Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0987FE7E059538E349FA075F2AA95C4802BD35EF.cer
File:                     0987FE7E059538E349FA075F2AA95C4802BD35EF.cer (raw, json)
Hash identifier:          lTguPZekD7dDPHmdjjzhW7aCc9E+1uh+MjXKkzrip9E=
Subject key identifier:   09:87:FE:7E:05:95:38:E3:49:FA:07:5F:2A:A9:5C:48:02:BD:35:EF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       281859A59A4DB09F9723EE57252BF1333B585D8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/0987FE7E059538E349FA075F2AA95C4802BD35EF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 12 Jan 2025 23:13:28 +0000
Certificate not after:    Sun 11 Jan 2026 23:18:28 +0000
Subordinate resources:    AS: 273436
                          IP: 2804:8e98::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:18:59:a5:9a:4d:b0:9f:97:23:ee:57:25:2b:f1:33:3b:58:5d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 12 23:13:28 2025 GMT
            Not After : Jan 11 23:18:28 2026 GMT
        Subject: CN=0987FE7E059538E349FA075F2AA95C4802BD35EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:53:fd:ac:dd:94:fe:6f:e2:7a:52:1f:82:d7:
                    25:de:6d:d9:92:70:ba:9c:81:a9:41:7b:f4:82:96:
                    b3:e8:ab:b4:30:10:fe:d2:7f:4f:f2:d3:c6:eb:0f:
                    db:df:96:b4:44:47:f6:9b:c1:6b:1b:54:f4:27:89:
                    ec:3f:16:88:be:7b:a0:8a:ad:50:b7:6a:a6:f9:a9:
                    2e:b3:ce:03:ac:f8:1b:1a:f1:ac:c8:bb:38:5c:07:
                    cd:cb:c1:2e:3c:24:b7:27:2c:57:cd:17:60:ed:11:
                    d5:4f:c3:36:36:d1:19:e3:05:d3:9f:06:ac:b9:16:
                    0a:d2:b7:d7:7c:26:67:de:fe:bf:ff:1d:2a:cf:df:
                    8b:19:7d:ca:87:00:cd:3e:a4:f7:d3:cc:00:9c:8f:
                    83:43:b1:e3:6b:7d:cd:8b:ab:13:6d:d5:0f:55:5a:
                    51:0c:6e:21:ad:0f:37:03:63:09:80:ea:61:9e:06:
                    5d:42:20:36:30:7e:f4:41:32:7f:5f:5f:8f:77:7a:
                    83:94:ed:4c:d4:c6:85:1c:c5:b2:1d:1b:d2:1f:e2:
                    54:7f:76:9d:e8:c0:a7:70:a0:5a:8f:06:df:79:b1:
                    37:a8:92:d3:d4:b3:16:de:de:8d:2d:5b:74:d9:f8:
                    45:e8:c7:5c:95:8c:46:95:56:8f:03:0e:13:cd:cb:
                    f6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                09:87:FE:7E:05:95:38:E3:49:FA:07:5F:2A:A9:5C:48:02:BD:35:EF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/0987FE7E059538E349FA075F2AA95C4802BD35EF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273436

    Signature Algorithm: sha256WithRSAEncryption
         8a:47:df:98:0b:a2:30:86:3a:48:5c:64:a2:5e:49:e8:94:2f:
         e8:c5:60:b0:b3:8a:28:87:01:42:7a:89:2c:5b:53:0d:82:53:
         6d:25:5c:1a:a2:6e:45:ba:fd:e1:ad:f8:48:2c:87:3f:20:3d:
         c8:8f:f2:82:7c:fd:55:7c:9e:ef:51:95:3d:54:ef:04:7c:3a:
         ef:f4:50:8a:27:ce:96:bf:5a:5b:8c:7a:18:76:ae:1f:6c:03:
         1e:d4:7f:06:52:7e:dd:1c:80:cf:6b:e7:37:83:74:36:5a:1c:
         62:c6:b4:9b:49:4d:7f:06:18:3f:19:fd:36:ee:0d:ae:ac:00:
         07:56:08:b0:3f:6e:18:02:18:7a:61:18:84:aa:62:76:99:64:
         7d:44:9d:83:ca:a0:42:7c:12:0d:82:48:1c:62:c1:73:43:1d:
         9e:8c:15:2e:d2:3c:66:37:62:3d:d1:d3:c6:6d:7f:cd:00:8b:
         fa:34:5c:18:f1:95:d0:e9:91:90:43:a2:42:85:9e:a5:c0:1a:
         ad:41:5f:ce:b6:19:8a:a9:f2:35:51:21:d9:0b:c7:95:83:59:
         8f:ec:dc:76:ee:3e:41:78:c8:db:4b:9c:60:b6:be:22:3f:fc:
         cf:8c:47:aa:36:f6:64:e0:a6:ed:a8:cb:40:87:e9:21:01:ed:
         d7:77:be:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:00:27 2025 by rpki-client