Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2001EDAB33F718E926EE051A5D4EEFC09551D26A.cer
File:                     2001EDAB33F718E926EE051A5D4EEFC09551D26A.cer (raw, json)
Hash identifier:          Md/gNEM5PdlQa5+syRluCWwtgTLRPfH2l/n2MuEn7D8=
Subject key identifier:   20:01:ED:AB:33:F7:18:E9:26:EE:05:1A:5D:4E:EF:C0:95:51:D2:6A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7BA8A20336A0170D1D63D4800D611250A70E1CE2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J7wPLxobGZUuKfUKstopvBiDWqUNaTqH6cheqLBkqpa1/0/2001EDAB33F718E926EE051A5D4EEFC09551D26A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J7wPLxobGZUuKfUKstopvBiDWqUNaTqH6cheqLBkqpa1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Mar 2025 16:59:21 +0000
Certificate not after:    Tue 17 Mar 2026 17:04:21 +0000
Subordinate resources:    AS: 266200
                          IP: 160.20.180.0/22
                          IP: 2804:3c44::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a8:a2:03:36:a0:17:0d:1d:63:d4:80:0d:61:12:50:a7:0e:1c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 18 16:59:21 2025 GMT
            Not After : Mar 17 17:04:21 2026 GMT
        Subject: CN=2001EDAB33F718E926EE051A5D4EEFC09551D26A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:54:6d:9a:ad:17:c8:97:a1:09:bd:b2:01:17:
                    23:d3:78:85:4c:ba:3c:a4:e3:11:e4:ef:79:7e:e2:
                    73:89:65:16:b1:a9:a9:71:5e:fa:5e:87:96:12:5a:
                    91:2d:74:3b:81:fb:4c:61:7c:cd:de:71:4c:b9:59:
                    e5:63:fa:92:82:8b:87:49:83:f8:9c:64:d5:51:2f:
                    12:3f:77:32:6a:77:1e:78:8a:b7:0b:66:8e:d9:7a:
                    e7:ee:b8:36:66:76:e8:2d:9a:92:25:43:81:48:72:
                    78:1d:9a:67:22:3f:ab:eb:38:8a:0e:7c:92:f3:fd:
                    e5:94:75:f4:b3:16:0b:9d:f8:42:e7:b5:6c:02:8c:
                    c5:30:c9:3b:03:86:71:42:d1:3a:d7:39:9f:23:49:
                    f8:14:e5:6b:8b:b4:66:bc:ba:cd:1f:3e:33:ba:5c:
                    87:05:e9:17:79:88:92:b2:c6:3f:68:94:2f:9d:a0:
                    54:3e:85:29:d4:c9:54:eb:1e:50:dd:90:fc:f1:b6:
                    7c:79:34:d8:c2:6d:3a:30:87:c5:91:47:83:ea:ca:
                    c4:12:0f:c1:8b:9b:08:60:c8:e2:01:74:7b:00:21:
                    3b:1f:03:a5:c5:0e:60:84:d3:aa:46:d4:18:1e:e0:
                    ad:e5:c6:ee:d2:8e:57:8f:e6:e3:7a:e6:ed:66:c2:
                    50:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:01:ED:AB:33:F7:18:E9:26:EE:05:1A:5D:4E:EF:C0:95:51:D2:6A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J7wPLxobGZUuKfUKstopvBiDWqUNaTqH6cheqLBkqpa1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J7wPLxobGZUuKfUKstopvBiDWqUNaTqH6cheqLBkqpa1/0/2001EDAB33F718E926EE051A5D4EEFC09551D26A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.180.0/22
                IPv6:
                  2804:3c44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266200

    Signature Algorithm: sha256WithRSAEncryption
         ad:95:21:b1:ec:d4:e1:24:28:28:f2:2a:b7:8a:2c:d4:f7:12:
         8b:43:3a:c6:00:ed:a2:d4:cd:f7:e0:40:cf:b6:2c:28:77:84:
         70:81:3c:48:64:5c:38:ba:65:cc:b0:46:f7:46:af:63:5a:3f:
         a7:06:01:3b:cf:8a:4d:1b:54:c9:70:47:0d:e6:5c:d1:b0:0b:
         79:39:3c:cf:53:9c:51:62:e8:47:f5:ca:70:c5:6e:e0:2b:0d:
         c9:7b:8b:73:db:d7:18:e1:7d:2a:a5:b1:1f:5d:64:6b:01:25:
         9e:3b:30:34:79:28:e2:57:ea:e0:ef:e5:66:46:03:c1:7e:6b:
         c6:91:33:17:18:07:dc:8e:57:89:02:d6:46:c2:2f:67:82:96:
         14:3e:e1:98:46:d2:c4:65:30:b3:2c:c4:43:0f:a5:d5:f4:52:
         b4:89:0e:18:61:91:d3:91:e4:60:7a:3d:1c:62:d2:fc:dc:ff:
         8f:db:de:5a:c3:1d:93:78:77:da:b0:b6:3e:69:a8:37:f9:e1:
         88:e5:e6:f2:c1:0a:de:da:97:5b:6d:07:62:93:95:31:4f:73:
         09:90:00:49:0e:ee:09:e2:41:30:d2:9a:b7:54:86:0f:e6:cf:
         f8:07:17:59:e2:6b:56:3e:90:f1:c1:2d:51:e2:63:b5:4a:e4:
         8b:a6:83:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:32:18 2025 by rpki-client