Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4BE8A9E487872F0A44069CCAD1F533B7C68347E4.cer
File:                     4BE8A9E487872F0A44069CCAD1F533B7C68347E4.cer (raw, json)
Hash identifier:          udPXcv2aivrY1xBKqHd360REMKPt0K5xqT5NJrHtwFI=
Subject key identifier:   4B:E8:A9:E4:87:87:2F:0A:44:06:9C:CA:D1:F5:33:B7:C6:83:47:E4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       207A946A44289983677B220C91820E5ADEED5EF6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/4BE8A9E487872F0A44069CCAD1F533B7C68347E4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Feb 2025 15:23:06 +0000
Certificate not after:    Thu 05 Feb 2026 15:28:06 +0000
Subordinate resources:    AS: 266319
                          IP: 170.238.128.0/22
                          IP: 2804:35fc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:7a:94:6a:44:28:99:83:67:7b:22:0c:91:82:0e:5a:de:ed:5e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  6 15:23:06 2025 GMT
            Not After : Feb  5 15:28:06 2026 GMT
        Subject: CN=4BE8A9E487872F0A44069CCAD1F533B7C68347E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a9:09:a5:de:4b:35:0d:3a:3d:ab:e9:d9:f0:
                    b9:10:42:5f:85:fb:61:92:74:ca:55:4e:ff:01:e5:
                    68:da:4c:e9:03:0c:23:69:34:bf:7f:c3:a0:58:31:
                    99:f3:00:1f:08:fd:4c:12:44:bb:3f:3d:3d:eb:30:
                    09:72:9c:f8:93:92:30:9f:48:6f:e2:fb:16:7e:b4:
                    b8:c1:91:72:c7:f2:93:7b:d5:17:ec:9f:05:d6:a4:
                    96:4f:6f:aa:a7:d5:ab:3f:55:f0:c7:bf:68:a2:93:
                    c1:9d:5f:98:09:1e:8a:10:fa:e6:b8:a6:92:4e:e0:
                    a9:88:f9:53:b9:6f:78:98:b8:e4:26:ba:25:52:d2:
                    b6:3d:7b:50:a9:97:80:58:fe:1a:d0:87:86:68:6a:
                    5e:44:42:65:42:ad:71:d6:40:91:10:71:21:0f:c4:
                    db:a5:2c:48:2d:77:fd:35:e2:e8:68:53:b2:b9:23:
                    e1:80:5f:9b:17:b2:10:4c:a6:45:16:11:8d:5f:d3:
                    14:35:72:4c:ac:81:99:4a:64:6e:8e:09:96:fa:eb:
                    42:ab:81:ee:2b:26:72:e9:37:a2:39:b0:f1:cb:ba:
                    b3:31:55:70:72:23:e2:da:54:c0:59:4c:75:69:f0:
                    20:67:9a:91:4b:42:a8:35:01:2f:af:7a:96:da:08:
                    66:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:E8:A9:E4:87:87:2F:0A:44:06:9C:CA:D1:F5:33:B7:C6:83:47:E4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8bJEqVF5XoatTLePcsgpJ2ZRndC4MQKTbcVKKY22r7hM/0/4BE8A9E487872F0A44069CCAD1F533B7C68347E4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.128.0/22
                IPv6:
                  2804:35fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266319

    Signature Algorithm: sha256WithRSAEncryption
         10:a7:f7:aa:cf:b5:25:76:01:56:71:98:eb:1a:e1:e1:c9:3c:
         5f:1f:8f:7f:32:38:78:99:87:b3:3d:b4:59:02:27:fd:18:74:
         22:c6:be:6c:f1:02:36:35:11:72:81:0c:50:3a:1c:10:c6:f9:
         71:5a:c3:dc:6c:32:4a:c7:0f:58:1e:e9:63:bf:16:cb:96:49:
         58:be:50:c7:ec:36:da:81:ac:da:78:0a:c0:8d:c9:f5:3c:e7:
         52:7d:bc:b1:f3:18:e1:f0:9c:03:5f:8e:04:53:c7:7f:41:b2:
         c8:17:3a:44:04:df:6c:d4:ba:7f:ea:ac:5c:df:6f:78:4d:20:
         aa:8b:f1:2f:1c:85:73:2f:ea:eb:33:f7:22:93:98:82:c2:78:
         d6:cb:45:31:7e:ff:9b:fc:3a:4f:bc:3b:3f:93:b8:e1:66:26:
         e4:d3:4c:c4:5d:06:83:2e:5d:b7:ba:af:ee:c4:d2:68:d9:3b:
         52:1b:e8:52:5e:99:4a:62:59:01:f2:a3:f0:41:50:ac:f8:de:
         4e:56:5e:4b:e8:03:c1:c7:fd:9c:15:92:9f:2e:8e:7d:76:a1:
         90:ae:d6:93:2c:44:0a:dc:71:ae:e7:65:84:d0:ab:27:1a:3f:
         54:8f:91:b5:59:a1:9e:a8:4e:74:6b:10:24:26:eb:2b:cb:c4:
         fe:a7:19:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:24:18 2025 by rpki-client