Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.cer
File:                     2D7667AAA3EBB72048A79335E58D7FD1F8263830.cer (raw, json)
Hash identifier:          5HgJ8/lCW9mRfZZXzxse34XLp36iPKpL9i7SekOlvio=
Subject key identifier:   2D:76:67:AA:A3:EB:B7:20:48:A7:93:35:E5:8D:7F:D1:F8:26:38:30
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2128EDD8EA38C864DFFC86ED5C1588CDE3D31825
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:52 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:52 +0000
Subordinate resources:    AS: 270485
                          IP: 24.152.68.0/22
                          IP: 2804:6cb0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:28:ed:d8:ea:38:c8:64:df:fc:86:ed:5c:15:88:cd:e3:d3:18:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:52 2025 GMT
            Not After : Mar  4 18:40:52 2026 GMT
        Subject: CN=2D7667AAA3EBB72048A79335E58D7FD1F8263830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a8:96:2e:c9:66:f3:63:34:be:84:13:28:31:
                    7f:d6:f4:22:a0:bc:5e:1d:67:8a:99:88:52:2c:d9:
                    43:22:ca:08:ec:4a:67:d8:97:64:9e:29:52:58:66:
                    b9:31:f6:54:39:74:3d:ed:b7:1a:f5:ef:46:65:cf:
                    e9:74:e2:bb:c2:06:75:71:cd:58:67:e7:10:3c:75:
                    57:0a:05:e5:02:bf:98:32:3a:8a:25:e7:83:e1:88:
                    9b:2c:d1:b9:ed:e5:36:91:4e:91:0e:57:eb:b9:3f:
                    56:a4:f1:19:7d:ea:cd:28:51:ba:91:7f:40:b5:bb:
                    68:27:56:65:20:cc:67:5f:12:1e:15:f2:20:42:d7:
                    f9:fc:70:37:82:68:30:e7:9a:2d:6f:87:87:2f:bf:
                    85:5f:06:47:57:6d:03:9e:c9:9f:f6:44:72:76:69:
                    7d:5f:79:20:11:81:e1:b3:5b:1c:78:b8:4c:b0:9f:
                    72:dd:99:67:f3:b6:9c:d0:b8:ed:b3:46:e5:cd:a8:
                    4e:61:2e:02:80:a5:90:ca:d8:14:92:6c:47:3f:da:
                    cf:a6:ac:4c:b2:e4:b3:22:43:7b:61:8a:c2:b8:4c:
                    35:bd:16:6b:20:36:10:af:68:94:99:a2:ff:de:50:
                    62:04:dc:a0:7d:0f:62:66:37:d3:bf:7c:62:e9:22:
                    34:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2D:76:67:AA:A3:EB:B7:20:48:A7:93:35:E5:8D:7F:D1:F8:26:38:30
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/1/2D7667AAA3EBB72048A79335E58D7FD1F8263830.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.68.0/22
                IPv6:
                  2804:6cb0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270485

    Signature Algorithm: sha256WithRSAEncryption
         60:9c:e6:02:a8:4c:08:aa:63:36:10:fb:68:c9:3b:74:11:37:
         fc:e8:1e:77:3a:97:b0:bd:e5:93:40:31:85:27:8e:7a:2a:66:
         44:8d:2a:d4:82:97:64:90:7d:84:12:4b:b3:99:52:2b:9f:b6:
         12:4b:13:30:0d:e2:8e:ed:e4:cb:61:46:a4:58:16:bd:fd:46:
         e7:0c:46:32:d3:a1:9e:a0:38:01:11:93:4b:f7:5b:ba:1b:bb:
         37:c5:52:54:d1:59:01:11:ca:46:72:83:03:00:ed:0a:ad:ed:
         c3:c6:57:28:0b:d0:33:e9:f8:ad:f3:b4:b5:75:41:a6:bd:19:
         c3:ea:c7:c9:7c:a9:71:73:2a:ea:5b:bf:ed:54:37:88:96:dc:
         fc:1b:16:97:d9:af:4e:05:8a:1c:95:3e:e4:f1:d2:27:10:0b:
         a3:e1:6f:c1:52:6d:38:fd:02:b3:4d:74:ab:0a:1e:af:18:a5:
         85:2d:a8:b6:62:1d:46:29:35:9a:fa:8b:34:f5:c5:cd:f3:b3:
         45:f2:0c:88:d2:2c:92:b4:13:12:a1:d1:1c:82:20:a4:9d:5e:
         f4:e6:87:df:80:23:a3:78:4d:4a:3e:06:ac:21:c6:7f:3c:fa:
         7d:bb:a4:3d:f3:cb:cc:9b:01:fa:3e:07:f5:96:b7:9c:4c:95:
         7a:05:7f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:46:21 2025 by rpki-client