Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.cer
File:                     5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.cer (raw, json)
Hash identifier:          5IZ7md7qanjUp7COUkhwJTAxlUQFPxlUjUrGzUAfDyM=
Subject key identifier:   51:80:CE:95:C6:FF:8C:21:A0:A7:A1:35:DC:FA:98:01:E2:E7:29:59
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1832A7EC7B226E8AA3BD4FCC2CCBE7E6855FB00A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 19:25:59 +0000
Certificate not after:    Thu 05 Mar 2026 19:30:59 +0000
Subordinate resources:    AS: 268870
                          IP: 45.174.184.0/22
                          IP: 2804:5bd0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:32:a7:ec:7b:22:6e:8a:a3:bd:4f:cc:2c:cb:e7:e6:85:5f:b0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 19:25:59 2025 GMT
            Not After : Mar  5 19:30:59 2026 GMT
        Subject: CN=5180CE95C6FF8C21A0A7A135DCFA9801E2E72959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:68:fe:5b:a5:4b:60:81:dd:cf:32:b1:73:77:
                    d4:2a:6d:3f:01:ab:79:ee:e6:19:7a:41:ed:c2:5d:
                    ac:18:bc:b3:70:57:e8:a0:d4:ff:e4:d4:4b:69:b8:
                    b6:d5:d4:79:12:d8:d9:53:12:4c:cf:1c:74:b4:8f:
                    28:5c:cb:1c:9e:ee:f6:59:d0:48:c6:4f:22:6d:22:
                    b4:65:16:c2:a2:6a:57:bd:b0:71:fe:72:15:c2:e4:
                    a9:15:ac:64:91:26:9f:02:8e:02:29:6c:f7:18:d0:
                    6f:0b:f1:ef:dd:16:1b:dd:dc:ec:c1:50:90:2f:95:
                    71:e3:cc:a5:5f:ab:df:d5:aa:8e:0c:76:54:8c:89:
                    36:4e:0d:91:ed:49:4c:b0:db:dd:ca:ea:b4:a4:40:
                    61:0e:d9:0a:4e:8d:b0:83:47:4a:31:ec:fa:9b:87:
                    c8:4b:30:77:af:14:8f:04:5c:5c:b3:36:a0:25:a3:
                    0c:b7:ae:8f:fd:83:5f:c1:7f:bb:bf:90:64:fe:6a:
                    ed:dc:5e:6d:fe:51:39:01:ae:8d:62:8e:ca:b6:8a:
                    84:96:2c:5a:39:0a:3b:5a:13:04:f4:b3:e4:7a:90:
                    a9:e8:d1:32:cb:12:e0:21:6e:5c:b0:32:63:f1:7a:
                    e8:bd:b7:04:bb:84:04:ae:be:95:13:85:4d:98:61:
                    8a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:80:CE:95:C6:FF:8C:21:A0:A7:A1:35:DC:FA:98:01:E2:E7:29:59
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HQk6TgUcttSJpD6CKmNeBqXiXvKBCresc6sYd2aKeHDG/1/5180CE95C6FF8C21A0A7A135DCFA9801E2E72959.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.184.0/22
                IPv6:
                  2804:5bd0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268870

    Signature Algorithm: sha256WithRSAEncryption
         bb:dc:4a:e5:b9:bc:a3:db:5b:70:ea:14:81:e0:fd:e5:0d:25:
         d4:64:10:6c:ca:3a:ef:fd:a3:03:0c:df:37:f5:6a:88:e0:21:
         61:d3:fb:c1:11:e9:bc:83:61:e1:0c:3b:90:d0:0f:af:cc:2f:
         59:57:49:96:ee:42:cb:0f:66:cd:f6:56:5e:5c:bc:e1:91:44:
         9d:6c:76:6a:bc:21:ed:80:20:97:96:ed:7f:89:4f:12:10:b3:
         dc:9a:79:84:e0:b0:86:e1:65:0d:a4:6f:83:a7:93:ef:6a:2e:
         35:6c:96:ab:d4:5e:f9:8e:75:9a:77:60:6b:29:cf:53:fc:9f:
         91:15:e1:25:a7:b4:09:7b:f6:9d:77:7b:0f:d9:53:e0:9c:b6:
         fa:ee:d7:f2:52:7b:75:73:f2:dc:5e:a5:48:d4:cd:71:c6:2f:
         0a:8a:b2:21:86:b8:10:d5:5a:94:93:7c:df:f8:28:39:db:2b:
         21:57:6a:7b:ef:8a:e0:96:83:66:8b:08:f0:74:67:98:c5:b5:
         0c:60:c0:0a:40:14:23:2d:50:c3:94:a0:d1:61:cc:dc:ad:17:
         0f:88:06:e1:41:0e:5e:49:d8:5a:06:41:7d:c6:e6:ce:42:c8:
         c9:b8:79:41:62:d5:ee:41:33:97:95:11:17:4d:a2:36:2b:9d:
         64:38:45:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:19:09 2025 by rpki-client