Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.cer
File:                     37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.cer (raw, json)
Hash identifier:          1KHQ1XwAoCbG2N2SkyMXKGgM/4u4Y0dQRmHSTCg0H9Q=
Subject key identifier:   37:B0:CE:78:D8:38:B2:0B:91:5D:43:A1:A6:B7:F4:8D:3A:B1:B2:A3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0FF5D45FF1B3A1853FFC8582DE55BA9AAA9FD7F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 00:00:17 +0000
Certificate not after:    Fri 06 Mar 2026 00:05:17 +0000
Subordinate resources:    AS: 264434
                          IP: 131.221.160.0/22
                          IP: 2804:1e88::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f5:d4:5f:f1:b3:a1:85:3f:fc:85:82:de:55:ba:9a:aa:9f:d7:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 00:00:17 2025 GMT
            Not After : Mar  6 00:05:17 2026 GMT
        Subject: CN=37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f6:a0:70:b0:28:2b:8b:07:41:6a:16:65:d7:
                    dc:36:a8:4d:ae:9f:67:cc:35:fa:60:cd:36:02:e1:
                    dd:70:f8:f5:1a:13:3a:51:96:38:86:76:b1:c3:23:
                    44:03:19:9a:a5:26:e0:56:fa:d1:0a:92:5d:ed:92:
                    2a:08:19:63:94:21:3a:c3:54:91:cb:ee:00:fb:be:
                    73:2c:eb:50:0b:53:b6:c1:d9:2d:1f:b6:c9:78:8d:
                    3f:a0:81:b3:48:55:2b:e7:2c:2b:18:75:4c:87:f2:
                    db:74:0a:9b:4b:d2:a9:0c:18:d2:c6:a4:fb:90:c5:
                    5e:f2:c5:d1:6a:00:3c:41:5b:b6:ec:18:5f:78:63:
                    87:58:bd:9c:2d:0e:df:cc:e2:96:79:2e:df:af:7c:
                    c2:22:c3:b1:05:20:d4:cf:6c:73:38:43:4a:80:01:
                    79:33:20:9b:30:cf:70:db:3d:c7:f1:e1:d9:0a:95:
                    88:72:11:75:f4:93:61:62:a5:05:82:c0:72:7b:a4:
                    d3:d4:cc:57:ec:56:db:e1:d6:ce:e3:23:9e:77:04:
                    e3:d5:f4:89:92:f3:32:50:86:59:d9:c5:3b:c9:10:
                    4d:a6:71:f5:78:d6:cc:6a:ca:8d:7a:0e:f8:dd:8f:
                    bf:f5:3a:d6:f1:4e:62:1b:c9:fb:ad:9c:5f:07:54:
                    2b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                37:B0:CE:78:D8:38:B2:0B:91:5D:43:A1:A6:B7:F4:8D:3A:B1:B2:A3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/1/37B0CE78D838B20B915D43A1A6B7F48D3AB1B2A3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.160.0/22
                IPv6:
                  2804:1e88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264434

    Signature Algorithm: sha256WithRSAEncryption
         37:1c:5d:99:61:fe:70:f1:ef:47:f5:24:ca:6b:7d:10:16:f5:
         86:b5:6f:a0:90:5a:fe:0b:d9:d9:3e:6e:81:8e:e1:a8:85:6e:
         5c:c7:87:51:6d:3e:49:19:d1:f8:59:14:21:9d:9d:ae:2f:8e:
         a4:9f:da:7c:be:59:f5:08:c3:c2:dd:28:cc:71:87:79:49:2a:
         13:57:ae:a5:04:6e:a2:89:55:f3:d7:83:4a:e7:41:f4:d0:39:
         a9:17:2d:26:3d:70:73:51:2d:c5:f2:ff:0b:e6:4e:df:08:b0:
         20:ad:a4:8b:62:d8:91:7a:29:c0:85:c8:f1:7d:ca:bd:35:f2:
         c4:fa:58:cc:f0:a0:59:0c:7b:63:1c:e4:b3:45:d8:b6:9b:0f:
         9a:22:59:e1:6b:36:e9:16:7a:b4:6b:23:87:ef:98:6e:8f:ad:
         ee:34:f3:c8:dc:ad:72:df:b2:19:bc:5d:b6:c0:32:50:2e:a2:
         23:46:36:12:91:0b:15:16:90:b5:7d:cc:e8:7d:e2:07:88:8b:
         52:f2:8b:1e:d1:d0:3a:fe:49:69:3d:c5:f2:e6:ed:ed:40:70:
         07:df:4e:04:8b:25:39:b7:79:ca:dc:b9:80:a2:fe:3a:0a:1f:
         b8:29:43:d3:81:da:60:1e:ed:f8:c2:0e:e1:b6:e2:35:79:f2:
         6d:9e:49:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:02:32 2025 by rpki-client