Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer
File:                     425279A675F326D0577BF774BBB20A14508381AD.cer (raw, json)
Hash identifier:          Y0010iv5BhHnsMHHfpz5QI/nTX4xRvxUdji38vzW9uc=
Subject key identifier:   42:52:79:A6:75:F3:26:D0:57:7B:F7:74:BB:B2:0A:14:50:83:81:AD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       11B10E05114185AA789C86E69A460DF920E26048
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Mar 2025 01:54:57 +0000
Certificate not after:    Tue 24 Mar 2026 01:59:57 +0000
Subordinate resources:    AS: 28326
                          IP: 189.50.40.0 -- 189.50.51.255
                          IP: 2804:88e0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b1:0e:05:11:41:85:aa:78:9c:86:e6:9a:46:0d:f9:20:e2:60:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 25 01:54:57 2025 GMT
            Not After : Mar 24 01:59:57 2026 GMT
        Subject: CN=425279A675F326D0577BF774BBB20A14508381AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:5b:38:e5:40:70:ce:ba:d8:eb:cc:95:30:
                    4f:c3:fb:eb:30:47:f0:ef:a2:6f:cc:6f:65:a6:c8:
                    ef:83:a6:75:a8:a4:06:b4:13:ac:07:96:47:5c:ee:
                    48:e7:32:9c:9a:84:35:15:cc:4f:c0:3a:38:56:78:
                    ff:5f:a5:02:5d:0b:af:0a:e2:cd:73:8c:bd:8a:39:
                    4d:2a:58:43:24:5e:a7:a4:a7:73:b6:f5:98:cd:3a:
                    cb:87:62:04:92:12:9a:d0:e3:6e:bb:be:de:1e:ec:
                    e9:1d:e1:d8:f5:6e:bb:50:19:94:b6:4d:47:5e:ac:
                    e5:58:77:bb:89:e7:a5:89:70:a3:73:b3:bc:d0:94:
                    32:08:7e:d8:e2:ed:83:31:de:94:ab:4e:f0:e3:25:
                    f6:39:71:4e:ea:93:f9:81:41:b4:9b:ee:72:30:57:
                    8f:d9:b9:a2:3f:b6:21:b1:ce:59:ab:78:9c:79:8d:
                    eb:d5:65:be:b9:c3:52:dc:d9:82:db:af:5e:56:b6:
                    86:c2:24:c1:a6:86:0c:f5:de:b5:e4:2c:8e:78:d8:
                    fb:5d:89:2b:60:c3:ca:ac:c3:e2:13:30:ac:07:25:
                    2a:a1:0a:83:54:97:fe:7d:13:6a:b1:1a:8d:ee:9f:
                    e1:23:1a:77:3b:d0:f3:61:db:f4:df:11:d8:1a:5d:
                    18:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:52:79:A6:75:F3:26:D0:57:7B:F7:74:BB:B2:0A:14:50:83:81:AD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.40.0-189.50.51.255
                IPv6:
                  2804:88e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28326

    Signature Algorithm: sha256WithRSAEncryption
         da:cd:df:c5:7b:92:d6:34:e4:c9:38:f2:93:9a:56:dd:a1:0a:
         77:91:a4:02:ac:e0:d7:b1:30:b2:4c:0a:0f:52:76:ec:26:54:
         ed:f1:80:f3:fa:93:1a:fb:2b:f1:6c:23:b0:60:d7:1f:b0:20:
         dc:50:37:21:33:d6:8c:2f:cb:04:78:fe:90:34:51:9f:ce:91:
         8d:e8:5d:b2:5e:63:bc:0f:d8:65:c9:49:40:90:13:81:2f:b8:
         e0:a7:f5:2d:0c:9f:7b:49:d4:bc:4d:5d:31:b0:1d:34:1d:6e:
         a7:8d:e8:be:a7:3f:6b:e5:74:c8:56:a8:3d:45:87:a1:63:7c:
         5f:a0:32:4e:1d:32:3f:39:ab:ab:fe:a5:52:93:e5:b3:8b:87:
         75:cf:cb:33:10:23:f1:20:6f:85:96:e4:18:f4:df:1a:d0:e4:
         06:ce:df:01:b9:de:29:1b:4f:90:78:7a:63:64:b1:d6:be:0c:
         18:db:46:b3:37:6b:0e:49:0e:95:f6:e9:15:e1:a3:3d:f4:a0:
         de:99:ad:79:7b:6b:e3:f1:fc:2e:21:7a:3c:9a:1a:8c:14:35:
         87:c2:12:65:90:2f:56:ad:ae:54:f7:7e:f2:1b:93:1c:7b:9e:
         67:91:b1:45:12:c0:ff:cd:d4:27:df:14:2f:c4:0f:e6:66:b9:
         92:88:b5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:15 2025 by rpki-client