Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/15DA7001CAFD1A581AC872675D95E85C8BED6584.cer
File:                     15DA7001CAFD1A581AC872675D95E85C8BED6584.cer (raw, json)
Hash identifier:          Ovkt9FFOldNebrgvU+IJ/KxBG+2w8JAVd8FKEzo5Z1U=
Subject key identifier:   15:DA:70:01:CA:FD:1A:58:1A:C8:72:67:5D:95:E8:5C:8B:ED:65:84
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       404B6B61E9C8ADC234FCBDF40999BD41D79D3775
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/15DA7001CAFD1A581AC872675D95E85C8BED6584.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Jan 2025 15:22:08 +0000
Certificate not after:    Tue 06 Jan 2026 15:27:08 +0000
Subordinate resources:    AS: 269566
                          IP: 45.188.8.0/22
                          IP: 2804:6688::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4b:6b:61:e9:c8:ad:c2:34:fc:bd:f4:09:99:bd:41:d7:9d:37:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  7 15:22:08 2025 GMT
            Not After : Jan  6 15:27:08 2026 GMT
        Subject: CN=15DA7001CAFD1A581AC872675D95E85C8BED6584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:25:1e:f0:56:57:6d:55:6e:09:4d:66:7e:32:
                    49:e0:d1:e3:40:9b:95:bc:2c:36:b0:57:3b:e8:4d:
                    f7:19:04:4d:17:00:6e:a6:82:71:ac:c6:f3:64:2c:
                    ab:f8:af:fc:fe:59:d1:ed:97:eb:b0:07:f2:e8:8c:
                    14:dd:e9:26:2a:9c:dd:e4:72:1c:76:66:e2:bb:3d:
                    22:5d:88:bf:4a:49:bd:9e:74:a8:d1:69:ab:ae:1e:
                    4a:a2:30:51:d4:ac:32:6c:28:a3:a7:ce:da:33:cb:
                    aa:80:2c:dc:11:94:3f:ac:d5:16:68:52:aa:53:c9:
                    af:61:07:97:80:38:36:33:c3:ed:0a:51:c8:a8:2d:
                    fd:4a:0b:e0:52:a2:5d:3d:b4:50:61:4c:b5:bf:12:
                    d9:af:1e:82:dc:61:2d:08:97:0a:3c:c6:d0:d1:d2:
                    8b:f4:f6:92:9c:f9:22:60:4d:6e:f1:a6:fe:6e:07:
                    0a:29:11:c9:ae:8f:ee:77:ee:87:c9:11:f0:a5:a5:
                    27:0e:4e:92:7b:0e:9f:90:18:55:d3:4c:d1:fb:39:
                    50:17:28:dc:02:ec:04:f9:d5:d7:e8:ab:ad:6a:b5:
                    55:71:1e:4b:2c:a7:8f:7f:4a:35:c8:26:f5:7b:03:
                    7d:94:c1:79:96:bf:02:3c:77:5f:10:20:d4:83:a1:
                    ae:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:DA:70:01:CA:FD:1A:58:1A:C8:72:67:5D:95:E8:5C:8B:ED:65:84
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/15DA7001CAFD1A581AC872675D95E85C8BED6584.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.8.0/22
                IPv6:
                  2804:6688::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269566

    Signature Algorithm: sha256WithRSAEncryption
         c1:31:40:2d:91:55:5d:bd:70:5a:fd:d7:fc:e8:8f:f2:45:dc:
         d6:5e:4a:5b:32:cc:56:24:f2:5f:b0:4b:fb:f9:e8:a4:41:6f:
         b8:31:f3:58:60:b9:8b:1f:d5:62:82:42:f4:b6:78:25:95:6b:
         57:b7:b0:29:79:7d:f9:85:30:93:f6:b8:54:52:f0:13:c5:85:
         35:3d:93:2a:1f:8c:a4:9e:72:af:cf:d3:bd:16:a7:92:13:80:
         6a:4e:8a:b6:0e:4a:53:31:57:3e:95:d2:52:8d:08:0d:3b:31:
         47:d1:20:85:fd:1e:3f:ce:07:16:3e:18:a0:2e:35:26:13:f9:
         fc:76:5a:c0:ec:1e:9b:17:b3:a2:96:91:80:3d:9d:ca:32:f4:
         e6:b0:ab:30:75:5b:18:c1:01:d1:99:e4:dc:b0:d5:b6:e1:47:
         a8:a5:f9:b1:90:50:31:17:95:82:39:76:64:7e:bc:3e:cc:3e:
         17:6c:69:bb:d7:d7:08:29:cd:ba:be:34:1c:60:b4:24:02:2e:
         71:57:f2:c8:ae:1e:c1:5d:71:92:b1:1b:ea:0b:2f:cb:ab:1d:
         f0:7d:f5:f1:b6:ab:e2:cf:57:da:96:91:9f:70:97:26:dc:02:
         f8:eb:90:81:49:5b:63:e9:d8:4e:69:6b:ef:e1:6e:03:f7:4d:
         6c:4b:07:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:19:28 2025 by rpki-client