Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BF47DAC2BB1EEED23D4BD5BC6894F231123FA89D.cer
File:                     BF47DAC2BB1EEED23D4BD5BC6894F231123FA89D.cer (raw, json)
Hash identifier:          VKKFeCXtNcpGHsB86CGCG990oLazw/xbX2iAs3xtkDQ=
Subject key identifier:   BF:47:DA:C2:BB:1E:EE:D2:3D:4B:D5:BC:68:94:F2:31:12:3F:A8:9D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       338762E7736F34A9712DBD2CFD41220F7CA449F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/BF47DAC2BB1EEED23D4BD5BC6894F231123FA89D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Jul 2026 15:26:27 +0000
Certificate not after:    Wed 21 Jul 2027 15:31:27 +0000
Subordinate resources:    AS: 271468
                          IP: 181.224.12.0/22
                          IP: 2804:7bfc::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 19:14:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:87:62:e7:73:6f:34:a9:71:2d:bd:2c:fd:41:22:0f:7c:a4:49:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jul 22 15:26:27 2026 GMT
            Not After : Jul 21 15:31:27 2027 GMT
        Subject: CN=BF47DAC2BB1EEED23D4BD5BC6894F231123FA89D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:83:7c:33:be:32:a4:f7:ab:74:40:3b:14:7f:
                    a3:40:f4:4e:dd:f2:eb:12:6b:e0:1d:13:a6:c2:8b:
                    66:9a:1a:a5:65:1a:62:43:03:6c:fd:bb:ce:86:73:
                    fa:f3:eb:05:72:9e:52:a7:05:de:a9:ca:47:11:a9:
                    2b:01:2a:7f:07:5e:31:28:2e:05:0c:2b:91:d9:ed:
                    08:76:91:0d:8a:29:27:b5:9b:f8:6d:3e:31:0b:91:
                    fa:4e:8f:f8:2d:8b:45:4d:a0:44:b4:af:5f:79:28:
                    c6:b5:3e:cf:2f:91:34:78:57:ac:36:2a:4a:bf:f2:
                    9e:f9:b0:1d:a4:8a:0a:f3:5a:1f:6b:f3:5a:6e:3a:
                    f6:7f:a6:23:c4:e9:d0:bf:d3:f9:66:f5:6f:11:fb:
                    8a:30:8a:4e:f6:3a:1f:f4:43:e8:9a:f8:8d:dc:31:
                    f5:50:aa:99:62:69:4f:9f:e8:c8:1e:68:46:ad:b5:
                    e8:ab:94:84:bb:2d:eb:72:20:09:fd:7d:a0:1c:8f:
                    2b:c2:bf:2b:53:a5:cd:96:e2:44:3d:ba:90:6e:8e:
                    f2:5d:22:51:6b:7a:0a:cb:91:49:cd:31:43:26:4f:
                    a0:f0:92:b9:14:94:1d:e2:b1:fe:d4:a1:04:ea:e1:
                    7b:11:ca:c8:5e:c6:7f:a6:2b:19:f7:40:ff:76:a3:
                    04:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:47:DA:C2:BB:1E:EE:D2:3D:4B:D5:BC:68:94:F2:31:12:3F:A8:9D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CB34uPkyKmYQGmcXJY4jDQYnfZ1ra7YW4ETw5Bs6ZuRf/0/BF47DAC2BB1EEED23D4BD5BC6894F231123FA89D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.12.0/22
                IPv6:
                  2804:7bfc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271468

    Signature Algorithm: sha256WithRSAEncryption
         db:c3:cc:81:1f:00:69:42:6c:28:80:b0:a6:0a:08:e4:55:73:
         7a:5a:6e:4f:8e:05:7a:d3:20:bd:0c:ee:14:99:fe:e0:b5:df:
         a1:d6:7e:42:5a:b5:fe:fe:91:62:74:88:c1:15:4f:5f:d2:0a:
         8d:4f:56:98:8b:76:b6:89:5d:23:59:23:3b:63:e9:70:d5:22:
         38:ef:ff:6e:0d:01:ee:f8:0e:15:0e:9f:08:00:39:d6:09:16:
         6f:08:e5:a3:ca:d0:47:f1:0b:57:d6:53:6f:f8:c7:53:ee:fd:
         4e:2d:76:d2:83:12:29:4d:2b:11:de:5e:d2:bd:e2:ab:b6:11:
         ba:b4:e2:d6:d5:76:cb:a0:9f:18:e9:de:a6:1e:d7:5c:ad:b1:
         2f:07:f9:05:ac:ba:d4:08:48:8d:71:53:d2:e7:2e:7a:a2:d7:
         52:2a:ff:ba:bd:83:6a:6e:3a:8f:fa:5e:0a:2a:86:ed:ab:81:
         d8:61:79:a3:02:4f:4f:ff:9f:ae:b6:e2:85:c4:07:1f:9a:0c:
         50:24:9b:ba:be:32:9f:57:2a:52:1c:9c:3b:aa:2b:f6:1d:65:
         1e:cf:87:cd:4a:cb:55:20:27:49:f5:9d:5a:c1:47:76:eb:7a:
         5d:0e:01:b2:c4:61:bd:98:bc:70:dc:f8:c0:83:69:3f:eb:a4:
         d1:82:da:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:07:32 2026 by rpki-client