Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/45A824BE3AB3681275CCCDCBCFDBD96A825082AB.cer
File:                     45A824BE3AB3681275CCCDCBCFDBD96A825082AB.cer (raw, json)
Hash identifier:          TKgnVkhejW1xVh8t671mBsyJKn69eigpsLaPc+JtOBs=
Subject key identifier:   45:A8:24:BE:3A:B3:68:12:75:CC:CD:CB:CF:DB:D9:6A:82:50:82:AB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       341561E0F43FAE4A4AA77121BFA9498649D6D282
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/1/45A824BE3AB3681275CCCDCBCFDBD96A825082AB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 10:34:17 +0000
Certificate not after:    Thu 05 Mar 2026 10:39:17 +0000
Subordinate resources:    AS: 265358
                          IP: 168.181.240.0/22
                          IP: 2804:2eac::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:15:61:e0:f4:3f:ae:4a:4a:a7:71:21:bf:a9:49:86:49:d6:d2:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 10:34:17 2025 GMT
            Not After : Mar  5 10:39:17 2026 GMT
        Subject: CN=45A824BE3AB3681275CCCDCBCFDBD96A825082AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e5:41:7c:d9:06:46:1a:7b:fa:ff:7b:d6:d1:
                    d7:91:78:e4:07:d2:f1:4c:b9:09:5c:33:0f:64:62:
                    97:1d:48:6a:1b:14:73:7a:48:b7:c8:f0:9d:8f:98:
                    6e:12:43:ef:96:36:cb:fc:b8:dc:79:4b:75:bd:1e:
                    63:dc:25:40:32:af:1e:49:07:a6:59:7a:77:4b:ad:
                    0b:82:42:5f:b5:0c:36:b3:71:fe:b4:c8:98:8f:ae:
                    88:9a:d1:68:bf:a6:68:9a:3c:09:14:f8:88:3f:bd:
                    50:7f:e1:74:22:14:7f:1f:a6:dc:df:a2:33:68:b1:
                    bc:6d:d3:5d:6d:7a:b1:b3:1b:87:f9:15:2f:69:9b:
                    95:b9:b5:d7:eb:fd:1a:81:a2:8c:db:27:a6:dc:ed:
                    06:12:29:97:c2:78:3b:23:5a:99:f3:a3:53:ab:3b:
                    0a:27:00:4a:51:64:3f:3b:b1:c1:69:38:e5:d0:8c:
                    ba:06:a8:3d:ec:21:5c:25:57:86:f1:88:86:06:0f:
                    61:7b:ff:b9:ba:8c:e7:00:09:1e:45:3a:21:88:4f:
                    eb:91:b6:82:40:c5:23:4f:9f:a1:52:02:4f:5a:23:
                    63:c4:03:7a:48:b3:a9:de:97:ea:bb:8e:d8:26:1d:
                    89:8e:b5:2a:b0:1c:aa:f9:31:a6:af:b7:8c:0c:0d:
                    d8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:A8:24:BE:3A:B3:68:12:75:CC:CD:CB:CF:DB:D9:6A:82:50:82:AB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DCsaCyDaw2wCnjnvkoS8cwcWFW6s24168gV5i4qEiDgZ/1/45A824BE3AB3681275CCCDCBCFDBD96A825082AB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.240.0/22
                IPv6:
                  2804:2eac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265358

    Signature Algorithm: sha256WithRSAEncryption
         da:b8:24:31:96:2f:aa:88:79:3e:87:18:21:3c:3e:c5:50:9d:
         35:bb:7c:e7:89:c6:da:03:1c:fd:88:07:87:78:51:b9:e9:87:
         f2:d5:20:64:af:05:c3:07:15:4b:3f:d3:df:00:fa:55:9e:44:
         54:42:1c:b1:87:df:0e:45:23:30:57:a3:f7:c8:5e:68:2c:8f:
         3f:fa:55:4f:13:50:e6:61:89:dc:87:5a:95:1a:b1:f0:7a:a9:
         77:03:a9:08:5d:5f:38:ef:55:99:1f:47:ce:42:d9:9c:55:0e:
         94:d6:c7:9b:fe:bc:5f:da:83:27:98:30:e0:2a:89:77:a1:40:
         64:be:22:6b:de:31:7e:b1:b5:c3:b9:6e:9f:ff:21:4c:1c:2c:
         f2:d3:68:1a:f1:2f:53:0d:54:2b:67:d7:ce:49:78:70:18:76:
         85:79:21:5b:60:f5:ed:05:a2:30:c5:b5:e4:3d:75:e4:4a:2c:
         3e:8e:18:17:d7:57:31:86:10:d8:3e:f8:3f:b9:7e:14:78:0e:
         64:eb:ca:e1:fe:ef:76:4d:c4:a4:d4:ef:0d:b0:c4:62:4e:e2:
         e4:81:bd:c4:45:9d:d3:f7:c1:03:5a:6d:a5:9b:32:ec:9d:c6:
         a2:78:21:60:58:10:3a:34:9e:93:db:76:52:ab:84:76:ec:f4:
         ca:11:77:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:11:20 2025 by rpki-client