Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4FF8BBC8DCFFF61775493B5A218A270400F0B49E.cer
File:                     4FF8BBC8DCFFF61775493B5A218A270400F0B49E.cer (raw, json)
Hash identifier:          d0C0s+kZLwpMqsu1INDWRNP/bXwbxu9q2G5+NJKDVvA=
Subject key identifier:   4F:F8:BB:C8:DC:FF:F6:17:75:49:3B:5A:21:8A:27:04:00:F0:B4:9E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4243465AF60D615F26880623F86B981C47366A41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/4FF8BBC8DCFFF61775493B5A218A270400F0B49E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 30 Oct 2025 23:46:37 +0000
Certificate not after:    Thu 29 Oct 2026 23:51:37 +0000
Subordinate resources:    AS: 270962
                          IP: 187.84.120.0/22
                          IP: 2804:7428::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 05:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:43:46:5a:f6:0d:61:5f:26:88:06:23:f8:6b:98:1c:47:36:6a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 30 23:46:37 2025 GMT
            Not After : Oct 29 23:51:37 2026 GMT
        Subject: CN=4FF8BBC8DCFFF61775493B5A218A270400F0B49E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cc:b6:6e:28:d2:d3:00:44:fa:c1:b4:a8:57:
                    95:30:b4:66:2e:6d:9d:82:bc:28:b5:d0:b4:39:a1:
                    d3:97:1a:08:10:d5:5f:a8:a1:60:b8:d2:a1:d0:c1:
                    d8:6c:c1:ee:c2:18:69:52:4a:c6:c0:62:7a:4c:59:
                    13:40:09:cf:8d:6e:4a:c7:a5:c9:fa:7b:1a:78:1c:
                    97:09:d7:6a:15:bb:88:11:85:a9:32:b9:b2:96:33:
                    7a:15:9c:c7:fc:9e:eb:f1:c4:de:97:95:21:32:d1:
                    d6:bc:e0:a4:e2:bf:95:1b:bc:c1:9b:05:da:16:6b:
                    e2:c9:0f:b3:a4:ee:33:3b:e2:63:f7:15:55:ae:9a:
                    95:18:ea:3e:34:9a:a2:2c:59:0e:cb:c1:21:86:5f:
                    af:76:d2:42:34:8d:d9:8d:4d:6b:fb:a8:4b:f5:1c:
                    42:11:ee:64:d7:c1:29:ac:4e:12:ff:fd:7e:3f:18:
                    b9:9f:98:a2:c4:a0:a5:19:8e:94:b7:25:ae:00:7d:
                    0b:10:1b:6f:39:f2:a2:e3:d1:ed:d1:dc:6a:af:e9:
                    00:f1:89:2b:c2:3e:d5:89:4d:c8:11:ba:dc:1b:22:
                    66:25:ec:44:2b:5b:b7:4f:f8:61:cd:c6:db:be:5e:
                    dd:95:bc:26:7e:b6:38:e9:41:73:ec:6b:3e:a5:1e:
                    c1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:F8:BB:C8:DC:FF:F6:17:75:49:3B:5A:21:8A:27:04:00:F0:B4:9E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5nit3NDPKHjH71qNyagTV7xmGc7eJWdFECD7Y7WLy715/0/4FF8BBC8DCFFF61775493B5A218A270400F0B49E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.120.0/22
                IPv6:
                  2804:7428::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270962

    Signature Algorithm: sha256WithRSAEncryption
         a5:ba:cb:0c:5e:03:1b:32:8f:9f:2e:9c:85:af:b1:98:93:8e:
         b4:35:40:11:75:97:13:98:67:2f:30:36:68:bc:74:4e:35:8d:
         71:e2:1c:bc:b1:4e:12:0e:f2:d8:81:3d:6b:0b:db:30:88:b0:
         6c:95:ca:87:34:53:e0:dd:53:52:b5:c7:4f:da:8e:8f:0f:43:
         90:37:7e:d9:6b:2d:e4:ac:55:31:bf:78:d4:70:0b:8f:76:ad:
         fe:dc:a4:46:15:5a:22:a6:20:e1:76:5c:81:3d:e1:c6:c6:19:
         90:e9:fa:78:ce:59:2b:c9:f1:45:0c:a9:59:39:3a:5a:9f:53:
         27:2d:6f:21:8f:ea:6d:ac:5f:ef:02:13:66:8c:9f:01:de:ca:
         06:0d:13:26:14:1d:c8:f3:5f:00:63:7d:d0:a0:10:cf:ef:30:
         cb:d5:e2:39:a1:0d:05:f8:03:96:91:9e:42:56:09:d3:9d:dc:
         01:27:c4:d3:8a:b4:60:bf:d2:97:61:fd:d4:62:13:32:f3:e9:
         e8:c7:65:a7:0e:ed:ff:e9:85:16:46:e8:68:1e:99:97:e5:08:
         fe:18:75:9b:51:51:5b:02:a8:c2:4e:90:4c:7d:32:a1:5a:4c:
         7d:81:2c:96:ba:d1:e8:db:0b:1a:46:ad:71:44:11:1c:2f:91:
         3b:5e:c7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 05:22:54 2025 by rpki-client