Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
File:                     3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer (raw, json)
Hash identifier:          2dbsXQzveUI22+dFYHG9v8+dPc+J4KIlSOvoQF49ZQ8=
Subject key identifier:   3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       631932061E386843E531429B95CA2643CDE435A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 09:54:09 +0000
Certificate not after:    Fri 06 Mar 2026 09:59:09 +0000
Subordinate resources:    AS: 267174
                          IP: 45.230.92.0/22
                          IP: 2804:4944::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:19:32:06:1e:38:68:43:e5:31:42:9b:95:ca:26:43:cd:e4:35:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 09:54:09 2025 GMT
            Not After : Mar  6 09:59:09 2026 GMT
        Subject: CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:49:62:5f:4a:f9:b8:74:46:2c:74:01:4f:16:
                    6e:42:f5:b9:86:b1:64:86:87:60:bd:e7:84:2a:03:
                    64:13:75:54:02:0a:f3:f8:8d:c4:88:fb:5a:73:a7:
                    95:d0:c3:4d:25:e1:66:8f:18:cc:17:90:a5:77:aa:
                    2c:a1:b7:84:cd:4b:ec:4d:7f:f3:04:ab:62:f9:c1:
                    c8:ee:11:55:a5:ae:c4:60:92:a4:3e:61:d3:7f:b1:
                    ad:19:0c:47:2e:c9:86:21:61:99:fc:b6:ab:87:30:
                    8b:1f:4d:53:cc:d6:df:1f:d2:04:d1:7a:c9:7e:f4:
                    cf:29:59:d5:c5:1e:05:eb:ef:00:7d:75:b1:6d:0f:
                    19:2f:cb:72:3c:01:57:d6:72:53:be:93:c4:49:b6:
                    09:58:9e:1d:6b:07:84:71:14:cd:b1:93:d8:cb:49:
                    1c:46:24:17:da:57:f2:2b:a8:8f:f0:9f:20:75:cf:
                    bc:1f:17:17:03:cf:0c:14:b2:9d:da:3b:94:cc:5b:
                    a8:08:1d:00:3e:b6:f7:c9:b1:57:f0:f9:2e:33:51:
                    91:33:53:76:6b:64:da:74:64:7c:f2:ee:5e:80:aa:
                    b3:25:4a:f9:b8:73:bf:37:32:db:cc:dd:92:ad:8e:
                    bd:cd:03:d5:07:d3:e5:cf:2f:1f:30:3b:fa:3f:66:
                    6a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.92.0/22
                IPv6:
                  2804:4944::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267174

    Signature Algorithm: sha256WithRSAEncryption
         19:29:fd:21:bf:3e:af:aa:7e:3b:78:ab:c9:39:97:d1:e2:7a:
         41:58:81:db:a3:1a:3a:33:66:d2:d2:a9:b0:26:86:0e:dc:c1:
         8f:08:30:fc:32:00:50:be:20:8d:94:b8:ae:94:0b:c5:c1:df:
         02:28:85:94:ec:a4:51:8b:36:23:2a:de:20:bd:a4:bf:4f:af:
         94:dc:7e:ea:7c:bd:79:99:b5:cc:2c:62:9d:ce:76:22:b4:2c:
         d2:b1:61:30:be:97:e5:4f:12:72:e6:a4:02:0e:50:96:3e:ba:
         7f:04:c5:40:24:26:36:34:aa:75:44:9e:8c:a4:c2:84:e3:fc:
         a6:18:a9:ba:e9:7f:b8:46:67:16:ed:d3:7d:23:3c:b7:2a:08:
         22:de:30:75:eb:41:f9:b1:d8:44:fb:a7:36:d4:1c:52:5b:e4:
         a0:8d:c0:a5:51:8d:1f:37:fc:5c:5b:63:a5:b2:e7:7f:51:de:
         f7:de:ac:35:c6:b0:21:51:c3:61:97:47:f8:ad:1b:8c:58:d9:
         37:76:25:6d:9b:0d:59:2f:8f:85:6c:4b:7c:36:d0:39:dc:94:
         5f:70:e2:37:c9:57:5a:65:f1:5f:55:c8:b2:03:89:35:56:13:
         58:fc:5c:de:48:d8:2a:3c:b8:b7:d7:25:85:6c:6b:8a:08:42:
         86:f1:96:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:44:28 2025 by rpki-client