Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3297FC6045B32620F4B7F6A0AABC041F270B248B.cer
File:                     3297FC6045B32620F4B7F6A0AABC041F270B248B.cer (raw, json)
Hash identifier:          fmYOJUrG708RXv+avZKxSy4pZs6K4w9MJlXmR7Bcfcc=
Subject key identifier:   32:97:FC:60:45:B3:26:20:F4:B7:F6:A0:AA:BC:04:1F:27:0B:24:8B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       49C5AB052CF0F14E1A7E2F8CB96932A77C2B3B58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/1/3297FC6045B32620F4B7F6A0AABC041F270B248B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 12:36:53 +0000
Certificate not after:    Fri 06 Mar 2026 12:41:53 +0000
Subordinate resources:    AS: 271068
                          IP: 179.48.72.0/22
                          IP: 2804:75c4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c5:ab:05:2c:f0:f1:4e:1a:7e:2f:8c:b9:69:32:a7:7c:2b:3b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 12:36:53 2025 GMT
            Not After : Mar  6 12:41:53 2026 GMT
        Subject: CN=3297FC6045B32620F4B7F6A0AABC041F270B248B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:50:8d:46:fe:8f:9f:55:a4:1f:bd:35:82:f6:
                    c3:db:30:42:2e:ed:6e:11:2d:15:d2:7b:fc:e0:b1:
                    4e:39:44:2d:6d:ac:5d:1b:0e:b9:bc:c2:dc:57:dd:
                    32:f1:b9:d1:3c:e5:cb:99:da:f4:ec:1d:33:e6:25:
                    79:af:93:47:70:05:87:32:6f:c1:06:f7:80:6f:ae:
                    27:13:2f:d5:48:3c:01:cd:a7:3a:59:7a:6a:0a:da:
                    ad:45:7c:96:ca:59:2b:c2:ec:19:fc:f9:d8:77:63:
                    f6:17:e5:02:d4:20:a5:b4:dd:b0:f6:4e:05:7a:70:
                    35:e6:1d:63:5d:7e:5f:4a:aa:12:ce:1d:66:72:ca:
                    b6:81:76:7e:ac:2d:bc:4b:25:07:a5:8f:0f:11:5b:
                    2b:19:7d:ba:75:db:da:29:8c:53:42:b0:db:43:bb:
                    c4:d8:a2:9e:b8:08:af:e8:ab:f8:d3:6d:8f:df:18:
                    ee:09:3e:00:96:3e:a1:db:c5:75:1a:29:fe:9d:20:
                    9e:c1:14:18:3d:6f:49:ba:f4:09:f5:aa:4f:2e:90:
                    bb:30:e7:36:35:d0:d1:b0:b6:0b:3b:03:7e:c8:45:
                    3f:c5:aa:ff:ca:07:ba:86:16:6a:5b:f1:0f:0c:b6:
                    a7:0d:41:35:c5:ff:80:6b:fe:c4:4b:84:c8:8c:82:
                    c4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:97:FC:60:45:B3:26:20:F4:B7:F6:A0:AA:BC:04:1F:27:0B:24:8B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/1/3297FC6045B32620F4B7F6A0AABC041F270B248B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.72.0/22
                IPv6:
                  2804:75c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271068

    Signature Algorithm: sha256WithRSAEncryption
         4d:25:4f:38:fa:9d:58:ae:f8:70:fe:34:3c:bf:fe:bc:35:67:
         c1:07:70:ef:d1:3e:c4:0d:63:a1:25:3f:db:8f:0f:ad:6c:0c:
         26:b0:8a:9d:af:2e:ae:ce:1c:a2:c1:71:1d:2f:dd:ae:d6:2f:
         6b:41:a0:ea:57:64:95:fa:ae:90:63:f5:fb:68:33:bf:8f:b9:
         77:d1:a6:3f:2d:99:75:b9:87:57:cc:35:f9:cd:33:de:8d:75:
         43:d7:93:56:9b:b8:c4:25:16:41:44:8d:8c:a2:29:54:13:15:
         9c:a9:a9:be:34:7e:1e:76:20:0a:85:12:7b:c3:9c:ed:f7:f0:
         b4:49:11:24:16:9d:c8:04:0a:b5:41:3c:03:cc:63:44:e6:8c:
         8e:52:2f:bc:5a:16:00:34:bc:9e:88:3f:87:d1:e1:df:b3:a2:
         ee:f2:96:68:fd:4a:34:84:e8:2f:ca:4c:ec:3b:a2:f1:4c:78:
         00:79:f6:9e:80:ee:45:13:9f:e4:9a:12:15:06:35:d0:70:a4:
         d8:f0:11:14:e1:eb:6a:ba:5a:d3:df:8f:be:c2:d8:91:bc:db:
         df:eb:cf:84:13:ae:81:4d:83:51:ea:86:4e:15:10:63:8c:7b:
         a2:83:61:4f:98:7e:c6:be:fe:e6:7f:80:45:60:1f:69:0d:4c:
         d0:6c:69:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:41 2025 by rpki-client