Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/25089DCD3744CF5779120D2EC9DF3677EBC48A03.cer
File:                     25089DCD3744CF5779120D2EC9DF3677EBC48A03.cer (raw, json)
Hash identifier:          /RaQTsb3pCKiQhzW2HtQx4AfzVtFHXUPOiKW1t2ShgQ=
Subject key identifier:   25:08:9D:CD:37:44:CF:57:79:12:0D:2E:C9:DF:36:77:EB:C4:8A:03
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       422242F70877BFE001FB232E1DF6E519600E69EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/25089DCD3744CF5779120D2EC9DF3677EBC48A03.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 Dec 2024 11:41:33 +0000
Certificate not after:    Mon 29 Dec 2025 11:46:33 +0000
Subordinate resources:    AS: 266002
                          IP: 181.191.92.0/22
                          IP: 2804:4114::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:22:42:f7:08:77:bf:e0:01:fb:23:2e:1d:f6:e5:19:60:0e:69:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 30 11:41:33 2024 GMT
            Not After : Dec 29 11:46:33 2025 GMT
        Subject: CN=25089DCD3744CF5779120D2EC9DF3677EBC48A03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4d:aa:dc:bc:96:33:53:ad:e9:bb:3e:fe:73:
                    55:b2:cc:be:00:e8:e4:44:c7:4d:b3:e1:e4:7b:58:
                    fc:99:0f:c9:94:85:7d:68:fe:b2:11:35:cc:c9:2b:
                    e7:92:b0:1a:0c:93:6b:c5:5a:89:3e:09:91:e4:58:
                    1e:6d:cf:a9:f1:3c:7e:01:15:cf:fa:29:f6:49:58:
                    09:d7:d3:e4:3f:0a:db:70:c9:14:f4:a8:99:01:ef:
                    60:20:ce:d6:a0:13:e9:14:b4:42:b3:89:7b:40:8a:
                    2a:2e:8e:4d:bd:7d:8f:40:73:a1:0f:fe:bf:78:c7:
                    6f:c1:17:0a:75:3f:2e:46:e6:a9:11:24:de:cc:ae:
                    f5:3e:d6:6c:be:93:08:e9:56:4c:01:7b:21:16:7a:
                    e5:59:4d:50:33:a8:f6:ac:7b:ba:95:35:41:b6:c0:
                    81:b8:a9:0d:65:24:4c:ca:44:37:e9:67:d4:4f:49:
                    45:07:2a:52:71:31:da:64:8c:a8:e9:b6:43:f2:16:
                    2b:97:b8:a4:cc:c5:94:ba:c7:3f:78:c5:58:6e:5f:
                    4b:87:fd:a2:0a:a3:66:cb:41:d0:cf:9a:6a:43:06:
                    d8:23:32:1a:58:e4:e6:71:88:8f:eb:93:98:cf:77:
                    a3:a1:bb:bf:28:9e:94:9a:48:0f:b4:74:40:2c:14:
                    65:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:08:9D:CD:37:44:CF:57:79:12:0D:2E:C9:DF:36:77:EB:C4:8A:03
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/25089DCD3744CF5779120D2EC9DF3677EBC48A03.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.92.0/22
                IPv6:
                  2804:4114::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266002

    Signature Algorithm: sha256WithRSAEncryption
         23:d7:2b:85:e1:e4:dd:68:1b:79:4d:5c:b7:af:b1:75:c9:c2:
         46:32:06:40:78:a4:ff:02:b1:29:82:a7:ed:98:9f:29:c2:2d:
         16:79:2c:e1:6c:17:85:eb:52:ce:93:4a:73:e2:70:6d:70:4e:
         74:48:42:28:65:b7:f2:a9:0f:62:67:09:21:66:dd:ea:73:1c:
         c1:03:43:db:6b:6a:09:34:da:15:10:3f:3c:d8:6e:4f:b9:3c:
         10:9e:74:e2:92:80:6a:b6:62:6f:0a:c9:96:5a:04:10:69:f5:
         4e:fa:a4:8d:0f:5f:3b:2a:0e:68:a1:dc:7c:d3:73:c0:6e:bf:
         39:fa:90:51:f9:10:4d:1c:1c:f2:ec:4b:40:58:ac:98:77:42:
         6a:6c:01:00:46:18:04:cd:ad:a6:44:eb:b3:15:3b:3c:1a:42:
         87:37:ca:f7:4d:6c:c7:95:6b:2c:f4:a8:44:7e:7d:a7:f7:54:
         6b:81:ea:c2:72:87:97:9f:a7:df:e9:36:d9:b4:5a:55:73:b5:
         bb:8c:75:b4:41:30:ed:22:87:9d:97:d7:35:80:e9:e2:ff:b9:
         8a:db:7c:d2:e7:7a:e3:ef:4a:3f:49:5b:ef:a4:cd:0e:6b:f7:
         18:aa:47:a6:c2:b3:f7:d3:90:89:d1:48:49:3f:3f:1b:51:59:
         59:7e:9c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:57:24 2025 by rpki-client