Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.cer
File:                     0BFDC3A598A7E4C26811166F6E8FA25023A020F3.cer (raw, json)
Hash identifier:          LO/IAQWahxmFhhJrKarBwMKY7HDK5+7hUNWd7ULeXDg=
Subject key identifier:   0B:FD:C3:A5:98:A7:E4:C2:68:11:16:6F:6E:8F:A2:50:23:A0:20:F3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5D6665BC332AB863E1ECA228049C0B5460AC5EB3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 10:33:30 +0000
Certificate not after:    Fri 06 Mar 2026 10:38:30 +0000
Subordinate resources:    AS: 262742
                          IP: 177.104.32.0/19
                          IP: 2801:a4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:66:65:bc:33:2a:b8:63:e1:ec:a2:28:04:9c:0b:54:60:ac:5e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 10:33:30 2025 GMT
            Not After : Mar  6 10:38:30 2026 GMT
        Subject: CN=0BFDC3A598A7E4C26811166F6E8FA25023A020F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:c3:93:de:19:6b:4f:9f:2b:71:f0:bf:46:
                    c2:d7:ab:88:66:f4:cb:73:0f:36:34:72:77:be:72:
                    55:c5:b1:10:88:bc:2f:49:10:c7:73:fa:80:91:4c:
                    d8:c3:82:86:9b:5f:54:6f:6d:72:38:19:51:cb:08:
                    f6:1a:56:55:37:e8:3f:f2:6b:64:22:bd:51:61:e6:
                    8d:06:02:8f:52:d9:e1:02:1e:26:b9:89:42:5e:1b:
                    ed:67:7c:29:de:fc:c6:09:05:c5:65:8c:22:08:cc:
                    d2:f3:27:25:3f:9b:39:8f:4c:c0:ac:3e:8d:d8:b9:
                    7b:e0:d3:92:fc:5c:a0:dc:a8:66:1c:83:16:bc:48:
                    14:0f:36:26:ab:c2:30:4f:b0:f5:3a:b0:e9:93:a9:
                    a8:38:84:a0:06:7f:f1:aa:de:e3:49:e5:2d:a7:7e:
                    0f:33:d7:c6:e0:98:02:22:07:bd:c7:f7:0a:d0:7a:
                    f9:f7:32:a8:8a:5d:50:b6:33:d1:16:c4:b2:16:3b:
                    ce:2a:08:d9:8c:44:e3:a1:52:26:b6:c2:a7:a0:a3:
                    87:10:90:ce:de:3b:55:fe:3e:fb:b0:2c:f9:97:ed:
                    0d:70:84:90:fb:a0:65:38:bb:59:d3:2b:27:98:04:
                    cf:2d:a1:23:ff:9d:1f:eb:56:ce:dc:86:82:2b:b7:
                    de:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:FD:C3:A5:98:A7:E4:C2:68:11:16:6F:6E:8F:A2:50:23:A0:20:F3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/1/0BFDC3A598A7E4C26811166F6E8FA25023A020F3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.32.0/19
                IPv6:
                  2801:a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262742

    Signature Algorithm: sha256WithRSAEncryption
         69:00:2d:2b:76:8f:fa:ea:5a:26:93:99:92:07:3b:dc:1c:0f:
         56:ad:fe:c2:c0:cc:51:3e:86:b3:af:8f:77:c7:fb:32:b6:19:
         41:b1:99:97:49:e2:be:fc:fc:2b:33:70:2b:45:39:0b:74:8c:
         18:b0:c2:09:93:63:e7:81:73:ee:63:d6:70:57:1f:f5:f8:4a:
         1d:51:14:cc:cf:51:43:0e:0e:d7:3a:3b:d6:8d:dc:34:6c:18:
         c1:6f:ce:0f:ef:6d:96:31:9b:8e:ab:aa:b4:0f:e6:ab:9d:5f:
         bc:85:e5:41:d5:a8:e1:6c:d3:eb:09:23:ee:d0:b8:bb:06:5a:
         1c:3e:89:15:4e:7d:7c:b8:2d:9d:40:e9:02:97:5d:27:26:07:
         a6:94:52:25:93:d7:20:19:08:93:6e:1e:cd:62:1e:9a:30:0f:
         93:4c:60:73:e7:85:b7:67:36:e4:dd:33:cb:f5:54:29:8e:96:
         e4:a3:24:28:91:33:26:ec:39:26:f0:df:0b:41:d3:87:88:e9:
         eb:ca:ba:dc:59:6e:ad:90:95:25:c3:0e:d8:a6:dc:25:47:09:
         c4:57:f7:8a:8a:07:bf:a2:a8:ab:e5:68:27:39:0a:a2:b6:8e:
         0e:85:8c:69:b7:83:21:c7:67:2c:e6:c9:8e:3c:ea:73:ff:9a:
         79:af:cc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:04 2025 by rpki-client