Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.cer
File:                     275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.cer (raw, json)
Hash identifier:          Yg1c2jQvLZed8qULt4vPyopq0IQNQzQ3JiSjXcsokcs=
Subject key identifier:   27:5D:9E:0F:3E:6B:B4:0B:BC:90:C8:BA:26:99:DD:6A:35:6D:A2:AE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       615EB5669DCF5B18674F178912F14CE619454470
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 07:55:21 +0000
Certificate not after:    Thu 05 Mar 2026 08:00:21 +0000
Subordinate resources:    AS: 270735
                          IP: 177.221.142.0/23
                          IP: 2804:7094::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:5e:b5:66:9d:cf:5b:18:67:4f:17:89:12:f1:4c:e6:19:45:44:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 07:55:21 2025 GMT
            Not After : Mar  5 08:00:21 2026 GMT
        Subject: CN=275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f9:d4:49:ee:eb:b9:ed:ad:c7:2f:20:9c:9a:
                    22:65:ed:dd:49:53:f2:d8:ef:58:97:0f:9e:a6:6f:
                    e3:5c:be:22:e0:fe:76:0c:0b:8d:f7:9c:b8:48:51:
                    65:36:27:dc:e8:8d:d4:dc:51:af:8d:9b:10:e9:2c:
                    11:95:b3:19:8f:5d:64:47:9e:33:ba:2d:3c:e4:17:
                    aa:20:94:8f:8f:f2:eb:70:13:60:df:67:44:5b:3f:
                    ae:12:aa:23:8a:bd:56:8c:38:52:8c:be:f7:24:14:
                    1a:d3:a1:3c:99:57:e3:35:d2:7e:01:ae:cd:94:e8:
                    3d:4a:ee:55:52:81:51:58:c4:c2:01:24:2e:d6:5a:
                    80:92:7d:2e:39:9d:03:03:82:62:58:75:b7:62:f3:
                    02:bc:d4:23:c4:e8:ce:8b:99:2a:d1:7a:34:0b:e5:
                    4f:c5:83:7c:7d:6a:45:70:6a:67:4e:d7:94:fb:82:
                    1a:30:7f:f4:57:0d:db:f2:9e:b1:8b:11:5e:20:b3:
                    d8:f5:90:25:4a:7a:86:a3:16:b1:d3:43:ed:b6:d0:
                    16:51:e4:e9:06:e3:3b:84:24:b4:46:45:d8:4c:61:
                    c7:6f:53:01:1e:37:e5:fb:2f:1c:77:1c:aa:b9:4a:
                    6f:78:33:7c:bd:1a:f5:cc:07:ce:15:6a:7e:1f:10:
                    74:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:5D:9E:0F:3E:6B:B4:0B:BC:90:C8:BA:26:99:DD:6A:35:6D:A2:AE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4C3CXQrKysED9AhZm2zPwGVU1yHKZaVveVUdr3DygncR/2/275D9E0F3E6BB40BBC90C8BA2699DD6A356DA2AE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.221.142.0/23
                IPv6:
                  2804:7094::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270735

    Signature Algorithm: sha256WithRSAEncryption
         c5:e2:f8:96:e1:48:fe:f2:6a:7a:1a:97:db:5e:4b:da:d9:9a:
         aa:11:ee:73:38:49:62:9c:f7:5f:79:80:23:4f:fa:ff:65:f0:
         95:0e:0a:5c:3e:3b:9f:c8:18:55:2e:4c:78:b4:ac:24:f5:a1:
         37:b5:12:59:b3:de:50:4f:36:49:4e:87:f1:74:0e:1f:6b:c8:
         02:bc:31:cb:db:83:88:e1:42:b6:cb:de:ed:5f:58:77:7d:62:
         cd:fc:be:f9:7b:08:29:f5:03:2c:f9:4f:54:48:f5:f6:85:7b:
         0c:5c:05:ad:34:70:79:7a:2b:d2:4a:89:8d:2c:bf:0e:a4:da:
         99:8d:6b:58:32:da:bc:ed:3e:11:16:28:d2:d1:19:0b:c9:15:
         58:4d:38:04:b7:57:87:9a:9c:09:21:72:a1:cf:1f:cd:98:a9:
         77:be:81:de:65:74:df:72:3d:42:a5:24:e7:dc:8d:f7:05:ea:
         9d:90:4b:bc:4c:82:c0:a9:e3:a4:5f:19:b6:a6:e8:87:ac:46:
         83:b9:2e:94:48:5d:9c:98:22:0c:2a:8e:ea:3d:fd:30:e0:26:
         ba:20:bf:71:bf:67:82:a3:95:9a:81:36:c3:fa:0d:dc:3c:8a:
         71:06:11:d7:18:7b:86:37:e6:5d:3d:0d:42:bb:07:b1:80:0d:
         0a:1a:58:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:49:55 2025 by rpki-client