Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1370A03EC954E150A22BE78FA96515CB0158F5C1.cer
File:                     1370A03EC954E150A22BE78FA96515CB0158F5C1.cer (raw, json)
Hash identifier:          Bn/WLNVv6ig35YwsqSkffdoxKnzr7FKbSSphYVRP3+8=
Subject key identifier:   13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0AE83076C7BFF81D7CB535F034B488B185649F2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Mar 2025 04:56:02 +0000
Certificate not after:    Wed 25 Mar 2026 05:01:02 +0000
Subordinate resources:    AS: 269570
                          IP: 45.189.40.0/22
                          IP: 2804:6698::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e8:30:76:c7:bf:f8:1d:7c:b5:35:f0:34:b4:88:b1:85:64:9f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 26 04:56:02 2025 GMT
            Not After : Mar 25 05:01:02 2026 GMT
        Subject: CN=1370A03EC954E150A22BE78FA96515CB0158F5C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:17:12:ff:c0:b9:7c:2b:44:fc:9d:04:5b:5c:
                    c6:8d:41:65:fb:94:1d:66:93:36:16:3f:96:c8:56:
                    a4:d8:c0:62:3d:5e:fd:84:a7:4a:32:fd:fe:4a:a9:
                    04:f3:07:a7:65:4f:f6:35:73:ba:da:79:4f:b5:07:
                    9a:34:10:c9:65:49:57:91:8f:34:29:ef:73:9b:24:
                    93:24:69:57:12:0e:d2:d1:f8:9b:c7:67:58:cc:35:
                    33:f5:64:66:e7:99:f2:39:f8:d4:fb:1d:97:cc:c9:
                    20:c4:f2:4d:3d:77:5a:a3:5d:74:2d:79:cb:f4:a1:
                    c5:2d:ac:05:26:89:08:0a:85:39:95:ad:59:d1:d3:
                    40:f5:f9:77:58:a2:67:61:ed:fe:a6:ea:54:c9:83:
                    ed:12:02:6e:07:0c:a5:d2:34:a6:87:40:b9:99:7c:
                    d1:13:6e:c2:ca:ae:3b:5a:b3:2d:84:60:51:11:b8:
                    30:cf:8e:9d:65:7f:76:f9:08:1e:dc:0e:c9:4c:a0:
                    25:a0:95:5d:a7:9c:60:2b:b9:55:f1:37:1e:62:ee:
                    be:82:71:42:86:db:2a:dd:e6:37:24:b8:a5:9c:06:
                    15:cc:49:d5:7d:74:fd:dc:aa:55:29:c0:9e:ef:ba:
                    47:e2:4e:a6:87:44:70:e1:87:cc:42:74:b6:19:b5:
                    39:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:70:A0:3E:C9:54:E1:50:A2:2B:E7:8F:A9:65:15:CB:01:58:F5:C1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CKDjCj1kNmxoBtCq36DUgnSaQdCks9qdPgf7X1bfugNj/0/1370A03EC954E150A22BE78FA96515CB0158F5C1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.40.0/22
                IPv6:
                  2804:6698::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269570

    Signature Algorithm: sha256WithRSAEncryption
         44:8a:4b:d9:4e:8a:6d:ab:62:7f:80:aa:9d:cf:90:be:e7:27:
         70:44:77:ac:0a:10:4f:d5:48:eb:94:14:cd:c3:99:28:a9:19:
         86:dd:01:fe:26:58:50:69:9a:d0:81:80:b3:76:88:27:e4:2c:
         eb:b7:9d:8a:fa:f6:b0:91:e2:f5:97:92:b8:a1:1d:7f:cc:16:
         51:22:9d:b6:05:dd:ac:ae:16:bf:2c:da:62:d7:10:39:3f:76:
         57:f9:2b:4d:63:26:4b:ff:e8:fd:ad:20:c9:fa:71:52:22:f9:
         de:99:af:0e:50:51:15:3a:e6:62:6e:2f:83:86:c7:e4:31:76:
         64:dc:16:f8:50:d8:81:78:c9:e2:97:30:b6:19:ef:ee:69:85:
         31:a6:b8:70:b9:e0:99:92:52:e3:60:8a:b8:90:17:11:77:7c:
         76:2f:cf:87:e8:f7:06:aa:96:df:31:44:91:4c:69:df:bd:87:
         7d:7b:ab:a8:11:ee:54:d7:6f:9d:0a:c0:b6:16:03:4d:bb:97:
         4e:36:0b:32:b3:73:52:4e:94:bd:98:13:7e:6f:17:76:95:9f:
         1e:ae:ca:2f:d5:cb:99:97:0c:c3:8e:e6:5b:20:6f:97:df:8e:
         bd:14:3a:30:9e:34:57:54:93:01:75:00:fb:2f:b6:2d:80:e6:
         4c:0e:ad:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:40 2025 by rpki-client