Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/502D57718548660D155175A249B0597C56E1D390.cer
File:                     502D57718548660D155175A249B0597C56E1D390.cer (raw, json)
Hash identifier:          ID6rcmufTRuAgRu9JoTZqkBIul9TfkEXhrIPLNP0ICo=
Subject key identifier:   50:2D:57:71:85:48:66:0D:15:51:75:A2:49:B0:59:7C:56:E1:D3:90
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2B21D5341889E785A30DDB0BFAB54CFC7C318175
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6qQaL6qMsusjhq2fvfKjtVqZ2wyssCRKWeiFSmxmec5c/0/502D57718548660D155175A249B0597C56E1D390.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6qQaL6qMsusjhq2fvfKjtVqZ2wyssCRKWeiFSmxmec5c/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 Jan 2025 15:06:07 +0000
Certificate not after:    Mon 05 Jan 2026 15:11:07 +0000
Subordinate resources:    AS: 265404
                          IP: 168.194.128.0/22
                          IP: 2804:3390::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:21:d5:34:18:89:e7:85:a3:0d:db:0b:fa:b5:4c:fc:7c:31:81:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  6 15:06:07 2025 GMT
            Not After : Jan  5 15:11:07 2026 GMT
        Subject: CN=502D57718548660D155175A249B0597C56E1D390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:58:ec:3f:04:91:d5:ec:aa:fa:ef:f0:dc:45:
                    50:0b:64:5f:a4:f7:42:69:43:a9:0f:2a:fb:2a:9a:
                    44:d6:09:2d:1b:e0:1d:1d:67:07:16:b3:b9:31:82:
                    5f:f7:21:4c:2b:16:ce:c8:14:f5:a7:36:9e:02:23:
                    3a:9d:66:c0:a7:da:68:5e:a2:3a:02:73:af:7a:94:
                    72:61:94:27:a6:1a:ae:94:ac:1f:5f:ed:24:31:4c:
                    0b:16:be:32:bd:9a:82:b9:da:e4:05:03:08:f1:b3:
                    f2:55:0e:c0:3c:13:9a:7c:bb:0f:0d:cb:6a:94:02:
                    f8:49:e6:14:fa:45:ad:26:84:f5:a7:37:ac:17:9a:
                    62:fb:31:4a:90:b2:de:4f:bc:12:b9:61:51:c3:79:
                    f2:23:64:55:b5:3d:80:c4:70:8a:ba:57:a5:4d:52:
                    7a:ec:48:a8:df:68:bd:15:e5:6b:84:8d:77:57:db:
                    86:6a:ac:84:59:19:62:c2:c8:40:65:f4:df:43:0f:
                    19:a8:84:77:fe:28:38:44:7c:c9:a5:e4:da:ed:44:
                    2b:7c:01:7e:61:a1:b1:ed:36:98:83:4d:31:1c:0d:
                    55:e6:e2:f4:28:99:84:6b:59:d4:41:e5:50:6c:11:
                    c9:35:0c:17:a3:1a:24:e7:76:4a:b7:df:9d:8c:8f:
                    5b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:2D:57:71:85:48:66:0D:15:51:75:A2:49:B0:59:7C:56:E1:D3:90
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6qQaL6qMsusjhq2fvfKjtVqZ2wyssCRKWeiFSmxmec5c/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6qQaL6qMsusjhq2fvfKjtVqZ2wyssCRKWeiFSmxmec5c/0/502D57718548660D155175A249B0597C56E1D390.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.128.0/22
                IPv6:
                  2804:3390::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265404

    Signature Algorithm: sha256WithRSAEncryption
         9c:56:66:3a:79:5f:be:81:88:9f:64:ae:9a:fa:55:b5:de:9a:
         4a:0e:62:5d:da:3a:20:95:65:46:5e:6b:dd:ad:1e:0b:7c:ed:
         a3:71:fb:a5:40:78:33:5f:14:fa:bb:50:3d:f2:81:43:c2:5d:
         05:6f:77:70:62:dc:9b:76:d2:6d:18:a9:0b:45:2d:e8:98:4b:
         4c:60:f4:e8:ef:30:89:d2:46:cc:89:1c:60:9f:f7:b4:9c:ae:
         a6:19:bb:76:ef:fb:97:35:c7:20:98:3d:5f:d7:91:02:57:96:
         4b:e7:4c:7c:63:b6:77:68:9f:03:21:33:12:88:74:e5:7d:78:
         55:ad:49:cc:f7:86:68:bb:58:1c:c7:22:ec:95:30:d8:ee:cf:
         4d:61:04:6c:cb:23:de:dc:c8:75:44:88:e6:57:17:3b:fe:4a:
         e1:91:aa:59:dc:3b:a1:87:f1:99:4f:2f:28:f9:c4:aa:e0:f2:
         05:5e:30:20:06:8e:97:1f:57:e8:7b:cf:e9:1b:5b:56:dd:ca:
         9a:88:5f:c9:c3:6a:4c:59:65:8b:a4:61:53:19:54:81:0d:05:
         26:08:ed:55:6b:7e:e8:6c:fb:8c:7f:c9:a1:28:3a:1b:ad:a9:
         73:23:7f:80:8e:ab:41:55:87:2a:1c:2b:02:b6:f8:13:82:59:
         ab:7f:98:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:59 2025 by rpki-client