Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/111ABB8582160E8251812CE601483CCFD4E7252F.cer
File:                     111ABB8582160E8251812CE601483CCFD4E7252F.cer (raw, json)
Hash identifier:          xTTXXCa0A/0dBgUdLnyqTO0oG5IqswN3KFoMyVG+0bw=
Subject key identifier:   11:1A:BB:85:82:16:0E:82:51:81:2C:E6:01:48:3C:CF:D4:E7:25:2F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       292906640855A49C7CD7C323EA58337FA6518866
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/1/111ABB8582160E8251812CE601483CCFD4E7252F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 06:28:56 +0000
Certificate not after:    Fri 06 Mar 2026 06:33:56 +0000
Subordinate resources:    AS: 269248
                          IP: 45.182.252.0/22
                          IP: 2804:61a8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:29:06:64:08:55:a4:9c:7c:d7:c3:23:ea:58:33:7f:a6:51:88:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 06:28:56 2025 GMT
            Not After : Mar  6 06:33:56 2026 GMT
        Subject: CN=111ABB8582160E8251812CE601483CCFD4E7252F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:04:53:a1:15:f1:31:1e:0b:26:9a:4d:b2:47:
                    2b:68:9c:2f:f1:1f:e7:08:43:7c:de:cd:c1:02:75:
                    95:46:c7:66:db:a5:7e:20:20:3a:be:0c:d3:49:f3:
                    ca:8a:de:79:02:aa:cb:cc:14:08:a5:aa:3f:ce:29:
                    67:40:f5:8c:9a:6b:0a:a6:4a:0c:a2:d0:65:e2:24:
                    8e:eb:1b:2e:7f:e1:59:55:87:57:b0:49:af:3a:f1:
                    41:c5:ec:1a:dd:e6:37:14:a4:bb:21:ad:35:91:87:
                    29:eb:aa:b1:20:e7:06:b6:0a:b9:37:31:ac:54:fa:
                    16:b6:51:54:fb:8c:c8:dc:d2:b4:07:91:9a:1d:b5:
                    5f:f3:d7:98:fe:68:4b:02:c2:f0:73:61:d5:66:65:
                    8c:02:f0:24:d4:37:02:27:64:dd:84:e8:3a:8a:33:
                    a2:96:91:3c:77:0c:4a:48:dc:af:53:a3:1d:98:32:
                    0f:18:8a:b4:66:e2:a9:e6:fe:15:6d:f9:ed:2d:16:
                    2e:36:16:2b:c2:23:6c:24:01:23:1c:d7:57:85:dd:
                    a2:a5:80:c1:7e:43:be:f5:a7:a1:e2:ff:16:de:cc:
                    4c:64:74:a6:16:3f:b7:da:a6:5a:16:b9:08:9f:3e:
                    45:f7:9b:b0:ec:a2:d6:eb:22:0b:06:f4:a1:e0:9b:
                    19:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:1A:BB:85:82:16:0E:82:51:81:2C:E6:01:48:3C:CF:D4:E7:25:2F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/1/111ABB8582160E8251812CE601483CCFD4E7252F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.252.0/22
                IPv6:
                  2804:61a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269248

    Signature Algorithm: sha256WithRSAEncryption
         23:1f:0e:91:1d:b4:28:fd:f0:9e:69:2e:f5:85:78:a4:72:cd:
         9d:06:90:dc:fb:dd:bc:8d:82:84:22:3c:81:e4:5f:58:f7:8a:
         33:83:3e:be:35:7f:49:29:52:20:a7:22:f1:71:2b:1e:a6:c5:
         d1:dd:d3:a3:27:2c:9e:45:1a:14:41:7e:73:10:aa:45:d1:b4:
         60:0d:20:08:44:c5:ba:dc:35:ac:96:d0:c0:45:62:cb:76:7e:
         09:ab:2f:b6:f5:15:87:d8:42:a5:85:88:06:db:3c:a0:8a:f2:
         37:48:b6:97:7c:2f:2f:b5:5b:92:6e:91:85:04:2a:1f:70:96:
         d6:01:92:57:a0:d1:8a:ad:3f:bf:f7:36:75:10:5b:b6:18:19:
         41:ad:48:82:89:9c:ee:b1:09:d9:33:72:5a:5b:e7:2e:11:92:
         67:6d:2a:19:0d:a3:27:bb:a4:6f:90:91:4d:7c:cc:b7:10:bd:
         7c:e9:86:a7:00:86:f6:74:61:06:ad:5b:53:ea:72:af:37:a5:
         aa:c2:46:d0:64:5a:11:11:ef:80:3c:65:92:e7:75:2d:69:b0:
         09:d2:e3:8e:d5:7b:ba:d8:48:f2:94:fc:f2:60:57:e1:97:68:
         82:8a:05:4a:04:03:e0:4a:6a:96:d3:4b:67:b8:52:93:24:0f:
         7d:9e:58:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:13:49 2025 by rpki-client