Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4937C541E7F86C7930B257F315044E29E4FF02B0.cer
File:                     4937C541E7F86C7930B257F315044E29E4FF02B0.cer (raw, json)
Hash identifier:          0gin7mz+JVkyVmlxH/uk/srrqdMN0VgIvxR2CJW0LKc=
Subject key identifier:   49:37:C5:41:E7:F8:6C:79:30:B2:57:F3:15:04:4E:29:E4:FF:02:B0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       349B5D10BCFC797A53C11A4755D21532BBD716F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/1/4937C541E7F86C7930B257F315044E29E4FF02B0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 02:15:57 +0000
Certificate not after:    Fri 06 Mar 2026 02:20:57 +0000
Subordinate resources:    AS: 271425
                          IP: 200.39.44.0/22
                          IP: 2804:7b54::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:9b:5d:10:bc:fc:79:7a:53:c1:1a:47:55:d2:15:32:bb:d7:16:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 02:15:57 2025 GMT
            Not After : Mar  6 02:20:57 2026 GMT
        Subject: CN=4937C541E7F86C7930B257F315044E29E4FF02B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4f:3d:78:02:f5:69:f7:6e:1d:bf:10:ee:2d:
                    7f:b2:17:2f:e0:31:c0:84:94:17:7d:4c:5b:d0:63:
                    41:4d:3a:75:df:bf:f0:c9:3f:1f:ff:d1:cc:58:7e:
                    e9:27:08:14:00:22:f6:e5:df:62:de:3b:69:d5:0e:
                    90:6b:f3:45:c2:09:63:7b:ed:32:c7:85:f1:f9:ee:
                    19:47:f7:7d:02:61:8e:80:cf:a6:f7:6e:5f:25:22:
                    70:5d:53:1f:bf:ac:68:89:1c:02:c3:69:c8:b5:cc:
                    bd:14:23:4e:e1:22:d0:ad:1c:78:c2:ba:f7:c9:f1:
                    a9:24:ee:87:a0:b0:ad:1a:6a:1d:30:46:fd:1f:84:
                    ee:8d:7d:eb:65:ed:fb:f2:18:a1:69:70:97:18:d7:
                    84:29:30:d9:26:89:9f:00:98:6d:3f:fc:50:a9:88:
                    b2:54:9c:8d:c5:33:29:69:fd:8a:d4:ad:c0:7b:7a:
                    05:db:ec:42:12:d7:f8:d6:45:90:0d:00:08:0e:e4:
                    24:11:eb:cb:d4:4f:b0:03:e3:33:ec:14:1b:48:3b:
                    41:23:bd:4b:a9:0e:da:2d:6c:69:34:94:4d:31:e6:
                    ec:c2:ca:32:a9:fc:fb:70:f3:6a:77:4c:5a:d2:77:
                    a8:d5:95:16:fd:63:40:42:c0:cb:b3:16:66:46:23:
                    55:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:37:C5:41:E7:F8:6C:79:30:B2:57:F3:15:04:4E:29:E4:FF:02:B0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BPRnbCSNvcAZoGGQYyfogJqnYcvbHvfa6o8QgnTo87wQ/1/4937C541E7F86C7930B257F315044E29E4FF02B0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.44.0/22
                IPv6:
                  2804:7b54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271425

    Signature Algorithm: sha256WithRSAEncryption
         20:3a:08:6c:2e:fa:20:e9:f1:64:45:1c:be:ef:c8:4d:46:22:
         e3:6e:00:0b:10:aa:e8:d8:0a:c1:57:89:f5:f7:91:14:58:32:
         91:13:97:7f:68:39:56:87:6e:f2:4e:b3:09:15:23:9c:20:99:
         fe:12:b9:3d:5d:13:7b:19:5b:97:88:43:c2:d2:8c:2d:bf:5c:
         62:94:80:11:c4:74:77:1f:81:f4:af:bb:bf:4e:e6:f8:31:b1:
         e5:62:a1:5a:4d:7f:64:8a:68:22:27:68:6f:ff:ff:f8:77:8f:
         0e:b1:87:5a:d8:f3:19:74:08:4a:a1:5f:57:35:c7:f1:50:c4:
         b4:aa:79:df:82:66:d8:3c:36:58:7f:2f:6d:c5:74:73:8f:95:
         f4:bf:d4:ba:f7:63:18:83:e0:62:b5:a3:ff:46:27:1a:7e:70:
         f0:34:d3:80:94:31:ea:ef:d3:0c:6a:2a:77:d3:d2:98:56:96:
         8c:35:07:4f:b6:9c:20:e8:e7:a9:22:08:75:87:cb:20:a0:04:
         22:6b:00:8f:99:c5:9c:be:9a:4e:3a:2e:55:69:0f:ca:db:fe:
         b0:e9:ee:7c:d1:cd:2f:d1:7a:bc:8e:88:cc:2b:eb:d7:77:f6:
         2b:f5:5e:b5:fa:81:15:93:82:a2:8c:5b:8c:7d:93:ff:c2:d9:
         e7:de:fe:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:13:33 2025 by rpki-client