Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1AF8EF98196B4BF9759D4778A8E265C6E12D3314.cer
File:                     1AF8EF98196B4BF9759D4778A8E265C6E12D3314.cer (raw, json)
Hash identifier:          /86z1xtO4vhcL/h3FwJVmhtbISMjebYMVa/8rMtvbx4=
Subject key identifier:   1A:F8:EF:98:19:6B:4B:F9:75:9D:47:78:A8:E2:65:C6:E1:2D:33:14
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1BF215E9EF47DF327C9177D83229779FD0E8A601
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/1AF8EF98196B4BF9759D4778A8E265C6E12D3314.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Mar 2025 14:32:35 +0000
Certificate not after:    Thu 26 Mar 2026 14:37:35 +0000
Subordinate resources:    AS: 267578
                          IP: 45.70.164.0/22
                          IP: 2804:4398::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f2:15:e9:ef:47:df:32:7c:91:77:d8:32:29:77:9f:d0:e8:a6:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 27 14:32:35 2025 GMT
            Not After : Mar 26 14:37:35 2026 GMT
        Subject: CN=1AF8EF98196B4BF9759D4778A8E265C6E12D3314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:11:27:dc:91:1e:b4:9a:2b:ef:79:bb:64:dd:
                    cc:db:e9:64:f1:c4:e2:86:45:4d:7d:71:f3:d4:4e:
                    87:bf:f2:14:24:9c:28:d9:70:70:a7:be:7b:4b:ae:
                    dc:90:77:c6:d6:b9:16:e7:05:8f:3b:30:6d:de:9a:
                    2d:c3:d6:f7:cc:9d:ab:e9:7c:42:67:7d:c9:1b:19:
                    2b:7f:e7:38:11:8c:1b:4a:90:c9:25:ec:2a:f4:e9:
                    d5:e2:a4:13:3a:bb:e3:28:16:c9:d1:32:a9:3a:f0:
                    e6:44:df:d1:99:f3:cd:27:55:e0:90:b2:cd:98:96:
                    67:9a:81:be:d3:ca:76:bb:dd:d0:26:b8:10:5c:13:
                    cb:4d:29:0a:0b:56:cd:d1:f3:f8:c2:be:ef:79:78:
                    cd:58:7d:db:ed:f2:18:ff:c7:8b:10:61:1e:7e:e0:
                    a8:c0:9b:ac:d0:7c:58:c6:58:ba:6a:a2:1f:a0:43:
                    e7:82:3c:3f:d1:0b:49:35:ad:ae:7f:a2:93:33:a4:
                    f8:f5:d7:93:d9:c5:e1:08:3a:11:42:ae:c9:99:d1:
                    6c:70:06:26:9e:42:e3:31:8d:f5:b8:c1:83:19:60:
                    75:c1:2c:45:91:59:17:a1:e7:92:a2:fa:e9:ce:d0:
                    0a:d2:81:28:e2:f0:b2:29:1e:23:22:16:74:05:9f:
                    84:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1A:F8:EF:98:19:6B:4B:F9:75:9D:47:78:A8:E2:65:C6:E1:2D:33:14
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/1AF8EF98196B4BF9759D4778A8E265C6E12D3314.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.164.0/22
                IPv6:
                  2804:4398::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267578

    Signature Algorithm: sha256WithRSAEncryption
         d2:56:16:c7:78:3e:9a:b6:d4:c5:16:10:cf:20:2e:42:ee:12:
         98:65:9a:c7:6b:45:7b:c8:d8:99:63:b0:23:9d:20:dd:a9:f7:
         e7:4d:10:02:f1:dd:f3:5d:54:84:ef:fa:b5:3b:95:a5:84:a5:
         30:03:ce:10:d4:2e:be:47:5d:ef:ce:6d:ae:bb:b5:46:74:9a:
         59:aa:f9:dd:57:9e:36:07:89:60:2a:c5:a7:c5:9e:f6:4d:8c:
         77:d6:35:2f:6e:be:6b:59:7d:f5:9d:c2:50:2e:be:b7:d3:8a:
         b6:b1:53:d9:c7:a9:11:04:bf:c1:44:27:c8:4c:1b:73:68:cd:
         84:f2:3a:72:c2:3c:e4:54:30:d7:5b:0b:2d:0c:51:b3:d6:90:
         a5:55:e9:ce:90:75:72:32:d1:79:33:8e:16:6c:16:24:3e:48:
         88:fa:71:64:d8:4a:4c:e1:b6:1c:93:11:19:81:aa:ce:c0:6b:
         38:7d:ff:c1:38:bc:c7:6f:1e:ba:f6:3b:b7:52:70:02:a8:44:
         be:62:44:5f:a6:48:36:c6:59:78:4b:f0:b4:fc:14:63:e5:27:
         ed:55:a4:ea:87:72:5b:b6:60:38:60:c5:89:2e:01:d1:c4:7c:
         37:87:97:0f:43:5e:59:55:d0:e2:16:87:69:82:85:12:43:31:
         e3:bd:70:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:52 2025 by rpki-client