Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/211BF480C17107F7AE6882CC3FE220E37AFE75F8.cer
File:                     211BF480C17107F7AE6882CC3FE220E37AFE75F8.cer (raw, json)
Hash identifier:          aRcP94Usvd6MWWerc1ybrnuB9qeeOQ9Znb0qWP/+i6w=
Subject key identifier:   21:1B:F4:80:C1:71:07:F7:AE:68:82:CC:3F:E2:20:E3:7A:FE:75:F8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6831AE76CE4A2D41E6FBEDA7FF9324B3B738560C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/211BF480C17107F7AE6882CC3FE220E37AFE75F8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 11 Dec 2024 18:47:44 +0000
Certificate not after:    Wed 10 Dec 2025 18:52:44 +0000
Subordinate resources:    AS: 267952
                          IP: 45.166.48.0/22
                          IP: 2804:55b8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:31:ae:76:ce:4a:2d:41:e6:fb:ed:a7:ff:93:24:b3:b7:38:56:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 11 18:47:44 2024 GMT
            Not After : Dec 10 18:52:44 2025 GMT
        Subject: CN=211BF480C17107F7AE6882CC3FE220E37AFE75F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6b:42:5f:ec:f9:ec:5b:87:3d:5f:38:2d:40:
                    af:4c:d1:66:d5:d6:16:1d:c0:f2:61:d9:8a:3c:3d:
                    bb:fa:37:36:aa:c2:e6:b3:5f:84:0d:9f:5e:b3:bc:
                    cc:44:20:64:f0:b8:17:b4:6b:53:5e:5d:c0:b4:51:
                    ef:dd:b1:dc:22:d2:df:88:13:d4:2c:cd:b4:f5:47:
                    11:b5:b3:61:c8:15:17:9f:77:ab:7c:59:52:3b:8f:
                    2a:15:90:4c:92:c8:0b:11:4b:62:1d:f3:52:60:61:
                    28:be:21:ef:4b:48:ab:52:32:f6:38:5c:de:c0:aa:
                    8e:7b:a8:5d:9d:df:97:48:be:1a:a3:4b:cf:12:8c:
                    47:48:5b:4d:a0:b4:00:47:d7:0d:b6:7f:68:90:ab:
                    d8:23:06:7d:b1:ed:6a:9c:c8:5e:53:73:6b:16:a5:
                    ca:32:30:c2:de:73:86:de:57:06:08:9d:ca:c9:13:
                    8f:f9:8e:73:f9:09:b8:60:89:31:fe:03:e0:6b:6a:
                    4e:98:50:92:97:89:2f:05:5c:91:7a:cb:38:1b:ee:
                    03:fe:31:58:cc:0d:be:41:a4:57:2c:97:99:81:cc:
                    a8:80:19:09:47:4c:e2:76:2d:de:86:4e:52:9c:12:
                    c9:57:9a:89:40:42:17:91:dd:4b:c1:d4:ba:be:55:
                    02:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:1B:F4:80:C1:71:07:F7:AE:68:82:CC:3F:E2:20:E3:7A:FE:75:F8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HTnWrcvdycmZ669iKZFrujyHLhbPtwN6kZ334wS4QVLL/0/211BF480C17107F7AE6882CC3FE220E37AFE75F8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.48.0/22
                IPv6:
                  2804:55b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267952

    Signature Algorithm: sha256WithRSAEncryption
         41:fd:34:08:f3:d9:c5:95:3c:7f:d1:9a:99:88:de:ec:4e:e3:
         42:9d:2b:26:4c:1b:75:14:9b:89:44:9a:97:3e:e8:dd:f2:7f:
         d0:54:83:6e:a0:4d:e5:56:82:6b:e5:e0:b1:ad:d9:e9:74:30:
         28:20:d7:50:af:7e:e9:4a:da:42:7a:5e:09:2c:90:a7:15:4f:
         c6:07:d4:5f:1e:87:3f:be:f7:87:37:d7:e6:81:dd:af:09:20:
         e2:53:d8:ea:52:4e:e3:70:49:ac:21:21:5a:a1:c0:34:80:65:
         48:bf:fe:79:8c:26:10:d0:f4:13:74:73:e4:56:9a:de:29:28:
         61:bf:bf:1b:99:6b:ed:c2:11:e2:9f:7b:c3:14:e2:48:70:0a:
         89:81:55:89:93:b7:ec:13:61:05:35:dd:a4:c0:df:e2:8f:f7:
         41:09:c0:21:d1:4a:97:b8:2b:0d:01:d0:29:29:ef:48:46:4c:
         fa:b1:45:06:3a:f4:23:d9:ca:64:fe:0e:31:1e:f8:6b:3d:a1:
         88:cf:94:d7:5c:f5:90:2e:a2:87:ee:96:1c:74:62:bd:6c:5a:
         10:82:9d:11:f7:91:d7:18:bc:24:c2:5e:51:e8:99:a4:b9:a0:
         98:2c:47:44:04:ae:ce:53:c8:71:52:7c:81:9b:d9:72:4b:b2:
         cb:62:a9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:23:55 2025 by rpki-client