45:13:7b:5f:c7:d3:b3:f9:21:d2:ff:b2:a3:1d:be:
         fb:bd:23:51:fd:87:a5:ad:cf:ca:0f:11:12:94:76:35:18:af:
         b6:06:86:4c:b0:7a:bb:53:59:a5:15:99:b6:ea:87:90:3f:24:
         4e:62:8e:bd:c6:da:c5:f3:29:00:37:d0:0a:32:7a:45:a2:7c:
         d4:f2:1d:a7:ec:db:45:81:69:9b:1d:91:36:96:55:02:3d:af:
         7e:b2:3f:a5:4a:c7:94:5a:c4:1b:b6:0e:88:96:99:f0:40:3c:
         1c:18:e9:35:3b:34:8e:27:59:50:79:44:9e:7b:e5:3c:54:bc:
         be:3a:59:97:9e:0e:5e:81:bb:a1:e2:6f:eb:30:10:da:e0:fa:
         7b:b8:c3:db:96:be:e7:20:c7:b4:a1:ad:d4:ac:4a:a2:e5:30:
         01:b4:45:65:56:82:82:15:69:83:42:3e:20:59:2f:75:69:15:
         e0:ed:bc:26:08:8e:09:f8:b2:cd:33:76:69:36:4a:60:3d:e5:
         a6:42:e3:b1:f0:e1:99:20:eb:5e:e1:a7:47:eb:9b:5d:fc:0e:
         5f:c4:42:ab:d1:9a:d5:f1:77:81:a9:5e:f7:4c:8b:c3:25:2a:
         02:ed:da:01:63:5a:0a:af:2a:41:9d:ce:c5:e4:0b:c6:b7:83:
         a6:00:63:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:12:14 2025 by rpki-client