Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BF62A21D9A4D847E29113CAD9E8F6A628C15AACD.cer
File:                     BF62A21D9A4D847E29113CAD9E8F6A628C15AACD.cer (raw, json)
Hash identifier:          hevaVov43EYBzXPBhemqUecOCAUMdEPa1ExvE4w66Mo=
Subject key identifier:   BF:62:A2:1D:9A:4D:84:7E:29:11:3C:AD:9E:8F:6A:62:8C:15:AA:CD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6E87347A87A88AF966819672122A0D8591C4ECD5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BY8XH386EyPVJzy6aDQ9f8hWjR9KVXdQTzBGEhpukVTn/0/BF62A21D9A4D847E29113CAD9E8F6A628C15AACD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BY8XH386EyPVJzy6aDQ9f8hWjR9KVXdQTzBGEhpukVTn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Jun 2025 19:31:36 +0000
Certificate not after:    Tue 16 Jun 2026 19:36:36 +0000
Subordinate resources:    AS: 268395
                          IP: 45.160.56.0/22
                          IP: 2804:5088::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Jul 2025 12:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:87:34:7a:87:a8:8a:f9:66:81:96:72:12:2a:0d:85:91:c4:ec:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jun 17 19:31:36 2025 GMT
            Not After : Jun 16 19:36:36 2026 GMT
        Subject: CN=BF62A21D9A4D847E29113CAD9E8F6A628C15AACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9d:6c:49:75:ce:c2:cb:6f:6b:87:e7:e7:4e:
                    3e:5f:bf:a3:83:74:1c:2a:a0:13:c9:21:f9:be:47:
                    54:f0:2c:4c:25:2b:a1:9e:94:75:c0:ea:ca:0c:98:
                    5c:7c:ba:7e:0e:1e:2c:9e:13:a3:5e:94:df:7b:de:
                    f5:d4:39:69:99:cf:72:fb:02:c7:59:ff:a3:1c:65:
                    f2:b3:7b:ce:f6:f6:fa:f4:05:21:ff:aa:6c:84:c8:
                    a6:f9:1f:db:f1:e7:06:81:b1:35:d3:35:2b:a5:6e:
                    b8:ef:a8:37:8d:80:60:7f:ac:58:be:06:de:85:c1:
                    94:33:82:06:e7:33:28:80:4b:f7:04:20:18:2a:d9:
                    64:dc:74:92:02:8f:bd:07:fd:49:f8:68:1c:a4:a4:
                    44:a3:f3:d9:a8:3e:92:01:ea:40:f6:5c:88:99:1f:
                    06:89:81:ec:b8:6e:90:fb:ad:95:4f:e5:2a:36:21:
                    cc:1d:cf:e2:05:98:ef:2d:46:91:c6:ce:1d:08:f2:
                    a7:46:fd:01:91:20:db:48:59:46:6e:61:76:3b:4a:
                    27:a0:e5:6b:63:29:8c:27:1a:26:5d:09:20:94:ac:
                    9e:16:40:61:c4:ce:c7:70:9a:90:fe:f7:da:53:1b:
                    5e:c1:bb:48:8a:54:3a:78:25:b1:19:c4:7c:0b:60:
                    50:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:62:A2:1D:9A:4D:84:7E:29:11:3C:AD:9E:8F:6A:62:8C:15:AA:CD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BY8XH386EyPVJzy6aDQ9f8hWjR9KVXdQTzBGEhpukVTn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BY8XH386EyPVJzy6aDQ9f8hWjR9KVXdQTzBGEhpukVTn/0/BF62A21D9A4D847E29113CAD9E8F6A628C15AACD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.56.0/22
                IPv6:
                  2804:5088::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268395

    Signature Algorithm: sha256WithRSAEncryption
         b3:ae:7b:cc:07:30:c4:e5:08:be:ec:31:5e:da:c1:d2:60:23:
         8d:be:6d:d2:65:6d:1b:e7:a3:5e:d9:3a:ee:a6:7a:5a:f7:28:
         d9:b8:55:63:fc:69:6e:00:c5:26:b4:37:40:88:eb:4d:79:9d:
         b5:e4:2b:8b:56:43:2f:96:7d:50:ee:c3:6d:3d:63:73:8e:8b:
         b8:bd:0d:74:74:7b:0b:e3:8b:97:2b:87:85:fa:9f:9f:16:c1:
         2a:08:1f:5c:9d:12:2d:d5:9f:90:d4:d6:2b:da:22:9f:9c:04:
         e5:fa:4f:ae:23:1a:9e:1c:8a:76:d0:cd:7c:fb:17:e3:91:53:
         d9:0b:1a:c0:37:aa:7b:59:52:0e:e2:2a:63:4b:39:52:30:d3:
         af:8c:d8:42:4d:c7:f7:c8:66:bd:82:3c:41:c1:6e:0d:63:d6:
         cb:a4:61:4a:ae:0c:ed:ad:32:7f:58:02:4b:a3:5a:8a:57:32:
         83:be:7d:cc:f8:ae:b1:ef:da:fb:d7:4a:1a:b9:d4:d8:68:83:
         3e:c5:7e:ca:1f:81:87:f8:fc:18:41:02:0b:00:4a:0b:a6:29:
         a4:32:6a:d9:ee:e6:b6:6b:67:01:88:d0:f2:fc:b9:14:b0:2f:
         85:86:27:82:8b:5e:3f:39:a9:30:a2:0f:15:3a:bc:ae:a2:22:
         d5:2d:51:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:04:21 2025 by rpki-client