Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/121F6202CB0EE7F5E476D4E34E5818A48E42C8D0.cer
File:                     121F6202CB0EE7F5E476D4E34E5818A48E42C8D0.cer (raw, json)
Hash identifier:          We69/9POj0sexvgKNwQJS8II2RrGb6VhkMq8ag+6oPo=
Subject key identifier:   12:1F:62:02:CB:0E:E7:F5:E4:76:D4:E3:4E:58:18:A4:8E:42:C8:D0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2D77996B1C2A998DBE0084D215C59797AB072649
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/1/121F6202CB0EE7F5E476D4E34E5818A48E42C8D0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:36:32 +0000
Certificate not after:    Wed 04 Mar 2026 18:41:32 +0000
Subordinate resources:    AS: 269461
                          IP: 45.187.68.0/22
                          IP: 2804:64fc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:77:99:6b:1c:2a:99:8d:be:00:84:d2:15:c5:97:97:ab:07:26:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:36:32 2025 GMT
            Not After : Mar  4 18:41:32 2026 GMT
        Subject: CN=121F6202CB0EE7F5E476D4E34E5818A48E42C8D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:8a:8f:4e:a5:17:cd:e5:a0:53:07:bc:9d:
                    6e:97:84:60:c9:3e:6d:35:f5:fe:09:ba:1d:0c:23:
                    82:2d:6a:d6:3f:4a:b9:24:a3:8e:a1:36:1f:cd:95:
                    0f:7b:ed:af:47:23:72:8b:f5:24:09:f1:37:63:10:
                    15:0b:4e:76:f9:a8:ac:e3:c1:2c:bd:89:95:af:95:
                    ea:fa:9c:35:08:50:bb:c1:f3:28:42:01:1c:9d:ca:
                    9c:99:3b:0f:bd:81:aa:42:d0:64:16:24:17:f1:0c:
                    31:c6:38:7e:ab:c1:83:6a:64:31:62:76:7b:e2:e6:
                    8b:52:51:12:a5:00:23:86:96:1b:6c:a0:01:73:fc:
                    a7:ee:0e:27:33:cc:32:d4:59:b8:78:b0:1a:aa:9d:
                    6c:f4:28:5c:1e:03:0c:84:02:84:35:41:80:03:0d:
                    7d:7c:59:94:72:1e:a7:d0:ea:65:7e:60:d0:58:20:
                    ff:de:3a:4d:73:68:84:12:18:2f:e1:e0:89:1c:f3:
                    1a:19:03:ce:f6:be:af:4c:7c:cc:4f:e5:73:5f:a8:
                    07:a0:10:6b:72:8a:49:87:b3:6e:a9:33:ae:22:9d:
                    23:de:17:6c:92:3c:87:b8:da:0e:6f:ce:f4:4f:d2:
                    0b:31:bd:75:41:2c:6c:c6:dc:1a:46:05:29:26:bc:
                    58:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:1F:62:02:CB:0E:E7:F5:E4:76:D4:E3:4E:58:18:A4:8E:42:C8:D0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/1/121F6202CB0EE7F5E476D4E34E5818A48E42C8D0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.68.0/22
                IPv6:
                  2804:64fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269461

    Signature Algorithm: sha256WithRSAEncryption
         52:00:8d:b9:35:b8:8f:73:bb:f4:ae:22:d1:99:7b:60:a0:49:
         89:45:cf:ce:99:d3:42:b0:02:d9:bc:e3:8e:a0:38:7f:00:84:
         8d:2e:1b:04:96:8f:0e:fb:d7:4b:0b:ff:70:e4:23:aa:2e:f1:
         31:fe:07:39:9a:68:59:23:3c:87:34:5a:08:ec:5e:ac:b0:0b:
         1a:11:be:3c:7c:ce:0b:03:7d:1e:87:5d:1e:6d:26:91:75:75:
         31:fa:85:a3:3b:cf:23:8a:c9:b7:4f:85:9c:95:7f:cc:1a:32:
         ae:51:f0:ac:18:f2:da:4a:4b:94:9c:0c:0e:e5:8f:8b:48:a4:
         46:fe:d6:2b:ce:38:bf:b7:a9:15:55:d6:24:e1:f3:d3:11:9c:
         15:e6:5a:13:62:56:5a:f4:d8:ed:4f:59:53:47:73:71:65:ee:
         d9:ec:d8:7e:de:fb:47:f0:ca:e8:d1:1a:09:96:ee:e4:8e:e5:
         8c:91:a3:2b:d1:27:21:c8:0d:ac:af:a3:3e:74:16:21:88:03:
         8d:66:b6:15:ed:ef:14:b0:26:73:38:0a:69:46:07:81:e1:f9:
         8e:35:b7:62:18:dc:98:08:68:cf:34:2f:2f:fd:81:54:53:63:
         3d:95:cd:c4:82:9e:68:e1:85:da:c9:30:1d:3b:fa:a2:2c:28:
         dd:9b:83:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:34:10 2025 by rpki-client