Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer
File:                     446D4F390AB834CB395232A0680D14394BE75FCC.cer (raw, json)
Hash identifier:          wfBqG+UxfC+HYgKj1Medr1xNRh87d4goRnUTD/3JIoM=
Subject key identifier:   44:6D:4F:39:0A:B8:34:CB:39:52:32:A0:68:0D:14:39:4B:E7:5F:CC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3DBC598D18FCE5787C702269C84AF98C34319C5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 08:21:11 +0000
Certificate not after:    Fri 06 Mar 2026 08:26:11 +0000
Subordinate resources:    AS: 269355
                          IP: 45.185.4.0/22
                          IP: 2804:6358::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:bc:59:8d:18:fc:e5:78:7c:70:22:69:c8:4a:f9:8c:34:31:9c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 08:21:11 2025 GMT
            Not After : Mar  6 08:26:11 2026 GMT
        Subject: CN=446D4F390AB834CB395232A0680D14394BE75FCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c5:e1:7b:97:2f:24:5a:7e:69:fd:13:9e:1d:
                    d9:c1:c1:8e:23:10:dc:91:0e:02:c2:cb:0a:27:64:
                    f2:9a:b6:6d:58:11:11:86:7e:b5:2c:08:56:62:8b:
                    3a:09:6f:2a:86:d4:8b:ba:9d:61:a8:0f:c3:7d:84:
                    2a:19:d4:47:fe:74:0c:44:6a:11:a6:4c:13:32:9b:
                    c0:26:f4:74:22:ae:f7:fc:02:dd:ff:f3:6c:6a:99:
                    b6:fb:2a:d4:87:c8:2f:c1:d6:7e:3d:a2:4c:45:63:
                    12:4e:aa:c4:3a:38:7f:6e:f2:8f:05:a3:77:e4:bc:
                    bb:5f:cf:65:04:2c:dd:91:f4:21:5b:a2:c7:2a:f1:
                    c1:e4:70:9f:a2:b1:9e:32:d2:0a:3b:8a:8c:e0:02:
                    a3:a9:97:5e:b3:f4:84:bb:8e:8b:f9:7f:06:28:4f:
                    c9:63:2c:66:89:17:27:3f:1c:c9:78:4e:21:86:dc:
                    a9:99:6f:16:81:7c:fe:d3:c4:09:13:5e:56:a1:ff:
                    95:ab:11:01:df:8e:59:98:83:d3:6d:c2:f3:1c:c3:
                    4e:bc:80:40:c8:37:77:68:b0:ba:72:5f:31:6c:aa:
                    c4:99:ae:54:36:c2:d8:d2:5d:90:83:20:d1:a0:c3:
                    a2:6f:b4:76:b8:34:3b:29:2b:09:f5:8b:d4:1a:58:
                    38:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:6D:4F:39:0A:B8:34:CB:39:52:32:A0:68:0D:14:39:4B:E7:5F:CC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.4.0/22
                IPv6:
                  2804:6358::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269355

    Signature Algorithm: sha256WithRSAEncryption
         7b:71:e7:46:3e:7b:4c:1a:ba:ac:4a:14:af:dd:66:81:51:71:
         a5:7e:2e:24:3e:1e:aa:fe:5e:06:02:2a:92:52:9f:9f:32:c2:
         30:b1:a6:79:9d:49:db:55:8b:98:2f:ca:09:80:53:41:c1:0e:
         9d:a4:d4:2c:53:0e:5e:fc:bb:3a:46:90:20:be:cd:30:f9:2f:
         a7:34:3b:a2:cc:25:dd:b4:85:d5:08:97:d3:f9:7f:3d:6f:a7:
         6f:90:e4:2b:83:c4:6d:86:ba:0c:12:ed:b0:ec:70:e4:e3:b2:
         c5:48:ac:89:98:65:3b:c1:28:13:36:e9:61:40:44:02:c2:9d:
         14:88:55:c3:29:8b:6b:81:80:67:7e:91:09:4a:33:17:c8:b6:
         73:74:18:d0:10:f7:56:3b:26:bc:bc:2f:cf:fc:50:57:72:e8:
         da:53:39:4a:80:95:ed:aa:07:ab:04:01:d5:c5:7b:2b:85:9a:
         74:16:1c:c5:06:e2:d2:6b:f7:55:86:1b:71:c7:9e:1e:b2:16:
         68:51:ea:9b:d5:f5:97:29:26:bc:50:00:ce:b1:ec:27:83:14:
         f1:87:7a:6c:4a:73:e8:51:3a:e2:73:d2:aa:94:ec:a8:ab:fd:
         1b:25:0f:f2:35:8f:f3:01:38:2b:38:d4:d0:7d:be:d0:a3:78:
         f3:16:1f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:00 2025 by rpki-client