Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.cer
File:                     3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.cer (raw, json)
Hash identifier:          euDrwWv666vETXJ2fdvEubYsJ7OeCbPVtCGw7DYXBNo=
Subject key identifier:   3C:20:D4:74:3A:45:7C:18:DB:0F:EA:EA:30:25:E1:CC:D5:1A:47:93
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       129F0C3F87670C89AE9C99E0787CE38C719C2984
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Sep 2025 02:36:42 +0000
Certificate not after:    Fri 11 Sep 2026 02:41:42 +0000
Subordinate resources:    AS: 272677
                          IP: 179.63.84.0/22
                          IP: 2804:86f4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 07:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:9f:0c:3f:87:67:0c:89:ae:9c:99:e0:78:7c:e3:8c:71:9c:29:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep 12 02:36:42 2025 GMT
            Not After : Sep 11 02:41:42 2026 GMT
        Subject: CN=3C20D4743A457C18DB0FEAEA3025E1CCD51A4793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:94:3b:08:9b:04:bc:fe:d6:00:f4:8f:df:f1:
                    85:29:32:ef:cc:2c:f9:cd:95:1a:4c:6c:52:68:d6:
                    50:d4:d9:b5:16:ee:e4:dd:01:25:9a:39:a7:22:da:
                    11:d1:b5:75:d9:93:df:26:b4:cb:55:a8:fb:ac:9f:
                    4a:ce:fc:64:67:a3:6c:e9:a7:cc:f9:12:ee:54:8d:
                    f7:5d:c3:f9:f4:41:7c:25:83:bf:2c:b6:cc:98:a5:
                    79:c8:f5:8f:d3:dc:fd:c4:01:f2:16:f8:a3:99:b4:
                    5f:fd:93:44:3b:be:11:34:85:ee:d8:5f:70:c6:b6:
                    18:68:55:63:87:bf:bd:b4:03:40:b4:fb:d8:ac:19:
                    d8:5b:b7:4d:49:da:58:01:18:8f:32:2c:91:4f:95:
                    10:4e:67:58:df:31:68:47:3e:6b:d8:e5:77:02:1c:
                    5e:2c:91:fe:96:e0:6f:62:62:a3:d1:1f:9c:8d:58:
                    5b:44:ae:d8:5a:61:d4:53:47:b5:26:c2:b7:1f:c1:
                    73:6b:d5:5a:b2:ae:06:cd:81:9b:14:f3:73:40:3f:
                    a4:1b:bf:22:b8:12:e1:e7:24:44:be:62:d3:b2:40:
                    9c:fc:20:63:d5:64:fc:11:46:eb:d6:c9:0b:cd:0e:
                    fb:21:99:7c:9e:c8:20:7a:78:0d:f5:f7:4c:85:7b:
                    d6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:20:D4:74:3A:45:7C:18:DB:0F:EA:EA:30:25:E1:CC:D5:1A:47:93
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/1/3C20D4743A457C18DB0FEAEA3025E1CCD51A4793.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.84.0/22
                IPv6:
                  2804:86f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272677

    Signature Algorithm: sha256WithRSAEncryption
         4a:1c:c5:ba:65:bf:b2:61:df:a1:c1:f1:4d:7b:d1:55:68:31:
         b1:bb:97:b5:2f:1d:01:fd:66:13:2f:1d:e1:bd:74:f6:ab:aa:
         50:22:a7:8d:d0:14:ba:94:b3:ac:b2:3a:ad:aa:9a:89:18:0b:
         55:49:cb:c4:ff:92:19:11:4a:dc:0b:d2:93:6d:7a:e2:ec:a2:
         5a:8c:85:5d:5a:9e:e1:4b:18:a3:c4:18:8a:30:ad:9a:38:7b:
         be:d4:c1:1c:8e:e6:78:44:e9:3d:c8:57:a9:d8:a7:8b:03:f1:
         70:2f:fd:4c:b0:4c:c2:e6:1a:72:fe:61:e1:18:9f:97:36:d0:
         85:ce:05:99:03:41:ab:0e:e4:4d:36:ec:39:de:70:e4:29:7a:
         a2:e9:c9:0d:d4:50:6c:33:f2:e4:9e:47:57:5c:b4:ef:4d:80:
         87:1f:72:5c:1c:25:4c:f0:99:15:4b:e8:41:a7:39:c9:98:7c:
         f9:fe:aa:3f:dd:b3:94:68:75:54:87:4e:c5:3f:c4:17:a7:6c:
         6b:ac:00:bf:67:de:fe:4b:ec:ee:3c:4d:c4:60:91:f0:89:fa:
         73:1b:d5:6a:c3:7e:33:30:5e:97:07:15:04:87:96:91:b5:c1:
         85:3e:14:93:11:87:0b:46:cc:d9:d6:ba:9b:00:b6:72:ea:2b:
         2f:c1:ae:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 07:23:38 2025 by rpki-client