Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4084E0F3F29050E3B9AD3328DDE37980EEBACAC4.cer
File:                     4084E0F3F29050E3B9AD3328DDE37980EEBACAC4.cer (raw, json)
Hash identifier:          AGgBo9+RJoKQaP3A0kFir5UXenm+oySVcCy43oa6Wn4=
Subject key identifier:   40:84:E0:F3:F2:90:50:E3:B9:AD:33:28:DD:E3:79:80:EE:BA:CA:C4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5919FE6E960BFF33B2A1B92256BDD7F8DFEBFC7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/4084E0F3F29050E3B9AD3328DDE37980EEBACAC4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Feb 2025 12:02:35 +0000
Certificate not after:    Thu 19 Feb 2026 12:07:35 +0000
Subordinate resources:    AS: 271134
                          IP: 167.249.88.0/22
                          IP: 2804:76c8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:19:fe:6e:96:0b:ff:33:b2:a1:b9:22:56:bd:d7:f8:df:eb:fc:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 20 12:02:35 2025 GMT
            Not After : Feb 19 12:07:35 2026 GMT
        Subject: CN=4084E0F3F29050E3B9AD3328DDE37980EEBACAC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6a:e2:d1:95:8a:b8:92:90:72:83:70:6b:4e:
                    46:e2:62:7a:55:3f:c2:cc:c0:fb:e1:77:1d:aa:0c:
                    c0:5e:42:41:1d:c0:a5:80:1c:79:ad:4b:37:d0:03:
                    bf:fe:f6:ae:80:d4:82:14:6f:c9:93:d1:3c:68:f8:
                    ad:5e:69:d7:b4:22:5a:1c:51:01:80:14:af:9d:83:
                    24:a9:f5:86:84:ef:59:d5:8a:0d:14:9e:c4:c0:1e:
                    28:21:81:0b:86:db:58:b5:4e:38:70:15:b4:c9:7f:
                    d3:50:60:a3:42:b7:48:3f:44:91:7c:f3:11:5e:0d:
                    de:59:a4:51:fe:e8:c8:42:0e:69:61:27:a1:ff:9f:
                    9c:41:db:81:f9:4b:3d:6e:21:07:b9:f5:dc:0b:f8:
                    83:38:79:f6:71:51:e4:32:2d:03:ff:e5:b8:c8:d2:
                    33:89:c2:da:dc:88:49:7e:87:31:79:47:97:4c:74:
                    61:70:a5:03:00:3e:26:e5:56:e9:83:94:44:66:a5:
                    1e:42:f3:d7:b1:fd:67:5d:50:2a:32:d7:1d:5e:37:
                    90:b7:95:e4:13:03:26:21:b9:7b:a3:24:dd:3c:64:
                    e2:d9:24:77:cb:c8:59:ff:a9:b1:62:aa:25:ff:83:
                    88:9b:f0:14:11:d1:a7:48:f7:c7:b6:a0:66:31:2e:
                    f4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                40:84:E0:F3:F2:90:50:E3:B9:AD:33:28:DD:E3:79:80:EE:BA:CA:C4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BhU3QhMatjWXAo2XE3U93zLSGHGcBEGZrrd617gMap4z/0/4084E0F3F29050E3B9AD3328DDE37980EEBACAC4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.88.0/22
                IPv6:
                  2804:76c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271134

    Signature Algorithm: sha256WithRSAEncryption
         69:23:0b:9d:17:fa:a9:36:02:cd:35:98:bb:ca:9c:98:0b:0a:
         c1:98:31:9e:eb:0b:84:41:e1:a1:5f:8d:15:e0:27:3d:88:2f:
         73:1c:a6:e8:c6:94:17:3a:83:ce:2a:f5:1f:d8:a7:23:c2:0d:
         44:dd:ca:9e:2b:9e:9b:95:78:ab:87:5d:bc:5d:74:35:bf:99:
         78:d5:2e:36:09:52:31:19:8d:f0:37:90:cd:16:4a:14:b8:05:
         0e:48:be:2f:1c:9e:49:66:e4:53:b0:12:2b:ed:b0:83:02:39:
         59:53:c4:a7:96:04:fa:f7:5c:61:a5:aa:2c:0b:46:8f:d6:27:
         e2:2a:3d:d1:2d:60:60:48:b4:c6:59:5f:13:01:f0:6f:90:93:
         8b:71:72:ad:50:8a:53:83:4f:9c:21:59:b0:48:bc:a1:d3:52:
         92:4a:a9:a3:02:7d:66:9f:b9:e4:0b:a1:c3:6c:fd:78:df:df:
         c7:ee:a1:7f:5c:02:f6:6e:ec:fa:43:2c:e8:ac:97:dd:6e:c8:
         06:0e:6a:e6:d0:ba:3d:b9:6a:2a:cc:ee:98:e7:80:2b:d6:57:
         c5:bc:dd:62:4b:b2:0d:de:c4:c0:8d:74:b2:5c:2b:2a:e2:3b:
         07:ac:08:fa:34:31:be:60:74:0c:fa:2f:75:7f:f9:31:60:c4:
         0c:e1:62:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:42:45 2025 by rpki-client