Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer
File:                     484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer (raw, json)
Hash identifier:          aTUv0EDiCE2ZjwMNK0JS28oYigv1C3kv3u6YnG0CtDo=
Subject key identifier:   48:4C:AF:ED:17:D0:2C:45:55:E5:D4:58:69:F3:0E:CA:A7:E1:E5:E3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5A8B223B40D415E7A85FD289AAA038997FD6565B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 15:53:26 +0000
Certificate not after:    Thu 05 Mar 2026 15:58:26 +0000
Subordinate resources:    AS: 271739
                          IP: 2804:8040::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8b:22:3b:40:d4:15:e7:a8:5f:d2:89:aa:a0:38:99:7f:d6:56:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 15:53:26 2025 GMT
            Not After : Mar  5 15:58:26 2026 GMT
        Subject: CN=484CAFED17D02C4555E5D45869F30ECAA7E1E5E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3c:9b:43:26:7a:7c:d3:0a:91:82:73:6d:eb:
                    e9:2f:7d:c5:99:38:57:96:0b:dc:c0:e9:ce:e0:62:
                    44:cd:c5:20:12:92:5b:ca:7c:1e:93:c6:17:e1:2b:
                    e7:99:5d:73:87:e0:08:4b:c0:2c:f7:71:a8:3a:50:
                    66:e5:e8:ab:b4:b7:89:07:ba:78:74:cc:35:ba:07:
                    e7:38:08:74:b1:85:2f:8c:ad:ce:97:61:8c:42:cd:
                    9c:6a:ff:28:cc:fd:63:59:66:28:ef:29:e6:1e:a6:
                    2c:5a:b2:0c:d7:57:d9:5d:f3:f2:db:32:17:05:33:
                    2f:e9:7a:4b:20:28:70:23:e6:9a:53:3d:6d:64:58:
                    a1:cc:a8:e6:6a:e7:88:d2:ca:67:d0:33:47:9e:cd:
                    21:10:40:6a:18:25:fa:7f:e7:96:5a:6c:9b:b5:1f:
                    b0:b4:96:d9:34:46:eb:7f:b7:3c:76:1f:d8:95:ff:
                    06:30:1b:3e:2b:17:99:66:cd:04:3c:c6:78:e6:55:
                    23:93:ff:aa:b9:ee:69:16:e1:31:cc:bd:63:16:a3:
                    77:f6:59:07:cf:05:93:96:ea:86:40:df:3a:e2:e4:
                    09:c1:ce:d4:74:0b:0f:6a:4c:9e:9d:4f:d4:f2:39:
                    84:d1:76:9f:bd:60:cb:9e:84:a5:f7:34:42:54:73:
                    ba:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:4C:AF:ED:17:D0:2C:45:55:E5:D4:58:69:F3:0E:CA:A7:E1:E5:E3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8040::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271739

    Signature Algorithm: sha256WithRSAEncryption
         d0:44:da:0f:8a:55:7a:8d:e9:9f:a3:57:38:73:e2:94:cf:ac:
         0a:d5:41:00:54:b0:3b:d1:bc:44:da:ad:9b:9a:96:04:13:39:
         7b:73:1e:d2:be:61:9a:12:e2:e6:51:85:b7:c3:59:4a:7e:15:
         e0:d9:b8:56:c3:0b:84:1b:a0:47:8a:94:3d:e1:e8:f2:00:d6:
         d3:4c:de:44:e0:a7:15:b8:eb:1e:ed:41:32:f1:74:ed:7d:30:
         7f:66:32:cf:e7:80:37:a9:35:87:6a:0d:43:38:72:85:d0:97:
         de:bd:e0:74:fc:df:48:2e:b5:9f:8b:59:67:e2:a7:47:89:03:
         7f:26:1e:b0:36:08:13:83:32:d0:b3:eb:60:a5:1a:15:c6:35:
         8b:e5:2d:f2:62:3e:d2:ce:f5:de:33:28:a7:47:46:5b:ad:cf:
         d7:a2:08:17:74:3b:11:db:9e:6a:83:28:d1:bf:f4:bf:10:b6:
         8f:59:7f:cf:a9:8c:01:cd:11:be:de:41:67:b5:14:34:24:ba:
         78:69:0c:e0:a6:b4:8c:05:0f:ae:3a:b0:db:6d:66:67:f8:67:
         14:38:ad:d0:26:a7:23:c7:0b:23:1a:4f:09:16:e3:14:ef:11:
         18:64:18:69:34:ca:34:48:72:fb:a4:d4:69:b5:1e:c7:45:85:
         83:8d:c8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:03:15 2025 by rpki-client