Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.cer
File:                     120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.cer (raw, json)
Hash identifier:          NNOhL14Tf8HDFNeEFL5zcKRV2/VM4v3cPd5OhLtwRto=
Subject key identifier:   12:0F:03:9C:87:2F:A2:AE:7F:DC:D1:D4:49:9C:40:11:CE:1A:5B:9E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3178357CE83889C8F43847230FFBFF43674CACE2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 12 Dec 2024 12:43:19 +0000
Certificate not after:    Thu 11 Dec 2025 12:48:19 +0000
Subordinate resources:    AS: 272753
                          IP: 187.109.112.0/22
                          IP: 2804:8824::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:78:35:7c:e8:38:89:c8:f4:38:47:23:0f:fb:ff:43:67:4c:ac:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 12 12:43:19 2024 GMT
            Not After : Dec 11 12:48:19 2025 GMT
        Subject: CN=120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fc:50:5c:98:c8:ce:eb:63:2f:e2:ef:08:13:
                    de:f4:84:e9:01:59:07:5a:17:85:f5:6e:74:60:8e:
                    1c:cc:5f:a3:27:cc:46:d6:76:ce:cf:c7:f2:5a:ea:
                    4f:15:e4:9e:76:db:42:3c:a7:ec:a9:02:4c:93:ab:
                    e0:f5:66:55:fd:bc:60:bf:6b:da:e0:5d:f2:0c:89:
                    6e:11:e5:70:2e:ef:94:75:36:29:5e:1c:b0:6f:ae:
                    92:d1:83:76:69:10:1f:67:dc:32:99:ed:5d:3f:f0:
                    72:6d:2f:9c:76:61:8d:43:bc:2b:10:28:60:e2:db:
                    1e:d2:bd:49:1b:87:52:d6:24:0b:cd:f1:df:d8:c1:
                    83:be:f4:b2:36:9f:a7:4c:fa:ae:6e:f4:04:4e:77:
                    b7:3f:88:7d:08:4b:cb:0e:47:c4:96:8d:02:2c:a3:
                    dd:25:c9:a1:6d:5f:b3:c3:fe:bb:06:ef:cf:3d:55:
                    c2:c6:47:05:75:b5:4a:27:ed:f2:d2:59:40:68:e6:
                    33:17:79:a4:e1:f2:68:ea:24:fc:92:98:3b:d9:96:
                    88:ea:ec:82:a2:34:68:ae:f3:cb:04:69:10:d9:b4:
                    b8:44:94:4a:b7:73:4e:b7:02:75:e1:55:97:c2:82:
                    6d:e2:30:96:0f:42:7a:93:7c:71:cb:29:78:7a:2d:
                    6e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:0F:03:9C:87:2F:A2:AE:7F:DC:D1:D4:49:9C:40:11:CE:1A:5B:9E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A3GGgKW1LrNPgsMxKDpGSWxi6sLovGh6bkdoo7U9YjFb/0/120F039C872FA2AE7FDCD1D4499C4011CE1A5B9E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.109.112.0/22
                IPv6:
                  2804:8824::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272753

    Signature Algorithm: sha256WithRSAEncryption
         31:a3:cb:ea:e1:23:46:43:ab:7b:04:46:42:08:b3:a1:6e:73:
         6f:44:81:1c:fb:8d:e6:a3:b9:dd:cc:4a:4b:16:78:17:4c:28:
         f9:21:47:09:fe:1a:59:08:c0:49:f7:b2:ad:99:35:48:39:43:
         96:27:ab:ad:36:60:39:a5:49:43:34:17:29:5c:d7:23:52:a6:
         85:87:e7:f1:58:20:e8:ab:c2:57:1b:26:34:83:fe:26:00:a6:
         b7:87:26:06:d3:24:23:58:dd:c5:0d:68:22:78:15:8e:77:f5:
         24:14:88:49:a1:fc:3c:45:2e:8d:a4:c1:60:00:70:0a:79:a1:
         f0:8c:16:1c:49:0c:2c:56:ac:31:aa:b2:8b:48:f1:a4:5c:2b:
         8b:4c:11:c4:34:f3:32:eb:6b:6b:35:c1:43:93:b3:ae:a8:53:
         41:f0:ae:db:b8:e8:4a:8e:4e:12:8a:b6:07:97:72:c7:0a:44:
         2a:15:0e:bc:8a:fb:66:08:a0:31:f6:de:ed:1e:9d:e1:99:e2:
         ef:29:de:0a:5a:0f:ed:97:5c:8c:9a:7c:55:e8:3f:98:ac:30:
         7a:ae:31:bb:b3:4b:a1:b8:5a:6d:9e:5e:0e:41:ff:d1:3f:be:
         d0:7f:10:f4:06:a0:9e:2d:37:ae:63:d1:64:9d:4c:85:0f:22:
         75:16:cc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:00:15 2025 by rpki-client