Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer
File:                     01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer (raw, json)
Hash identifier:          I90RLdWsMMSmIThE5SjGyYWtk8Z0ED1JHY3qgCN4sNI=
Subject key identifier:   01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       216821677AA0BBF82428A83D1F25E1C85C26DAC9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 22:55:07 +0000
Certificate not after:    Wed 04 Mar 2026 23:00:07 +0000
Subordinate resources:    AS: 268824
                          IP: 45.172.200.0/22
                          IP: 179.107.52.0/22
                          IP: 2804:5b30::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:68:21:67:7a:a0:bb:f8:24:28:a8:3d:1f:25:e1:c8:5c:26:da:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 22:55:07 2025 GMT
            Not After : Mar  4 23:00:07 2026 GMT
        Subject: CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:67:58:4a:bc:bc:b8:39:34:f0:58:49:93:27:
                    d6:c1:bf:07:50:e1:f1:1c:0d:80:10:db:b2:41:0a:
                    4d:64:f4:0b:88:06:e1:4c:3b:29:25:ec:27:69:f6:
                    39:b1:82:aa:c4:71:a6:dc:35:4d:22:36:d1:22:a5:
                    0a:4a:7e:9f:78:56:6b:18:ca:06:d4:d5:f7:99:cb:
                    14:28:3d:72:b0:d6:01:b1:84:2c:cd:7c:18:c3:76:
                    59:9d:63:9d:a0:1c:4d:2a:fc:8d:f4:3e:01:74:4d:
                    c1:be:43:1c:6c:d4:d9:25:ad:63:6d:f3:2f:84:60:
                    f8:5b:d1:f1:f2:93:f0:c4:45:a3:73:db:58:87:40:
                    9c:6a:07:26:45:22:e5:86:49:ac:45:7b:f8:fb:62:
                    c0:3c:57:d7:30:0a:61:91:4b:40:f1:f8:2e:92:e9:
                    69:e7:03:3d:a0:8b:4c:08:26:7f:65:aa:d2:0a:90:
                    99:01:d2:1c:4b:99:f0:c0:7d:a6:1c:11:a2:00:12:
                    11:c7:98:bd:ae:9c:3f:31:36:af:14:bc:be:39:0b:
                    9d:48:61:1a:04:fc:ea:1b:60:69:ce:58:ff:3e:9c:
                    d7:65:6a:7b:59:b4:02:1b:c3:d5:ea:41:4b:ce:79:
                    2c:63:58:67:39:2b:e1:2e:df:fb:20:62:95:07:c1:
                    fc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.200.0/22
                  179.107.52.0/22
                IPv6:
                  2804:5b30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268824

    Signature Algorithm: sha256WithRSAEncryption
         12:19:a4:25:d7:e9:67:6d:33:45:fc:95:ea:7a:3e:b4:55:fb:
         d1:3c:30:ed:db:a4:f1:bb:e5:59:60:4c:0e:f7:8d:c2:8e:a1:
         01:c7:d1:b9:54:ea:10:40:d4:55:19:d6:f9:ee:50:95:f6:42:
         d5:55:28:9c:95:9b:78:aa:17:f7:f9:74:a4:68:9b:c0:c0:24:
         1c:eb:55:67:3c:bc:f6:3a:c5:19:c7:8b:d0:f1:e7:59:a6:28:
         21:9c:bc:53:61:b5:36:c0:be:b5:98:2c:8f:a1:90:d1:59:96:
         6d:ff:e6:9d:05:4c:3b:20:cf:28:3f:c5:86:47:26:52:8b:f1:
         b1:1f:45:a3:27:37:51:d7:e9:5d:f0:f6:10:d3:bc:52:eb:33:
         67:93:3e:d9:af:2c:08:22:23:6a:26:b2:77:ed:f9:33:43:7a:
         98:90:a1:22:43:de:d9:33:d1:26:c2:52:54:ba:6b:0d:cb:bc:
         ae:54:a5:20:76:ca:fc:bc:ec:0d:ce:8a:0f:91:81:d1:7d:3d:
         0f:1d:c7:b9:eb:71:51:9b:71:91:6a:47:52:83:f4:50:3d:a9:
         c0:a5:a3:97:91:e6:3f:3b:3b:72:82:26:d3:1f:a5:55:18:40:
         8d:46:12:3f:d8:23:c5:28:62:60:c9:cb:ab:20:94:b9:cd:ae:
         98:b8:b4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:03:18 2025 by rpki-client