Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4C94A42CCCF281C612C2A002CC0DEB4570D46EDC.cer
File:                     4C94A42CCCF281C612C2A002CC0DEB4570D46EDC.cer (raw, json)
Hash identifier:          7A8PfB6Qqjnz+Lw78vUGCDIFWOo2X1RL+Vl7mR/r3IY=
Subject key identifier:   4C:94:A4:2C:CC:F2:81:C6:12:C2:A0:02:CC:0D:EB:45:70:D4:6E:DC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       743EC428BCD0772722CE807B27C2FE0D97627A04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/1/4C94A42CCCF281C612C2A002CC0DEB4570D46EDC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Nov 2024 16:18:34 +0000
Certificate not after:    Tue 25 Nov 2025 16:23:34 +0000
Subordinate resources:    AS: 265111
                          IP: 170.254.192.0/22
                          IP: 2804:3304::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:3e:c4:28:bc:d0:77:27:22:ce:80:7b:27:c2:fe:0d:97:62:7a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 26 16:18:34 2024 GMT
            Not After : Nov 25 16:23:34 2025 GMT
        Subject: CN=4C94A42CCCF281C612C2A002CC0DEB4570D46EDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:00:9b:0f:4d:c8:2b:cb:c9:57:10:07:1b:ab:
                    d7:9e:78:61:d0:d0:d7:b8:28:f9:c4:d6:1b:7d:cd:
                    ab:0c:cc:74:9b:61:44:04:97:54:13:57:55:d0:53:
                    f2:04:4a:9e:fd:8e:d0:41:a5:e7:80:80:37:e1:74:
                    87:6f:18:b9:22:9b:b1:60:ae:10:5e:ca:c6:a8:56:
                    00:24:df:a1:bb:0d:f6:ed:64:87:f5:2c:d9:d3:46:
                    01:a0:f2:24:96:67:d7:b5:68:bd:54:b5:d3:e9:fd:
                    bb:f8:2d:f0:14:51:40:82:b3:e1:3f:81:f3:9f:0b:
                    35:ec:a2:3a:0e:74:dc:fc:19:ae:93:b1:f5:5a:45:
                    1e:be:b8:cc:98:75:e8:2a:06:4e:1c:a6:0b:5c:91:
                    9a:c1:e8:d0:11:52:f2:d0:7a:f1:c4:3a:64:8a:b8:
                    5a:d3:4b:ab:56:a5:ba:1b:0c:44:ac:44:43:be:e6:
                    dd:4e:70:cd:f7:30:dc:8e:9a:fd:56:3a:81:89:7c:
                    92:62:56:55:b7:6e:ca:39:95:13:46:06:91:1a:1a:
                    db:b5:7b:e2:25:3e:fd:4c:05:ea:c0:86:f3:a6:15:
                    77:65:47:80:82:cf:00:32:4c:5a:36:0e:38:2e:90:
                    c8:5d:09:ca:4a:5f:18:16:70:12:de:a5:9b:d9:f2:
                    94:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:94:A4:2C:CC:F2:81:C6:12:C2:A0:02:CC:0D:EB:45:70:D4:6E:DC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GExKcyzNRFswk7q7G1stpL6LCmKD9rRW5yKeGogH6r26/1/4C94A42CCCF281C612C2A002CC0DEB4570D46EDC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.192.0/22
                IPv6:
                  2804:3304::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265111

    Signature Algorithm: sha256WithRSAEncryption
         6c:b1:d5:5f:4a:76:74:25:c9:73:12:c0:24:ac:3e:c8:00:a8:
         b1:02:98:b1:ea:15:d1:b0:26:c8:14:db:7b:25:a1:e7:d7:6f:
         0d:26:9f:29:b1:40:74:16:f3:79:65:ba:b3:47:0b:ed:02:8d:
         ca:38:51:a5:f6:56:0e:3c:ac:c9:e6:2c:e6:9c:4a:fb:2d:ec:
         e5:6d:85:ea:20:3b:c3:d3:76:f4:cf:dd:9b:b3:d4:bb:e9:c8:
         d8:00:5d:9d:7b:aa:51:70:42:24:22:0f:82:d2:ac:44:8c:06:
         92:0b:44:d1:c9:0e:e0:00:c2:27:3e:35:9e:a9:e5:e3:83:d6:
         a3:8b:e6:3f:4e:e4:61:eb:87:c2:4c:aa:27:47:bf:9b:ab:45:
         9c:f4:f9:6f:cb:f7:5b:3d:c5:bc:4d:bd:02:b3:6d:ef:cf:02:
         fd:be:71:6d:ed:74:d1:53:3b:14:f2:8a:c1:3d:cc:89:1a:40:
         31:ff:65:7d:7b:b8:bd:13:ea:2f:1b:e1:a9:90:2c:f4:26:9f:
         a9:91:78:4a:5e:28:36:fb:1f:2c:00:6a:15:48:9c:ac:a0:23:
         65:35:c5:bc:c9:d4:ed:34:bb:d4:cd:a5:74:25:de:d8:2b:4b:
         3f:e8:bb:03:b8:91:bf:1a:0c:b2:c8:20:5e:ce:0c:f8:20:c8:
         9c:4e:8d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:29 2025 by rpki-client