Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.cer
File:                     3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.cer (raw, json)
Hash identifier:          iiDjNzZNKxb/A2Y4Xk4bwBf3XxXFns2LTTwMayVz3LI=
Subject key identifier:   3C:DA:75:DF:96:53:EF:9B:B2:72:2B:11:00:D0:D2:76:43:CB:DD:9A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       179E4932E14F156CF354EBFFEB352D46923A8E8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Mar 2025 15:24:50 +0000
Certificate not after:    Fri 20 Mar 2026 15:29:50 +0000
Subordinate resources:    AS: 264278
                          IP: 138.121.48.0/22
                          IP: 2804:2564::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9e:49:32:e1:4f:15:6c:f3:54:eb:ff:eb:35:2d:46:92:3a:8e:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 21 15:24:50 2025 GMT
            Not After : Mar 20 15:29:50 2026 GMT
        Subject: CN=3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:58:7c:91:57:48:5a:a5:32:09:95:ab:40:7d:
                    28:26:31:8a:e9:82:a3:87:b2:1d:b5:33:4f:16:06:
                    5e:1e:b1:bd:cd:74:90:f6:ca:41:79:11:43:78:50:
                    39:c7:1f:0a:f9:15:f3:2b:90:14:da:38:b4:d9:6f:
                    ad:87:ba:19:d1:ad:16:0f:26:ef:7d:9e:16:f8:16:
                    3a:82:99:ca:c4:b3:2f:9a:dc:08:2a:b8:e0:21:cc:
                    2e:11:5b:9f:ef:9b:20:84:a4:0f:f1:6d:fc:5d:01:
                    da:89:c7:1d:5b:d2:e6:b7:7e:4a:f1:18:d4:26:74:
                    8a:c8:1c:08:e5:a0:81:1d:36:f6:e0:a9:d3:47:11:
                    59:0a:33:05:c5:80:4c:89:28:2c:76:48:2d:ce:29:
                    74:17:07:66:19:46:52:38:dd:8c:81:95:f5:d0:73:
                    84:42:95:11:7f:1c:cf:23:75:6e:ea:0d:4e:1d:fc:
                    bd:0f:72:58:cd:65:f3:b0:7c:d1:c0:e7:08:ea:39:
                    03:2b:84:4c:f6:37:ac:45:77:37:fc:6f:f5:10:03:
                    6b:10:46:07:13:bb:2c:11:58:a4:10:b6:3b:ea:f9:
                    e1:08:e9:5a:8c:c9:c9:c0:c7:e9:f1:b1:39:90:dc:
                    6c:21:cc:45:11:f1:0a:07:81:30:84:b3:b3:e4:82:
                    2e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:DA:75:DF:96:53:EF:9B:B2:72:2B:11:00:D0:D2:76:43:CB:DD:9A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/3CDA75DF9653EF9BB2722B1100D0D27643CBDD9A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.48.0/22
                IPv6:
                  2804:2564::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264278

    Signature Algorithm: sha256WithRSAEncryption
         0a:8d:6c:15:04:7c:ad:3c:78:68:6f:1f:54:be:95:69:e5:1c:
         cd:12:51:50:f4:a4:68:35:96:96:f5:6b:71:25:7d:c2:36:12:
         11:22:e9:29:c3:55:da:d5:fd:2f:18:c2:a4:f1:81:92:78:24:
         f7:7d:8f:a4:a5:24:2b:ae:37:3a:41:27:8d:88:db:33:89:1f:
         c2:54:f0:fa:f5:8e:65:ff:8a:1f:d3:8b:9b:61:15:3c:be:bb:
         08:09:1f:9c:1c:88:05:d3:12:6b:db:f7:92:ba:9a:32:60:f8:
         22:71:c1:85:24:6d:13:3e:b0:a0:fa:22:27:2a:95:ec:e6:b8:
         72:a0:f9:f3:bc:1d:4b:54:3d:a6:bf:ec:8e:53:a5:70:e4:17:
         d2:8f:40:9b:3b:90:47:2a:fd:62:ef:ba:57:57:49:18:d4:3f:
         ed:60:10:fc:64:02:a7:3c:8b:6c:5b:57:e7:ee:f8:4d:6c:a6:
         94:27:ea:82:e7:60:e1:13:42:d5:69:aa:5a:1a:dc:85:6e:2b:
         3f:18:da:4c:19:c8:0f:89:3a:16:6d:00:47:ea:1c:4c:9c:e1:
         de:95:d4:8e:63:32:2c:cf:7b:84:c0:03:fd:2f:1d:80:e2:a1:
         72:ff:ca:4e:05:d0:18:e9:2d:25:84:4c:7d:a7:9a:14:41:28:
         05:96:cb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:00 2025 by rpki-client