Certificate

$ rpki-client -vvvf rpki-repo.registro.br/repo/nicbr_repo/1/BF0963C3CBBCBA539CBA103BC807AFFCB9D78209.cer
File:                     BF0963C3CBBCBA539CBA103BC807AFFCB9D78209.cer (raw, json)
Hash identifier:          XYsJS/yMROS5uTZMZwYh0qWQ3AqWR9HhYZzt/6/VG2Q=
Subject key identifier:   BF:09:63:C3:CB:BC:BA:53:9C:BA:10:3B:C8:07:AF:FC:B9:D7:82:09
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       680FBBF5992E84BDFA4CE3A5D53249B4E9076BD6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/BF0963C3CBBCBA539CBA103BC807AFFCB9D78209.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 Oct 2026 01:04:09 +0000
Certificate not after:    Fri 01 Oct 2027 01:09:09 +0000
Subordinate resources:    AS: 271072
                          IP: 179.48.100.0/22
                          IP: 2804:75d4::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 05 Oct 2026 16:19:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:0f:bb:f5:99:2e:84:bd:fa:4c:e3:a5:d5:32:49:b4:e9:07:6b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  2 01:04:09 2026 GMT
            Not After : Oct  1 01:09:09 2027 GMT
        Subject: CN=BF0963C3CBBCBA539CBA103BC807AFFCB9D78209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:77:ce:77:4b:99:25:c4:7c:e9:aa:1f:6d:88:
                    3e:7d:ce:f8:b3:59:91:ea:66:86:11:e5:1f:c2:83:
                    12:7c:c6:bb:af:76:76:90:40:3e:bd:b6:13:bc:b3:
                    4c:ec:6d:c2:a4:a4:16:e3:18:79:de:77:91:2f:51:
                    33:97:41:b1:50:3f:53:77:f1:ff:9e:f0:79:8e:8b:
                    57:26:35:a7:29:99:90:83:d9:f7:20:67:de:c3:29:
                    3c:71:3b:f6:2e:b9:27:58:d9:c6:b9:20:e5:db:36:
                    3b:eb:45:7d:f4:ec:e3:37:b4:9e:63:8f:0e:97:87:
                    12:c4:56:43:7d:cb:39:ac:c6:ef:3d:ce:4c:be:01:
                    23:ba:6e:9a:3d:26:27:5f:ec:3d:f0:55:a2:c7:39:
                    2e:44:5c:77:ed:b0:c3:64:4e:45:66:3a:0a:cf:3c:
                    4e:34:da:ee:c3:f0:a2:88:f4:38:6e:f5:6b:8c:2c:
                    ce:a9:6d:01:76:46:82:fa:af:6e:ff:e8:d0:d0:43:
                    59:1b:6d:dc:49:d3:99:1f:9e:24:33:e6:56:cc:b6:
                    28:a1:1f:54:54:09:78:ac:95:51:fb:47:e5:24:c0:
                    29:5e:20:74:04:df:aa:b9:e9:e1:bd:e5:a1:86:b0:
                    4e:2b:d4:b3:9d:7b:fd:4f:94:3a:9a:61:6b:8b:29:
                    fa:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:09:63:C3:CB:BC:BA:53:9C:BA:10:3B:C8:07:AF:FC:B9:D7:82:09
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2fDFQYQTTzKthij66yWqH3KrvpPYbzexT1ixtcxx3JLr/0/BF0963C3CBBCBA539CBA103BC807AFFCB9D78209.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.100.0/22
                IPv6:
                  2804:75d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271072

    Signature Algorithm: sha256WithRSAEncryption
         1c:a7:61:73:c0:1e:37:90:27:96:21:2e:93:77:17:54:6d:1f:
         c9:d8:1a:6f:c8:30:5c:27:dc:fb:fe:59:85:7f:62:19:2a:57:
         7d:f1:33:04:8b:1d:ff:b5:7c:55:31:32:4c:70:17:dd:e0:5a:
         8c:8c:d7:d0:af:bc:9c:8b:62:62:10:7f:0c:8b:c7:40:2c:23:
         ba:1d:61:9d:17:19:55:56:eb:aa:67:83:08:82:b4:7b:90:9d:
         69:e5:4e:95:b5:de:3f:c0:e3:25:5a:b8:8f:f4:21:6b:9b:e7:
         14:08:0c:7f:69:f3:89:b3:50:64:d8:d3:25:af:95:70:51:bf:
         bb:a5:36:7c:4e:76:c9:5b:58:02:a0:80:21:15:3c:89:0b:bb:
         fe:52:83:98:78:79:ff:2a:da:3a:70:e9:bd:19:6a:02:a2:62:
         5b:8a:19:2f:8a:db:8b:66:c5:52:9a:0a:d2:8b:3f:8f:28:ef:
         1c:21:0a:e4:ea:d0:c1:63:de:93:ff:80:19:6e:12:ca:3c:3e:
         1d:d7:34:6e:45:6b:91:7a:96:12:f7:9d:48:50:ba:3e:71:cd:
         94:9a:62:46:36:b0:af:30:21:00:6f:87:c0:f1:b5:9b:c3:a4:
         d1:f3:de:2a:62:9d:9a:34:6d:a9:c8:1d:e1:59:06:66:10:0c:
         b0:47:05:84
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUaA+79ZkuhL36TOOl1TJJtOkHa9YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNjEwMDIwMTA0MDlaFw0yNzEwMDEwMTA5MDlaMDMxMTAvBgNV
BAMTKEJGMDk2M0MzQ0JCQ0JBNTM5Q0JBMTAzQkM4MDdBRkZDQjlENzgyMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjd853S5klxHzpqh9tiD59zviz
WZHqZoYR5R/CgxJ8xruvdnaQQD69thO8s0zsbcKkpBbjGHned5EvUTOXQbFQP1N3
8f+e8HmOi1cmNacpmZCD2fcgZ97DKTxxO/YuuSdY2ca5IOXbNjvrRX307OM3tJ5j
jw6XhxLEVkN9yzmsxu89zky+ASO6bpo9Jidf7D3wVaLHOS5EXHftsMNkTkVmOgrP
PE402u7D8KKI9Dhu9WuMLM6pbQF2RoL6r27/6NDQQ1kbbdxJ05kfniQz5lbMtiih
H1RUCXislVH7R+UkwCleIHQE36q56eG95aGGsE4r1LOde/1PlDqaYWuLKfoBAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS/CWPDy7y6U5y6
EDvIB6/8udeCCTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vMmZE
RlFZUVRUekt0aGlqNjZ5V3FIM0tydnBQWWJ6ZXhUMWl4dGN4eDNKTHIvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJm
REZRWVFUVHpLdGhpajY2eVdxSDNLcnZwUFliemV4VDFpeHRjeHgzSkxyLzAvQkYw
OTYzQzNDQkJDQkE1MzlDQkExMDNCQzgwN0FGRkNCOUQ3ODIwOS5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCszBkMA0EAgACMAcDBQAoBHXUMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQi4DANBgkqhkiG9w0BAQsFAAOCAQEAHKdhc8AeN5AnliEu
k3cXVG0fydgab8gwXCfc+/5ZhX9iGSpXffEzBIsd/7V8VTEyTHAX3eBajIzX0K+8
nItiYhB/DIvHQCwjuh1hnRcZVVbrqmeDCIK0e5CdaeVOlbXeP8DjJVq4j/Qha5vn
FAgMf2nzibNQZNjTJa+VcFG/u6U2fE52yVtYAqCAIRU8iQu7/lKDmHh5/yraOnDp
vRlqAqJiW4oZL4rbi2bFUpoK0os/jyjvHCEK5OrQwWPek/+AGW4Syjw+Hdc0bkVr
kXqWEvedSFC6PnHNlJpiRjawrzAhAG+HwPG1m8Ok0fPeKmKdmjRtqcgd4VkGZhAM
sEcFhA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 20:12:47 2026 by rpki-client