Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/164081884269A17674589E45798EE6EE0A93A94E.cer
File:                     164081884269A17674589E45798EE6EE0A93A94E.cer (raw, json)
Hash identifier:          6ArO2EjZWGJ5QfQzvjLLHdH5fzpA+qJZDxYd6Orb4+s=
Subject key identifier:   16:40:81:88:42:69:A1:76:74:58:9E:45:79:8E:E6:EE:0A:93:A9:4E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2E57B7502A65AE18847BCE75F0EE4667C891B45B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/164081884269A17674589E45798EE6EE0A93A94E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 08:08:00 +0000
Certificate not after:    Fri 06 Mar 2026 08:13:00 +0000
Subordinate resources:    AS: 266547
                          IP: 160.238.128.0/22
                          IP: 2804:3db0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:57:b7:50:2a:65:ae:18:84:7b:ce:75:f0:ee:46:67:c8:91:b4:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 08:08:00 2025 GMT
            Not After : Mar  6 08:13:00 2026 GMT
        Subject: CN=164081884269A17674589E45798EE6EE0A93A94E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6c:fb:36:b2:26:41:11:01:2c:08:16:43:19:
                    52:78:05:d0:9b:e0:b9:d1:34:11:5d:b8:b0:e9:80:
                    fc:7d:36:cc:f6:29:b2:65:5e:73:1e:03:0d:10:98:
                    91:75:4a:cc:25:df:c0:f9:78:05:00:01:d7:4f:bf:
                    9b:71:37:7a:51:93:28:13:ad:52:aa:93:63:0c:e4:
                    c5:ca:a3:ef:d8:69:71:c2:ea:49:87:6b:dc:51:c3:
                    e3:69:39:13:9b:4a:51:21:b3:24:db:24:4f:46:df:
                    d0:8a:f1:2d:12:8d:b9:52:0f:38:af:31:30:6b:13:
                    10:ea:77:f9:e9:81:05:a5:d6:e1:f8:d1:01:79:2a:
                    48:7d:b5:95:12:0c:c2:51:10:62:b6:06:e1:50:cb:
                    5b:b5:75:71:1c:e9:fa:bf:2f:ac:e8:bc:10:43:ee:
                    02:c8:4f:6b:4e:34:5b:77:55:b1:73:4d:2d:6c:57:
                    5f:61:8a:63:6e:ed:94:55:83:b7:d2:ec:6b:f9:8f:
                    aa:1b:9c:3a:9f:61:88:50:46:77:26:4f:4f:ca:17:
                    81:4c:fb:81:1c:28:70:f2:f0:53:0a:61:b5:c8:99:
                    96:0d:6a:9a:d1:f8:a4:37:8f:db:cf:3f:e1:bf:52:
                    d0:2c:bc:fe:67:c9:c0:e0:76:72:28:14:fc:ab:4b:
                    67:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:40:81:88:42:69:A1:76:74:58:9E:45:79:8E:E6:EE:0A:93:A9:4E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/1/164081884269A17674589E45798EE6EE0A93A94E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.128.0/22
                IPv6:
                  2804:3db0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266547

    Signature Algorithm: sha256WithRSAEncryption
         bb:dc:e4:39:fd:e2:45:df:de:12:9f:77:59:d1:3d:64:85:de:
         c2:f0:a2:47:66:cb:af:ce:df:54:75:b6:06:7d:cf:4d:82:98:
         ff:e8:d5:6f:e8:85:33:bb:38:dd:98:2e:16:2b:a7:18:fe:4a:
         bc:c5:75:47:7e:f1:17:4d:98:76:ef:02:b3:e5:4a:c6:0b:57:
         74:5a:55:75:aa:64:af:29:1b:29:c6:10:25:46:73:a6:09:4e:
         22:13:6e:c7:37:4e:4c:4b:b3:e9:5c:6a:2e:fb:ed:71:9d:47:
         d7:07:f8:3f:d5:23:d9:5a:1a:f9:2a:a7:6f:10:23:ac:1d:8e:
         bb:7e:10:d0:8b:96:b4:f3:ee:4e:d0:52:d2:bc:15:c1:57:8f:
         80:02:b3:ae:18:2a:d7:0e:e9:f2:2e:ff:dc:d9:94:28:72:9f:
         57:b8:a6:47:09:8c:c4:ea:19:67:a5:f1:ca:21:a8:ba:dd:c2:
         6e:b4:ad:11:ab:a5:8f:d4:f4:25:f0:3f:d8:af:c2:52:50:ab:
         14:30:3e:2f:c6:24:ce:0a:5d:aa:b2:d6:fd:df:94:cb:b8:be:
         3e:04:7c:d7:4a:45:dc:70:fa:08:b3:28:40:ec:30:63:1e:65:
         bd:0e:e2:20:25:e1:f5:4a:50:36:d2:a4:40:0d:c1:73:bd:86:
         d3:52:eb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:34 2025 by rpki-client