Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer
File:                     BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.cer (raw, json)
Hash identifier:          y2JUdeNEiOA0wRZBPymsO66i7a9X5ekRqxMp5i69ZwE=
Subject key identifier:   BC:F9:27:3F:C3:E8:3E:CF:7C:4B:19:36:A3:28:D3:DF:02:51:AC:63
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4C383228FE6379D3D931906B992215F600AA6C4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Sep 2026 18:44:35 +0000
Certificate not after:    Thu 02 Sep 2027 18:49:35 +0000
Subordinate resources:    AS: 269359
                          IP: 45.184.68.0/22
                          IP: 45.230.84.0/23
                          IP: 168.194.248.0/22
                          IP: 2804:6368::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 22:35:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:38:32:28:fe:63:79:d3:d9:31:90:6b:99:22:15:f6:00:aa:6c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  3 18:44:35 2026 GMT
            Not After : Sep  2 18:49:35 2027 GMT
        Subject: CN=BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0b:96:87:61:24:fd:4c:0b:30:fd:47:5d:64:
                    55:e2:db:79:52:30:e4:8a:88:21:d9:79:3d:4f:95:
                    ad:18:d9:97:28:6c:40:68:a1:bf:95:09:a2:d8:05:
                    bb:83:73:86:ec:05:2e:cb:45:38:22:a9:55:0f:2b:
                    6f:6a:08:49:60:5f:d1:8e:c5:8a:1c:f5:d3:3e:68:
                    f1:25:1d:ad:92:62:2e:44:45:94:df:f7:8e:93:d1:
                    3d:f0:06:77:50:89:5e:e5:27:63:8e:ee:52:5a:0a:
                    60:5f:87:99:35:06:66:f3:3b:81:dc:cb:d1:b9:d7:
                    30:92:a9:74:f5:51:85:26:2b:ad:49:53:ba:7b:bd:
                    d7:91:e3:4a:01:15:02:1e:44:0c:cf:65:cd:a2:ec:
                    c8:f2:c1:0f:8d:0c:de:fe:b4:6e:89:47:f9:54:be:
                    b0:99:72:d4:fe:09:fe:2a:82:90:20:95:94:70:c9:
                    e8:7c:3e:5e:8a:e3:f3:f6:50:f8:3e:02:e9:2b:70:
                    36:41:df:6f:36:ee:c0:44:3d:fb:02:77:4b:f3:10:
                    ca:af:c4:e8:50:33:91:3d:83:72:a6:9e:69:39:cc:
                    e1:68:1d:40:ea:cd:60:22:fd:0e:74:04:75:70:db:
                    0b:f8:a1:d9:07:00:0c:d5:93:c2:8a:23:0b:4a:89:
                    86:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:F9:27:3F:C3:E8:3E:CF:7C:4B:19:36:A3:28:D3:DF:02:51:AC:63
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/BCF9273FC3E83ECF7C4B1936A328D3DF0251AC63.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.68.0/22
                  45.230.84.0/23
                  168.194.248.0/22
                IPv6:
                  2804:6368::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269359

    Signature Algorithm: sha256WithRSAEncryption
         d9:39:ff:78:13:ce:e1:fe:ee:4d:0c:0a:12:d7:c5:22:90:e4:
         d4:38:67:43:f9:e3:b5:fc:2c:fe:41:39:cc:1d:22:3b:b5:0d:
         0c:c6:7a:72:a5:b3:d1:bd:ae:be:42:a7:5f:fb:96:48:b2:f4:
         ca:ee:b1:73:db:06:93:c3:00:4a:2d:1e:38:aa:56:72:a6:a5:
         4a:a1:f9:75:aa:d8:6c:d1:49:47:e7:a5:b3:6f:a8:20:aa:a5:
         d3:59:19:1a:96:a7:18:53:38:bc:a3:45:d8:26:76:b8:16:bd:
         a8:8b:18:c4:16:89:0c:96:ce:06:94:2b:c8:f3:c3:38:7c:0c:
         27:32:e1:71:ac:e6:94:7f:63:37:c1:e9:72:d6:1d:c8:29:ce:
         50:bd:72:a0:38:01:37:c3:bb:cb:dd:16:88:f1:b8:fe:21:c1:
         c3:bd:91:11:70:a7:8b:65:68:24:57:ca:83:9e:cc:e7:6e:fe:
         0f:4d:ad:17:86:f9:a5:f9:d0:55:e2:1c:f3:9b:03:4b:67:a9:
         37:96:74:cd:e5:9e:cc:54:63:11:b1:1a:57:95:c4:1d:1d:9c:
         99:e1:a7:2f:b1:11:f3:cd:1f:ae:06:db:31:2c:4e:3d:e0:82:
         89:64:c7:e6:33:53:32:92:2e:50:ba:29:ef:40:05:69:c8:bf:
         d3:e9:cb:a9
-----BEGIN CERTIFICATE-----
MIIGPDCCBSSgAwIBAgIUTDgyKP5jedPZMZBrmSIV9gCqbE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjA5MDMxODQ0MzVaFw0yNzA5MDIxODQ5MzVaMDMxMTAvBgNV
BAMTKEJDRjkyNzNGQzNFODNFQ0Y3QzRCMTkzNkEzMjhEM0RGMDI1MUFDNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCC5aHYST9TAsw/UddZFXi23lS
MOSKiCHZeT1Pla0Y2ZcobEBoob+VCaLYBbuDc4bsBS7LRTgiqVUPK29qCElgX9GO
xYoc9dM+aPElHa2SYi5ERZTf946T0T3wBndQiV7lJ2OO7lJaCmBfh5k1BmbzO4Hc
y9G51zCSqXT1UYUmK61JU7p7vdeR40oBFQIeRAzPZc2i7MjywQ+NDN7+tG6JR/lU
vrCZctT+Cf4qgpAglZRwyeh8Pl6K4/P2UPg+AukrcDZB32827sBEPfsCd0vzEMqv
xOhQM5E9g3Kmnmk5zOFoHUDqzWAi/Q50BHVw2wv4odkHAAzVk8KKIwtKiYYpAgMB
AAGjggNGMIIDQjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS8+Sc/w+g+z3xL
GTajKNPfAlGsYzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRmpi
M05yZ2Z1ZVgxeVJkaEYxdnZEUDJpRmRab1FBc2VzYXBvczZQMWFmdk4vMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Zq
YjNOcmdmdWVYMXlSZGhGMXZ2RFAyaUZkWm9RQXNlc2Fwb3M2UDFhZnZOLzAvQkNG
OTI3M0ZDM0U4M0VDRjdDNEIxOTM2QTMyOEQzREYwMjUxQUM2My5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEH
AQH/BCswKTAYBAIAATASAwQCLbhEAwQBLeZUAwQCqML4MA0EAgACMAcDBQAoBGNo
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQcLzANBgkqhkiG9w0BAQsFAAOCAQEA
2Tn/eBPO4f7uTQwKEtfFIpDk1DhnQ/njtfws/kE5zB0iO7UNDMZ6cqWz0b2uvkKn
X/uWSLL0yu6xc9sGk8MASi0eOKpWcqalSqH5darYbNFJR+els2+oIKql01kZGpan
GFM4vKNF2CZ2uBa9qIsYxBaJDJbOBpQryPPDOHwMJzLhcazmlH9jN8HpctYdyCnO
UL1yoDgBN8O7y90WiPG4/iHBw72REXCni2VoJFfKg57M527+D02tF4b5pfnQVeIc
85sDS2epN5Z0zeWezFRjEbEaV5XEHR2cmeGnL7ER880frgbbMSxOPeCCiWTH5jNT
MpIuULop70AFaci/0+nLqQ==
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:49:54 2026 by rpki-client