Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/530AA7DD3778859AD9102696F2AD70D18F3BECA8.cer
File:                     530AA7DD3778859AD9102696F2AD70D18F3BECA8.cer (raw, json)
Hash identifier:          bt1mVjWMqtbs2aClN1guaYG0TOeqskI5n2Tvyk6iVtg=
Subject key identifier:   53:0A:A7:DD:37:78:85:9A:D9:10:26:96:F2:AD:70:D1:8F:3B:EC:A8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       423F8FC594BA32083963AB130E599B8F71F5F277
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/1/530AA7DD3778859AD9102696F2AD70D18F3BECA8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 14:01:29 +0000
Certificate not after:    Fri 06 Mar 2026 14:06:29 +0000
Subordinate resources:    AS: 271280
                          IP: 190.12.152.0/22
                          IP: 2804:7904::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:3f:8f:c5:94:ba:32:08:39:63:ab:13:0e:59:9b:8f:71:f5:f2:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 14:01:29 2025 GMT
            Not After : Mar  6 14:06:29 2026 GMT
        Subject: CN=530AA7DD3778859AD9102696F2AD70D18F3BECA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:17:b9:44:90:73:5d:6c:74:fc:89:82:27:
                    bc:76:03:6e:3e:9b:d2:cf:47:c9:4b:ca:e9:3a:a8:
                    eb:58:e5:e6:10:fc:50:a3:d7:49:57:69:ca:16:38:
                    78:90:d6:48:66:ce:05:a3:49:60:af:91:0b:22:e8:
                    31:21:45:26:66:26:59:a5:69:ed:00:b2:19:eb:9e:
                    ba:84:36:ab:85:42:a8:99:38:4a:3d:c8:3f:84:29:
                    e9:f5:77:e8:ad:53:c7:86:cd:8c:59:40:57:14:fa:
                    4b:9f:1a:b8:54:27:ab:dd:29:f1:27:7d:68:f9:61:
                    77:19:4b:48:cc:f1:5e:9f:85:fd:1a:36:93:d7:b5:
                    a8:d3:5d:aa:dd:5c:37:cb:64:0a:f2:fb:5b:5b:e0:
                    e9:ae:7b:98:db:26:bd:82:b0:0e:2d:b0:c2:bf:b0:
                    70:32:db:4f:45:47:3e:8f:9c:77:3b:a4:b9:8f:02:
                    d6:68:e2:17:2e:2a:31:18:f1:17:65:4a:9c:df:4a:
                    64:27:46:3a:47:a6:0e:04:9c:72:93:47:47:e3:1b:
                    02:76:1b:4f:e6:cf:76:3c:8c:56:f1:53:12:7e:2f:
                    da:91:2d:f8:c8:50:7d:59:0d:5e:5b:98:74:f5:ee:
                    ae:3c:5e:f9:77:81:c7:ac:c7:5e:e6:f3:35:58:5f:
                    a2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:0A:A7:DD:37:78:85:9A:D9:10:26:96:F2:AD:70:D1:8F:3B:EC:A8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/1/530AA7DD3778859AD9102696F2AD70D18F3BECA8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.152.0/22
                IPv6:
                  2804:7904::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271280

    Signature Algorithm: sha256WithRSAEncryption
         4e:b1:bc:07:49:4f:6e:e0:8a:73:c2:da:9e:62:ad:34:e6:3c:
         ee:b6:1c:46:cc:ea:b3:24:23:93:36:43:b4:c6:d2:85:8d:f0:
         1c:e3:11:8c:e9:d8:f0:59:1c:c2:ff:89:89:de:c8:be:9c:04:
         42:a8:96:11:2c:38:ee:18:91:24:b9:ef:a6:0d:2b:c4:fc:5e:
         5a:1e:d3:b2:c1:87:cc:71:56:ad:e9:39:32:f7:37:80:1d:b5:
         4f:43:16:73:08:2d:a7:8f:4e:bc:9d:32:14:db:c5:64:2c:88:
         43:52:1b:02:23:00:69:49:9f:b9:17:6a:2d:d9:03:01:3d:fb:
         f2:75:36:d1:ac:99:52:f7:c6:54:a4:ff:f3:06:c9:99:f4:92:
         76:a5:a1:03:11:23:14:3a:ce:40:e0:7b:c7:66:0a:b4:24:85:
         6d:fc:8e:85:5f:58:e1:aa:34:8c:3b:7b:14:f2:ae:2c:2e:90:
         f2:79:5d:d9:6c:64:e5:f3:1f:4e:86:3a:60:5c:73:48:e1:18:
         15:43:15:5f:2a:06:ed:74:4d:d0:ce:47:43:de:ce:a6:b8:29:
         80:7d:8a:22:2f:0c:1e:f8:f8:53:f6:ec:4e:b6:9d:7e:d2:cf:
         87:48:69:ac:03:81:45:c2:32:6f:b7:27:e2:09:8a:1f:b1:5c:
         3d:54:03:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:22:09 2025 by rpki-client