Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/19FF3CAC4DD2A26EC7E57760D9D9A231D6B5A1E5.cer
File:                     19FF3CAC4DD2A26EC7E57760D9D9A231D6B5A1E5.cer (raw, json)
Hash identifier:          xRlAWtTK81+r2wFKQFMgfnjulSFNxxupQBDSTI27meQ=
Subject key identifier:   19:FF:3C:AC:4D:D2:A2:6E:C7:E5:77:60:D9:D9:A2:31:D6:B5:A1:E5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5C8DC9E83910C3B5B96E4C41B3A8FCDD19A56960
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/2/19FF3CAC4DD2A26EC7E57760D9D9A231D6B5A1E5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 22:26:58 +0000
Certificate not after:    Thu 05 Mar 2026 22:31:58 +0000
Subordinate resources:    AS: 52551
                          IP: 177.130.112.0/20
                          IP: 2804:cc4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8d:c9:e8:39:10:c3:b5:b9:6e:4c:41:b3:a8:fc:dd:19:a5:69:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 22:26:58 2025 GMT
            Not After : Mar  5 22:31:58 2026 GMT
        Subject: CN=19FF3CAC4DD2A26EC7E57760D9D9A231D6B5A1E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:60:59:b1:9c:70:81:37:24:fe:9a:0a:e3:a1:
                    4b:f7:d8:2e:67:db:03:72:b5:9f:06:cd:d7:75:ef:
                    2f:fe:81:88:bc:97:86:de:92:b1:97:91:92:50:85:
                    8d:39:e4:e2:da:b7:ba:7f:30:0d:36:d1:1a:f1:5e:
                    26:b3:58:43:7f:6f:65:b4:a3:67:b8:83:38:90:2a:
                    72:d9:99:67:85:fb:23:8c:ee:23:44:df:f4:10:92:
                    c1:80:22:d5:83:00:05:97:d7:72:47:fa:58:fc:f7:
                    73:43:80:61:ef:ef:11:17:b1:b0:e9:f1:3e:c5:45:
                    d5:01:ac:0b:d3:18:75:48:0f:51:6e:65:8c:97:da:
                    b1:44:c7:c8:ab:3f:21:2b:aa:03:f3:54:78:69:e6:
                    55:be:39:32:41:89:a5:78:38:78:69:b7:01:e1:da:
                    7e:80:c2:97:cc:a2:74:da:42:8a:c8:7f:d6:4a:c6:
                    77:a3:39:4b:4c:43:ef:29:fd:3f:7c:7b:be:6c:b4:
                    bf:b0:9d:b4:9d:94:20:20:73:17:71:00:2e:82:24:
                    29:ea:a6:c3:a9:e0:ed:03:15:6a:b9:bd:7a:4e:66:
                    d8:59:04:6e:15:dd:08:84:58:bb:73:c7:a6:76:21:
                    e7:21:fb:2b:a1:7b:bc:5e:89:3b:f0:0b:bf:b9:4b:
                    b2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:FF:3C:AC:4D:D2:A2:6E:C7:E5:77:60:D9:D9:A2:31:D6:B5:A1:E5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CvWdiuLA1rLzv1N8B8ww5KaQyV93K6yjVJrRjibD9Lec/2/19FF3CAC4DD2A26EC7E57760D9D9A231D6B5A1E5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.112.0/20
                IPv6:
                  2804:cc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52551

    Signature Algorithm: sha256WithRSAEncryption
         69:15:3f:a8:f2:66:fa:81:1f:cf:f2:40:2b:72:a4:76:9d:39:
         a0:55:f6:fc:98:90:4b:bd:47:f7:92:38:86:05:f8:e7:ce:3d:
         17:16:a5:b7:0f:a0:43:55:f7:72:2f:91:b7:60:a3:e5:a4:c1:
         db:09:3f:f3:aa:49:7d:74:ba:aa:b0:df:39:82:90:5d:2b:62:
         53:ae:9a:3f:c7:d4:a9:b9:73:cc:24:15:6c:88:31:fb:a5:c4:
         69:6c:0e:e0:ed:f0:06:84:a6:a0:df:9b:45:c1:35:1a:17:ac:
         8b:75:86:35:b4:e6:65:50:c3:31:b9:14:ec:99:89:17:8d:cf:
         90:f7:cb:d0:4b:21:68:28:74:d0:8e:a2:f0:6d:ae:ad:1c:b6:
         b8:73:e8:69:cf:74:d7:18:7e:c3:ac:42:4f:bf:64:ea:f0:fa:
         81:9a:b3:3f:e2:f0:80:31:0e:21:35:ca:b3:89:b3:29:f5:8d:
         69:83:ff:a3:6c:d5:e8:11:5d:a0:3f:38:93:6c:8d:ec:2c:8b:
         92:9c:e9:ba:86:f7:20:c1:f4:eb:33:4d:04:3d:37:bc:d8:ab:
         7d:d4:00:26:75:f3:14:9d:5f:01:d8:9b:36:63:8c:20:e8:22:
         a1:92:f1:a2:fe:c3:70:da:95:79:ec:87:c3:b3:89:66:45:54:
         0e:e6:9a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:19:13 2025 by rpki-client