Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3F1031B9B7E6E1FE5D6032D249D630EEDB24C85C.cer
File:                     3F1031B9B7E6E1FE5D6032D249D630EEDB24C85C.cer (raw, json)
Hash identifier:          B1HcJGkhBLvUpv/JXeOZzCk7nOvDowXLT4XOnpHe6cA=
Subject key identifier:   3F:10:31:B9:B7:E6:E1:FE:5D:60:32:D2:49:D6:30:EE:DB:24:C8:5C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       172BA9B891045CBB3FCC740580F3F345A17C903B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/3F1031B9B7E6E1FE5D6032D249D630EEDB24C85C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Sep 2025 17:44:10 +0000
Certificate not after:    Tue 01 Sep 2026 17:49:10 +0000
Subordinate resources:    AS: 271094
                          IP: 179.48.180.0/22
                          IP: 2804:762c::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 22:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2b:a9:b8:91:04:5c:bb:3f:cc:74:05:80:f3:f3:45:a1:7c:90:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Sep  2 17:44:10 2025 GMT
            Not After : Sep  1 17:49:10 2026 GMT
        Subject: CN=3F1031B9B7E6E1FE5D6032D249D630EEDB24C85C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2e:bd:ba:e0:cd:9a:2d:b3:7f:4b:e7:6f:45:
                    28:a0:9e:6e:83:6e:e3:64:af:03:fa:7c:98:8d:92:
                    b8:fc:c1:18:db:e6:b6:87:64:b1:43:60:46:a8:99:
                    8a:4f:83:2f:c8:d2:c8:48:37:73:7b:75:19:1a:d9:
                    b8:58:2d:ea:15:9d:d1:ba:c4:71:0d:fe:ad:2d:ad:
                    50:8c:da:00:dd:88:83:58:c7:1d:56:7b:c8:08:ae:
                    c6:2e:c1:03:41:f0:94:45:fc:ac:fa:0c:5a:c9:0b:
                    8b:e1:7f:8c:13:f4:da:4f:d0:4b:5c:a7:6f:96:4d:
                    fe:70:35:cf:7e:59:0d:05:68:dc:09:84:8c:10:63:
                    9e:6b:b9:d0:c4:9a:34:7d:39:ac:4e:b6:04:53:10:
                    46:d9:f6:ac:1b:99:fe:ce:31:a5:ea:57:6c:00:fd:
                    01:ec:17:e2:0c:f6:a6:ec:f8:3a:f4:b9:b1:87:9b:
                    e7:f2:5a:45:82:b8:cc:38:50:0d:76:00:1e:7a:7c:
                    ed:15:0d:c1:c1:21:42:35:9e:a7:b1:87:ef:57:e7:
                    c5:41:9c:51:f3:65:8e:61:f8:ba:e5:5d:34:eb:06:
                    87:3c:db:b5:54:7c:be:ce:91:4d:b1:b7:15:fa:d8:
                    71:9f:42:d1:3e:75:45:05:a5:4b:f6:68:f8:60:6a:
                    0f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:10:31:B9:B7:E6:E1:FE:5D:60:32:D2:49:D6:30:EE:DB:24:C8:5C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8QbSjtMBe2EHEd5D65hVL9FhfjitifNcPfaxPfA8kmH2/0/3F1031B9B7E6E1FE5D6032D249D630EEDB24C85C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.180.0/22
                IPv6:
                  2804:762c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271094

    Signature Algorithm: sha256WithRSAEncryption
         b0:0e:6f:f9:bb:a2:93:3e:db:a4:13:1f:b3:a6:4c:b4:73:c5:
         35:17:d0:68:88:5d:61:e2:77:ff:5e:b0:02:7c:cf:93:6b:1e:
         78:b9:15:f0:78:bf:26:c1:11:80:82:ad:81:7a:3b:ee:44:f4:
         11:b0:ae:32:2e:3d:a5:14:bc:ba:30:fc:66:92:ee:4c:1c:26:
         a3:c8:f4:4d:09:ac:0e:26:5c:9e:ab:e2:fb:52:d3:1e:d0:e0:
         96:a7:e3:37:da:a9:94:29:a1:d4:96:bd:da:4d:63:94:77:dd:
         c2:37:38:ab:12:88:e5:ce:38:eb:a6:d2:0b:5e:b4:ab:24:b2:
         85:da:5b:6d:14:3e:ae:b0:21:17:83:f9:e2:4d:87:8d:0d:23:
         9e:82:34:1a:f2:3a:8c:54:15:25:d4:33:14:a9:d9:28:49:dd:
         01:58:cd:54:a6:bd:38:a4:62:3a:bc:9b:44:79:4f:1a:dc:ba:
         41:b2:9a:90:b2:fc:3d:e4:eb:89:a4:8c:b5:9c:63:fc:f0:bd:
         c9:67:71:a7:5a:14:a2:e7:5a:18:1a:ff:aa:29:1f:e1:7d:60:
         dc:6b:29:9c:de:3c:39:66:55:b1:c9:86:a5:35:15:11:88:07:
         d0:2f:75:84:58:a0:0c:5b:f3:1e:c8:39:e4:40:ca:f8:7f:38:
         f7:06:47:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:22:13 2025 by rpki-client