Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.cer
File:                     4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.cer (raw, json)
Hash identifier:          m4nnYWJbH+CZf317ihA0uDQLpC5FQPYM/gLxq52q8mg=
Subject key identifier:   4B:15:F5:37:3E:2C:29:8F:E4:B5:F0:EA:FC:99:1C:D5:C4:B3:57:BE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4E1F36B4E43E149D3E5DCDA947A7752E7AEF445A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Jan 2025 13:04:50 +0000
Certificate not after:    Mon 26 Jan 2026 13:09:50 +0000
Subordinate resources:    AS: 266481
                          IP: 170.83.88.0/22
                          IP: 2804:387c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1f:36:b4:e4:3e:14:9d:3e:5d:cd:a9:47:a7:75:2e:7a:ef:44:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 27 13:04:50 2025 GMT
            Not After : Jan 26 13:09:50 2026 GMT
        Subject: CN=4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9f:c7:d2:cd:dd:ec:4b:c8:7b:5d:c5:12:39:
                    01:1b:71:d0:f5:7b:8e:8d:ec:f9:19:4a:ad:77:01:
                    ae:8a:93:41:29:ab:7a:b7:08:d0:92:09:c5:5e:22:
                    31:3f:45:88:bf:0d:de:e0:3e:ee:05:3d:94:96:2c:
                    55:d2:74:ed:b4:3a:b7:f2:cd:cf:02:08:cb:09:fc:
                    db:5c:8d:47:5e:ae:58:3e:d6:cd:b3:7f:4d:18:11:
                    e1:6f:77:88:0c:f5:3b:a5:1f:21:ce:fa:fc:0a:9b:
                    fe:37:33:91:d4:cb:5a:7c:fb:04:88:d8:40:8f:d4:
                    9a:1b:63:0a:a1:70:c0:af:f1:d8:1c:59:a7:74:5b:
                    32:33:a8:b5:fe:66:b6:92:7d:f1:61:34:dc:a5:5a:
                    22:41:ab:73:28:eb:06:ab:5e:5f:32:fa:c0:0b:d9:
                    06:e9:91:de:b6:77:e2:47:b4:4b:32:02:fd:8f:16:
                    77:37:d5:8f:00:83:71:16:fc:48:72:58:94:8c:b2:
                    60:d9:6f:1a:5e:11:1b:59:73:2f:8e:2f:01:52:18:
                    6d:90:e5:b3:59:1b:22:5d:41:e0:42:f6:97:bd:78:
                    7a:5e:00:bb:9a:92:60:8b:95:54:ce:9c:84:8f:30:
                    28:12:58:96:4f:3c:ff:01:73:35:ca:52:8a:fa:dc:
                    58:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:15:F5:37:3E:2C:29:8F:E4:B5:F0:EA:FC:99:1C:D5:C4:B3:57:BE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKAm5rpA4F54jHRdqP89cMftfRVJeQuUTiAd97npymkS/0/4B15F5373E2C298FE4B5F0EAFC991CD5C4B357BE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.88.0/22
                IPv6:
                  2804:387c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266481

    Signature Algorithm: sha256WithRSAEncryption
         47:e6:3b:c4:2a:42:9e:31:e5:27:00:2e:0e:8c:a9:af:2b:87:
         d5:9f:43:8d:2e:66:13:2c:e3:1a:76:dc:6b:2a:93:65:aa:66:
         fd:c2:34:57:94:6b:0d:83:0e:68:40:a2:98:c1:c5:34:d2:56:
         d3:19:85:74:ff:b5:12:b9:a4:2b:5d:a9:f4:bd:7b:6b:e6:7e:
         13:60:41:30:0c:85:18:cf:c9:14:8e:4f:e9:b9:e0:ce:bd:5f:
         d5:9c:5f:cf:05:62:74:08:59:f0:74:df:1f:6e:05:6b:cc:4c:
         02:fc:8b:d6:8b:cb:00:42:36:65:52:b4:74:aa:95:d3:5c:73:
         3d:78:92:0a:5e:4a:65:be:b3:b7:1d:19:ea:5a:5f:09:46:c7:
         4b:c2:f9:15:fb:a0:0e:3c:98:1f:0c:d1:71:53:37:33:94:4b:
         60:05:09:d1:a5:58:3d:a4:c7:8a:44:8b:19:56:0e:11:ed:ae:
         18:87:13:fa:8d:9b:e9:41:ef:0f:93:38:0f:d1:0f:08:ae:44:
         13:8a:f5:6e:0f:7d:f1:23:ca:31:87:f8:f8:9a:40:d6:bd:c0:
         d0:9b:37:67:e2:9f:17:88:9f:d1:af:67:99:56:b0:11:8e:7f:
         63:5d:50:91:de:42:37:f8:ca:de:40:fb:3a:10:1d:ab:3f:44:
         09:22:f9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:11 2025 by rpki-client