Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/44C0DA9572BD779420F65A901B1FA51E6E3E6B5D.cer
File:                     44C0DA9572BD779420F65A901B1FA51E6E3E6B5D.cer (raw, json)
Hash identifier:          mtILM9jqeA37Mh9ok86Tbj08NIJeJLbaeYA1hTy9Ahs=
Subject key identifier:   44:C0:DA:95:72:BD:77:94:20:F6:5A:90:1B:1F:A5:1E:6E:3E:6B:5D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       23DF7B620A57C3506C190B038F4B38D896B4F259
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/44C0DA9572BD779420F65A901B1FA51E6E3E6B5D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Feb 2025 00:34:07 +0000
Certificate not after:    Thu 26 Feb 2026 00:39:07 +0000
Subordinate resources:    AS: 271744
                          IP: 200.150.244.0/22
                          IP: 2804:8054::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:df:7b:62:0a:57:c3:50:6c:19:0b:03:8f:4b:38:d8:96:b4:f2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 27 00:34:07 2025 GMT
            Not After : Feb 26 00:39:07 2026 GMT
        Subject: CN=44C0DA9572BD779420F65A901B1FA51E6E3E6B5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9d:bb:45:04:91:88:1e:c7:c1:37:c2:90:13:
                    df:f5:9d:1b:13:c0:51:90:4b:23:46:62:42:8a:f6:
                    5c:7b:aa:24:17:5d:45:0d:fc:be:5d:38:62:90:03:
                    83:35:1e:d1:99:ff:72:56:53:5c:b2:b9:5d:e4:1b:
                    fb:98:8b:5d:1a:2c:31:73:91:2d:aa:70:c7:49:2f:
                    65:f1:36:93:c5:dc:f8:9b:61:36:25:18:f1:94:6f:
                    6c:5a:f4:b5:f3:cf:1c:f9:37:0e:37:6c:2e:36:2c:
                    fe:80:4e:de:2b:67:de:86:d5:54:2d:76:fe:e4:78:
                    ae:ac:ba:15:1b:6f:d2:18:4f:f8:a8:c3:30:55:aa:
                    ca:0a:40:b4:8c:bb:be:12:23:b4:0d:49:0a:bd:23:
                    88:b2:ee:20:56:5b:62:87:c6:1b:17:4b:7a:41:f2:
                    98:d5:2c:a4:46:b9:53:8e:c2:d7:35:08:b8:c6:d6:
                    f0:73:22:d7:a5:cf:36:dd:51:78:25:4a:49:de:4e:
                    1b:ee:f3:f9:4f:f7:5d:be:5c:cc:c4:c0:4a:be:17:
                    8c:ea:25:f3:ad:1e:e5:10:a5:a2:2d:c5:4b:6f:21:
                    ad:d3:03:9e:4b:f3:05:b2:3c:08:15:f3:96:86:26:
                    ad:c2:a5:1e:a8:5c:0c:42:1f:34:10:e7:59:80:7c:
                    6f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:C0:DA:95:72:BD:77:94:20:F6:5A:90:1B:1F:A5:1E:6E:3E:6B:5D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GadaWWgHpp2WL5T2SQNbLx9jnzQ1f5z6EgrKNerFtXQC/0/44C0DA9572BD779420F65A901B1FA51E6E3E6B5D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.244.0/22
                IPv6:
                  2804:8054::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271744

    Signature Algorithm: sha256WithRSAEncryption
         7d:e0:cd:30:03:2a:b9:08:ce:0c:45:12:e8:e8:5f:95:5f:ab:
         12:15:0b:74:8f:00:85:e0:21:4f:49:e8:44:43:0e:22:cf:74:
         95:65:6d:51:4d:05:9d:2b:e3:34:5b:1f:b3:96:7b:c3:58:c8:
         a3:3b:c2:8b:92:d4:27:67:b4:62:98:88:6c:1b:e4:03:21:12:
         49:e0:69:57:3b:f8:e3:51:ea:6f:09:fc:b6:4c:39:89:d2:d4:
         d5:d2:67:37:25:d0:69:52:81:b4:f8:b7:b0:94:c4:e7:1f:1b:
         30:f4:51:3f:c8:2e:f1:62:4b:8e:a0:bf:5c:6d:90:9a:29:47:
         ed:e8:19:5c:58:eb:68:8d:b6:ac:77:6b:61:e2:51:80:cb:40:
         cd:53:c0:a8:af:cc:2e:ca:85:27:8d:f5:5a:82:3c:44:1b:d6:
         b7:aa:7d:dc:86:32:e4:dc:ce:76:61:d3:e7:ec:6d:61:64:d4:
         ef:08:bc:39:00:d4:34:1f:b3:da:9c:2f:22:1b:b3:37:05:2c:
         94:dc:b7:84:58:dc:98:f1:2d:97:16:4b:e5:05:65:9c:d9:1b:
         de:1e:33:db:4a:cf:cb:da:9b:2a:bf:b5:12:65:21:8d:88:45:
         b4:57:ca:23:60:b1:50:aa:1d:b5:c0:8a:81:05:20:39:ee:c1:
         c0:8e:cc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:34:13 2025 by rpki-client