Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/52699658780E9F763780991668B33774ACEDCAE9.cer
File:                     52699658780E9F763780991668B33774ACEDCAE9.cer (raw, json)
Hash identifier:          KVFjXQd0yr/hNp3ZDAvBMk/A7/I24OgO9MKL5rqkI7A=
Subject key identifier:   52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4641F252D07EC677613AADAF6230538E6579AD0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/52699658780E9F763780991668B33774ACEDCAE9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 03:02:30 +0000
Certificate not after:    Fri 06 Mar 2026 03:07:30 +0000
Subordinate resources:    AS: 270946
                          IP: 131.108.152.0/22
                          IP: 2804:73ec::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:41:f2:52:d0:7e:c6:77:61:3a:ad:af:62:30:53:8e:65:79:ad:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 03:02:30 2025 GMT
            Not After : Mar  6 03:07:30 2026 GMT
        Subject: CN=52699658780E9F763780991668B33774ACEDCAE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:85:a6:c3:2b:15:aa:c2:e2:0a:3f:f5:c5:
                    bc:36:d0:70:b0:20:62:e8:6f:69:6f:7d:da:f9:ee:
                    f1:dd:36:d2:8b:43:8c:eb:95:48:90:5b:7d:e2:f9:
                    ca:01:35:35:e9:ab:2e:74:a1:20:f4:ab:76:d1:08:
                    17:eb:93:8d:9c:27:95:c1:49:35:84:6d:e4:b9:b1:
                    42:9c:29:ba:3b:5a:95:25:11:48:b5:cf:04:79:82:
                    22:9f:d6:76:d3:90:84:cc:d6:26:b5:03:1d:f1:f6:
                    66:33:7e:f8:2c:27:b5:bc:f5:29:ca:70:a7:17:63:
                    5f:7e:e2:ea:22:e4:d2:aa:39:13:6f:72:06:9e:2f:
                    ac:77:08:d0:26:8b:c6:31:c7:16:2f:b5:5e:b5:49:
                    dd:61:39:b0:c6:70:3b:a1:91:f3:49:5a:92:2c:0a:
                    2e:f8:95:02:13:b8:1b:eb:22:47:02:66:c6:dc:dd:
                    18:66:47:de:15:a6:3e:d3:31:dc:cc:ac:a8:ee:d7:
                    05:5a:28:b4:9a:d0:67:33:e9:e6:20:ae:cb:1f:1d:
                    ba:36:ed:55:ec:40:79:ca:43:cd:66:09:d2:78:a4:
                    88:6d:2e:fb:0a:56:49:11:c0:b9:67:da:63:b4:a4:
                    ec:ea:3b:20:8a:15:66:91:3f:8b:e2:c4:af:68:c7:
                    08:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:69:96:58:78:0E:9F:76:37:80:99:16:68:B3:37:74:AC:ED:CA:E9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bo38V1xt6XYaatuJgSwJBfEggic8fdtxHYpFP2GVDzxr/1/52699658780E9F763780991668B33774ACEDCAE9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.152.0/22
                IPv6:
                  2804:73ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270946

    Signature Algorithm: sha256WithRSAEncryption
         31:a1:b6:45:0a:a5:93:dc:dd:c5:fd:e6:3d:47:5b:8f:8c:2e:
         a9:34:61:2e:93:18:a2:a8:e6:37:22:72:02:2f:e5:04:41:9c:
         7e:fd:95:56:b1:ca:d4:04:f5:3c:1b:b8:28:10:7a:a8:9f:2a:
         3d:91:42:16:a8:af:97:c1:81:b7:d3:b7:18:c2:3b:c0:bc:89:
         02:ba:2f:a4:61:7b:50:51:42:ee:6e:47:99:c8:8e:5c:6e:b0:
         e7:75:e3:8b:1b:97:42:93:6f:61:a2:c6:75:0b:3d:f5:2f:23:
         26:3a:4e:fc:db:d8:90:35:b4:a3:bc:8e:d6:1a:23:fe:b6:b8:
         d4:f7:19:f1:e1:74:7d:ac:a8:9a:cd:89:da:7c:cb:6b:30:02:
         50:b3:e2:99:b8:90:70:53:76:6c:db:0c:79:07:8e:ef:4f:36:
         f0:8c:23:d1:45:b5:d7:b5:9f:44:51:1e:48:53:a4:8c:d0:d0:
         1d:eb:bf:7e:0e:d8:b3:72:2a:54:7d:1b:db:ce:84:3c:0b:8d:
         05:6c:50:81:65:d8:8b:ee:37:9d:bb:8e:d9:f3:57:10:5e:a0:
         28:2c:63:56:a5:01:29:94:04:94:7a:65:30:78:fe:1f:2e:1b:
         17:e9:0b:57:4a:15:5a:cc:5e:29:f7:3c:06:20:10:cb:56:cf:
         c1:f3:eb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:32:14 2025 by rpki-client