Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/51352D74D3778F2422CE0E96FC53071E18935405.cer
File:                     51352D74D3778F2422CE0E96FC53071E18935405.cer (raw, json)
Hash identifier:          ILGnJigi/w+Tm8ManK9nenSft6JZFka9MRMifWQ6qSA=
Subject key identifier:   51:35:2D:74:D3:77:8F:24:22:CE:0E:96:FC:53:07:1E:18:93:54:05
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2AAEA123A052717ACED37C4C6B89A56BADF00DE6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 15:24:58 +0000
Certificate not after:    Thu 05 Mar 2026 15:29:58 +0000
Subordinate resources:    AS: 263049
                          IP: 170.84.112.0/22
                          IP: 177.129.224.0/22
                          IP: 177.136.104.0/21
                          IP: 2804:fe0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ae:a1:23:a0:52:71:7a:ce:d3:7c:4c:6b:89:a5:6b:ad:f0:0d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 15:24:58 2025 GMT
            Not After : Mar  5 15:29:58 2026 GMT
        Subject: CN=51352D74D3778F2422CE0E96FC53071E18935405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6f:ee:eb:56:40:bb:fc:7b:d8:7d:24:9e:9e:
                    23:52:ff:9a:03:96:c9:ec:d8:e7:f0:7e:56:6f:35:
                    06:8e:d1:e9:8a:ce:be:54:90:b2:cf:02:15:97:54:
                    2a:bf:aa:b1:71:79:86:b8:27:93:ee:4b:3e:69:2f:
                    30:6d:cc:eb:3f:f0:0c:ed:36:e4:d4:a1:ae:d5:4d:
                    7f:82:ae:da:6b:40:c5:92:65:84:25:4f:8e:b0:60:
                    a1:3f:01:5b:22:57:0b:fd:c1:5e:b8:88:72:8b:15:
                    64:ad:53:1a:94:0b:1f:88:9b:1a:11:f9:ee:ea:9b:
                    27:da:00:23:9f:e7:be:fb:b5:79:23:37:05:87:c4:
                    d3:07:e3:9b:56:9c:d7:9e:58:15:73:8d:a7:64:9a:
                    09:a1:69:5b:3a:64:15:ef:54:3b:bc:98:1a:70:d9:
                    ea:b5:1c:33:4e:91:ea:d6:78:eb:81:eb:1b:61:3b:
                    60:02:6e:b6:33:0d:b0:01:e7:39:ce:8f:1c:fa:0c:
                    01:71:2c:e3:58:c0:22:5f:b6:4c:39:68:62:70:eb:
                    0e:04:26:df:d8:d1:8b:24:ba:35:4f:d7:20:40:25:
                    2e:f4:d4:be:86:c9:53:61:40:da:aa:6d:ba:b7:db:
                    81:0f:47:b8:00:f8:a5:95:11:25:e8:f7:c1:0e:a1:
                    ce:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:35:2D:74:D3:77:8F:24:22:CE:0E:96:FC:53:07:1E:18:93:54:05
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/1/51352D74D3778F2422CE0E96FC53071E18935405.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.112.0/22
                  177.129.224.0/22
                  177.136.104.0/21
                IPv6:
                  2804:fe0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263049

    Signature Algorithm: sha256WithRSAEncryption
         50:f1:5b:f5:bc:00:41:81:01:87:26:f3:52:8d:51:82:af:26:
         24:14:f0:5a:cc:0a:a8:63:cc:cb:59:24:5b:e1:db:92:23:bc:
         d4:65:a3:fc:dd:3f:38:cd:dd:96:af:2d:49:00:d1:67:f1:bd:
         95:94:0d:00:e2:9e:fe:37:37:b2:55:ba:dd:92:b7:9b:3b:69:
         c0:9b:46:39:e0:73:2c:be:ce:7a:63:85:57:d7:76:05:72:74:
         44:55:5d:ba:ad:fa:0f:dd:e5:24:17:a5:b0:c8:f2:f1:54:0a:
         69:b7:7b:af:bd:69:55:64:23:1d:3c:ff:3f:c7:93:b1:40:f6:
         1c:49:42:f0:08:bb:ab:c3:06:ff:fe:fd:2e:48:66:d1:f3:1b:
         8e:de:54:f1:e6:7a:e7:1a:75:20:91:fd:9c:5c:2d:a3:cb:61:
         56:8e:4c:45:3f:82:2a:8e:d8:50:9e:0f:82:81:9a:0b:74:eb:
         ad:32:1f:a3:bd:8c:5a:50:18:d5:c2:28:df:98:7f:0b:29:26:
         0c:73:d0:5c:2e:d0:e4:fe:90:62:cf:17:0a:98:92:b9:be:95:
         a3:56:60:b0:9b:42:8b:ab:b0:29:da:78:99:38:c9:ef:e0:aa:
         01:c0:b6:a4:e2:4f:03:28:a2:01:90:1f:a9:2d:55:63:de:f9:
         b2:a9:7d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:40:51 2025 by rpki-client