Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BFB702449CB10F3DC44E7121930F9410743965D8.cer
File:                     BFB702449CB10F3DC44E7121930F9410743965D8.cer (raw, json)
Hash identifier:          /jU6pNuA5yi1D6LSbDyl5+Mpu1LOktz5Vw++c7OWWPQ=
Subject key identifier:   BF:B7:02:44:9C:B1:0F:3D:C4:4E:71:21:93:0F:94:10:74:39:65:D8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       443EDB1039063306C3B8D6D71DE4322E5E0F1AAA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/BFB702449CB10F3DC44E7121930F9410743965D8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 28 Feb 2026 23:48:19 +0000
Certificate not after:    Sat 27 Feb 2027 23:53:19 +0000
Subordinate resources:    AS: 265397
                          IP: 168.194.184.0/22
                          IP: 2804:3374::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Mar 2026 20:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3e:db:10:39:06:33:06:c3:b8:d6:d7:1d:e4:32:2e:5e:0f:1a:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 28 23:48:19 2026 GMT
            Not After : Feb 27 23:53:19 2027 GMT
        Subject: CN=BFB702449CB10F3DC44E7121930F9410743965D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8b:50:a9:8f:22:d5:4b:a1:59:f5:20:e5:b9:
                    de:f3:9f:4a:d3:d5:af:74:28:9f:d4:ae:09:39:af:
                    85:34:fa:87:cd:41:fb:0a:af:47:de:6c:e6:e3:0e:
                    f2:ea:b8:74:ff:62:43:42:b6:27:5b:76:ec:49:9d:
                    f7:b0:12:e2:3b:61:88:af:60:23:f8:04:ca:04:44:
                    95:02:31:a3:65:00:7b:9f:7f:ac:56:f7:5e:ba:8b:
                    be:a2:c3:9c:a5:16:f4:4a:9c:80:91:13:df:7f:f2:
                    28:d0:35:c3:eb:d9:b7:07:14:d4:e8:ca:98:c0:7a:
                    e4:ab:78:c9:ec:aa:1b:90:6b:26:1d:54:55:15:b4:
                    58:39:a4:13:d6:22:42:2a:d2:4a:2f:ab:11:27:d3:
                    95:40:b6:5a:22:45:df:92:dd:2f:93:87:82:e3:ac:
                    a2:19:2a:57:61:24:58:f1:80:05:d0:46:bc:58:b7:
                    83:d3:91:2d:ef:76:c4:66:f4:a4:60:ad:02:3b:3d:
                    24:7c:bd:82:3c:ba:b7:9b:12:4c:42:36:ce:d8:c9:
                    16:88:7b:ff:5e:c8:46:36:0f:22:2c:e5:c8:51:79:
                    3d:81:05:11:5f:16:da:64:c9:c1:c5:46:e9:58:1b:
                    e2:61:ef:78:61:f9:8d:1d:ff:19:f1:13:11:2c:cf:
                    07:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:B7:02:44:9C:B1:0F:3D:C4:4E:71:21:93:0F:94:10:74:39:65:D8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/BFB702449CB10F3DC44E7121930F9410743965D8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.184.0/22
                IPv6:
                  2804:3374::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265397

    Signature Algorithm: sha256WithRSAEncryption
         4f:52:cb:57:d4:8b:29:fb:8e:73:87:29:6c:94:d4:b2:e4:a3:
         8a:79:84:3e:10:ad:75:b6:f4:96:5a:80:27:3c:aa:b3:fb:4f:
         35:88:3b:43:c5:87:f1:ae:22:97:22:2a:61:55:c5:d6:dd:29:
         25:03:c0:82:61:d5:34:c3:fc:c9:76:e1:44:55:04:f1:6b:97:
         4e:ed:ba:9d:73:33:bd:6f:d0:bf:d1:c2:0a:db:70:7d:71:da:
         ab:eb:ea:76:d9:cf:34:05:6a:7c:fa:3e:2f:42:36:0f:06:5f:
         f0:19:4b:b2:17:66:9e:b8:f5:b8:d9:eb:30:59:60:d5:de:1d:
         8e:c9:cd:3b:bd:c5:d1:87:33:31:96:30:30:e2:9b:e8:ed:bd:
         98:29:58:9b:bf:f8:b9:55:29:dc:97:23:d2:65:38:0b:83:5d:
         bc:0a:11:34:c0:11:38:ca:e2:2f:ea:b5:ff:07:9f:86:7b:65:
         f2:43:2e:dc:59:d3:6b:16:3a:2e:1e:0f:c7:cb:8c:93:36:16:
         c2:2b:ad:4a:78:d0:a4:cd:7e:a7:0d:76:db:bf:d9:86:ed:c6:
         ea:18:8b:32:53:c8:d5:08:e2:85:af:17:fb:3d:d5:a5:40:0b:
         01:a2:c1:fa:34:df:de:e3:f3:6c:df:4b:50:d6:6f:92:d2:f2:
         52:78:d3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:04:24 2026 by rpki-client