Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CF357620357B25129A68E7D55D716CED7E4E1516.cer
File:                     CF357620357B25129A68E7D55D716CED7E4E1516.cer (raw, json)
Hash identifier:          bfGjVeHLjRmgXLUIg7kixBIN5gQh0I1J0Rj0VfbfFso=
Subject key identifier:   CF:35:76:20:35:7B:25:12:9A:68:E7:D5:5D:71:6C:ED:7E:4E:15:16
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0F59D04796C9A2FCFA9C386C3105AC709324F0E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 Oct 2025 15:49:39 +0000
Certificate not after:    Thu 01 Oct 2026 15:54:39 +0000
Subordinate resources:    AS: 270956
                          IP: 131.221.76.0/22
                          IP: 2804:7410::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 02:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:59:d0:47:96:c9:a2:fc:fa:9c:38:6c:31:05:ac:70:93:24:f0:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  2 15:49:39 2025 GMT
            Not After : Oct  1 15:54:39 2026 GMT
        Subject: CN=CF357620357B25129A68E7D55D716CED7E4E1516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cb:86:70:91:02:be:fe:1d:c1:cb:de:3f:55:
                    1e:9f:d2:1c:69:01:95:eb:82:02:a9:f9:cc:9c:38:
                    3a:58:1d:33:44:74:e2:93:ca:86:7f:b6:20:33:63:
                    0f:91:ed:11:cc:bd:b6:b0:19:44:10:1d:0c:fd:bf:
                    0e:57:bc:7e:c4:c7:4c:62:34:06:e6:47:6b:bd:ca:
                    1d:41:70:9b:49:a2:dd:6a:72:a3:2b:99:2e:02:dc:
                    04:f9:40:38:f4:d4:57:e4:ad:03:f9:d8:cd:a1:8e:
                    ab:50:d3:5b:b7:94:97:f3:f6:55:08:81:bf:3f:92:
                    35:bb:59:16:44:01:72:cb:dc:9c:14:da:a7:ca:8b:
                    23:56:6a:aa:fa:b4:29:a2:73:fe:22:83:bd:d7:72:
                    d3:6f:1a:d7:16:e2:8b:f2:93:26:e8:46:2b:4e:d1:
                    53:06:bf:bf:61:d5:c2:15:10:19:b9:65:53:12:4e:
                    d7:84:10:1b:f7:f6:58:d5:2a:da:7d:9a:bd:5b:92:
                    e6:99:9f:49:16:7f:da:df:72:d3:86:d3:61:9f:74:
                    3f:37:04:10:49:59:71:20:01:23:e3:f2:86:f2:f6:
                    28:b8:9f:2d:dc:7b:c9:85:02:9e:24:09:90:df:ca:
                    9a:0e:cb:f0:25:e6:68:7f:6d:5b:28:58:4d:3c:6c:
                    c4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:35:76:20:35:7B:25:12:9A:68:E7:D5:5D:71:6C:ED:7E:4E:15:16
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8AARoYE6ng5eGZzf31ER6HevbeM5eirqvPD54CkpLYcz/0/CF357620357B25129A68E7D55D716CED7E4E1516.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.76.0/22
                IPv6:
                  2804:7410::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270956

    Signature Algorithm: sha256WithRSAEncryption
         4c:2c:95:aa:6c:c8:dd:a5:1d:0a:e3:bc:1d:f4:47:71:a3:d9:
         3e:7f:ed:11:af:7e:ce:c3:73:df:1f:f6:70:aa:4a:03:df:e9:
         07:51:64:bc:7f:b3:a5:3d:27:29:f0:ab:d3:13:0f:3d:23:66:
         26:79:cf:16:52:74:1c:27:d1:75:11:c5:8d:ec:87:31:a5:e9:
         ff:8d:2f:ca:00:20:65:40:6c:56:13:1a:06:32:76:66:dd:db:
         c1:42:ed:20:c3:38:55:2f:a8:15:2a:ec:19:45:07:84:6d:8f:
         1d:36:dc:92:8f:c8:05:49:aa:ef:34:01:e0:85:d4:77:82:4c:
         86:06:47:93:bb:2f:76:5c:85:dc:07:67:d1:6f:27:a0:b8:c9:
         61:04:82:d2:13:65:02:59:ac:34:1d:56:c6:e0:90:30:02:90:
         9e:1a:2c:43:b9:c5:c2:f5:52:5c:70:70:a3:b8:04:7c:c6:e4:
         07:6f:a1:07:55:9f:21:ae:f1:61:56:c2:66:52:5d:16:e5:f3:
         86:bb:b0:19:6b:e9:c2:31:ef:64:26:02:b1:fb:35:f4:e7:01:
         d2:bb:8f:f0:59:0f:66:66:6b:f3:6a:2a:70:4b:7b:a7:5e:d5:
         e3:9c:e8:c2:8c:8d:b0:53:b5:2c:8d:3e:87:af:0f:ab:53:10:
         05:32:ba:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:26:28 2025 by rpki-client