Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
File:                     24C0BF59215339684BA80028158EEDE0FD534D91.cer (raw, json)
Hash identifier:          tmiD701G3T50+/99wTupEyGNmW2t+Wcz7RQSGFQn/O8=
Subject key identifier:   24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       36289F584A2C28545FE138B67336670F39DE6ADA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 31 Jan 2025 18:32:16 +0000
Certificate not after:    Fri 30 Jan 2026 18:37:16 +0000
Subordinate resources:    AS: 270577
                          IP: 187.94.12.0/22
                          IP: 2804:6e20::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:28:9f:58:4a:2c:28:54:5f:e1:38:b6:73:36:67:0f:39:de:6a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 31 18:32:16 2025 GMT
            Not After : Jan 30 18:37:16 2026 GMT
        Subject: CN=24C0BF59215339684BA80028158EEDE0FD534D91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2f:ef:e6:15:7f:64:96:a7:5f:e8:38:67:6c:
                    47:38:09:b1:9e:cb:f1:2c:36:93:43:16:10:64:f5:
                    f4:66:0c:c7:60:0d:e3:2f:63:6f:7f:17:93:81:2f:
                    c5:df:ba:a9:fc:3a:3f:ea:9c:da:91:18:9f:e4:0a:
                    0b:e3:6b:d4:35:51:d3:04:e3:05:37:05:2e:35:56:
                    0c:a5:52:95:fe:d7:7f:1e:df:01:16:bd:ce:be:95:
                    5e:e6:92:a5:05:87:d6:56:01:b7:d1:3b:bc:b0:bf:
                    54:9b:af:a0:06:40:b1:b0:6a:06:88:7a:c5:cd:ce:
                    9f:02:56:73:6c:1b:8d:ed:da:dd:0b:39:13:3c:b3:
                    d7:41:48:a3:bc:b5:e8:68:90:db:d5:1e:07:d7:e4:
                    a0:e7:55:2f:ab:2b:1e:b4:e5:3e:4c:ae:f1:28:b8:
                    93:9b:68:2c:54:1f:32:00:86:8a:95:52:06:c4:cf:
                    91:74:87:f9:e6:18:e0:29:db:74:e0:b4:0a:9f:17:
                    8e:94:e3:47:cf:e3:11:78:82:1d:7e:8f:3d:a2:6a:
                    70:03:15:4b:ea:dc:c7:af:a9:55:6a:87:72:30:a6:
                    38:2c:9c:2d:22:71:1e:0d:52:dd:2a:ef:49:96:2c:
                    9e:7f:86:3d:6b:70:76:a6:1b:6c:73:69:c8:9e:17:
                    0c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.12.0/22
                IPv6:
                  2804:6e20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270577

    Signature Algorithm: sha256WithRSAEncryption
         69:3f:a2:17:f3:79:52:8d:b9:66:b5:cc:a4:71:43:0a:62:a6:
         db:c3:36:d2:a5:64:e7:e3:fe:e1:d2:66:0a:bf:85:f0:0b:b9:
         33:1d:e1:65:72:b7:5e:b3:21:7b:78:f1:fc:11:94:dc:05:ac:
         b9:d9:b7:de:3b:a7:b4:06:d7:fe:de:53:99:b8:e6:b4:c1:cd:
         05:82:2f:12:6f:2e:2b:b8:a7:fd:c3:e3:90:2c:7b:7a:48:47:
         1b:a8:36:db:62:46:0c:0f:ba:18:59:8c:a0:e2:06:fc:1a:7a:
         a3:af:7c:51:05:95:2e:cb:f4:0a:a1:af:52:43:ad:ad:6a:fb:
         b4:c4:f9:05:23:98:af:0c:76:02:72:4c:90:de:8d:09:3f:49:
         eb:65:1b:10:b5:10:25:01:1d:b7:fc:97:a2:1d:79:0b:78:85:
         32:89:a3:47:57:a5:fd:3c:72:d0:5c:96:e9:1a:ef:31:89:22:
         5f:83:52:7e:52:2e:71:4a:a5:e3:f9:e0:69:07:4e:54:3b:53:
         e3:0f:c1:8c:6c:dd:ca:73:f8:54:db:fc:d8:17:6c:67:29:45:
         d3:7c:00:b3:a9:21:0a:01:b9:32:d4:9a:9f:5c:74:01:ce:ee:
         51:c8:5b:a5:e0:86:a3:1e:c1:0d:fe:b1:6a:a5:e7:c8:7d:90:
         dd:b9:3d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:26:10 2025 by rpki-client