Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1E8DC34E008DE152D57E76AA4AF28DE8D8ED62EB.cer
File:                     1E8DC34E008DE152D57E76AA4AF28DE8D8ED62EB.cer (raw, json)
Hash identifier:          AUog5JMMG/BHDsMgUBdEOS4JJsK5tlIh6XLKsGIA8+4=
Subject key identifier:   1E:8D:C3:4E:00:8D:E1:52:D5:7E:76:AA:4A:F2:8D:E8:D8:ED:62:EB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       46F5DCED4100314F448D05EB81FA060715DB58A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GgAP3392R3JEZswF7PTHGnAyijoSqjbbSJVyNCZJ7oG6/0/1E8DC34E008DE152D57E76AA4AF28DE8D8ED62EB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GgAP3392R3JEZswF7PTHGnAyijoSqjbbSJVyNCZJ7oG6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Dec 2024 00:34:59 +0000
Certificate not after:    Tue 02 Dec 2025 00:39:59 +0000
Subordinate resources:    AS: 262957
                          IP: 186.226.216.0/22
                          IP: 2804:e78::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f5:dc:ed:41:00:31:4f:44:8d:05:eb:81:fa:06:07:15:db:58:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  3 00:34:59 2024 GMT
            Not After : Dec  2 00:39:59 2025 GMT
        Subject: CN=1E8DC34E008DE152D57E76AA4AF28DE8D8ED62EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a8:3c:2f:46:1f:21:69:b2:80:ac:52:59:4d:
                    8e:d8:0a:ca:2f:13:b8:c8:17:da:ba:d6:0d:69:6d:
                    7d:1f:ca:0c:5d:7b:42:0f:30:b1:a2:0e:3e:cf:25:
                    5a:aa:62:ca:3a:85:2e:a8:24:97:36:45:c3:74:6c:
                    0f:8d:a9:f3:08:43:32:d5:b9:70:35:4a:ab:d1:33:
                    af:11:06:51:a6:b2:b6:fc:0e:62:3c:03:ac:27:08:
                    7c:0e:50:6e:d1:a4:53:48:a6:11:62:47:dc:a4:b1:
                    a6:06:e3:ee:0b:fa:5d:80:76:87:de:75:b0:86:4d:
                    fe:78:0d:bb:f3:87:f3:ab:03:e4:0e:44:bf:e8:9b:
                    20:43:cd:44:f7:dc:fc:36:7d:27:b6:15:8c:77:41:
                    0b:39:26:22:35:8b:30:9f:8a:c7:83:23:72:83:a2:
                    96:17:fa:df:98:56:40:7d:36:81:8d:57:a5:64:8d:
                    1e:51:1b:db:e6:35:db:2e:ab:4f:84:17:5e:97:12:
                    5d:ab:87:13:ac:fc:64:ba:0b:f5:2f:22:6b:83:7a:
                    99:fa:54:13:1c:80:79:09:88:dc:0b:09:a1:3a:3f:
                    b0:bf:cf:27:0f:67:68:3e:13:e1:b7:9c:76:d2:a0:
                    08:bb:5a:fd:ec:3c:5e:25:0c:76:0e:32:f9:b5:a1:
                    c7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:8D:C3:4E:00:8D:E1:52:D5:7E:76:AA:4A:F2:8D:E8:D8:ED:62:EB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GgAP3392R3JEZswF7PTHGnAyijoSqjbbSJVyNCZJ7oG6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GgAP3392R3JEZswF7PTHGnAyijoSqjbbSJVyNCZJ7oG6/0/1E8DC34E008DE152D57E76AA4AF28DE8D8ED62EB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.216.0/22
                IPv6:
                  2804:e78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262957

    Signature Algorithm: sha256WithRSAEncryption
         10:d5:c7:e6:b5:8f:52:99:8c:fa:bb:f6:7b:87:a1:79:07:09:
         fd:3f:24:62:4c:57:51:c0:15:4a:bb:35:58:64:a2:e9:62:6f:
         06:b1:dc:08:81:22:aa:3b:a2:b5:e2:fb:56:79:b4:e9:06:04:
         9a:da:05:57:71:c4:85:ac:eb:41:e7:bc:c1:7f:9e:6d:73:18:
         d0:38:6f:d6:e2:2a:b8:f5:7f:68:fa:b0:93:7c:e7:47:9c:63:
         58:fb:97:b9:7e:9b:ec:34:ca:6d:62:d7:05:9c:c2:3e:6d:c6:
         bc:e3:1a:bb:79:cd:0b:89:e8:b1:a3:3f:d6:18:09:ae:46:39:
         13:26:0d:5a:8f:99:48:24:8f:58:fc:e9:45:3a:d3:54:20:16:
         8c:b5:61:19:23:c1:a5:a9:f9:4e:b3:2b:68:77:16:90:f6:ac:
         19:27:c9:d9:1f:2e:55:c5:51:67:ce:ad:de:c4:ed:37:61:26:
         5f:f1:7b:c5:73:d0:bc:3c:37:66:84:e3:13:c5:4d:93:3a:ba:
         6e:98:e0:cf:ad:2c:3e:b6:d0:cb:9e:75:e0:dc:94:50:dd:e4:
         28:9b:c5:7f:50:44:ba:44:23:da:8e:93:e8:76:36:b9:fa:84:
         5f:27:c6:34:ac:0f:f4:e4:5f:d3:db:c6:40:33:02:d1:03:fe:
         ae:cc:8d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:42:51 2025 by rpki-client