Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/53AE4C1D924B860BE87CF0663D8D38DF05783F7D.cer
File:                     53AE4C1D924B860BE87CF0663D8D38DF05783F7D.cer (raw, json)
Hash identifier:          Eb2iFBvnepLWJTpSPC2eedne94nUvAuPWoggF99yO7Y=
Subject key identifier:   53:AE:4C:1D:92:4B:86:0B:E8:7C:F0:66:3D:8D:38:DF:05:78:3F:7D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       34499A9066A19B097C880A83D48260483D29390A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/53AE4C1D924B860BE87CF0663D8D38DF05783F7D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Jan 2025 20:03:51 +0000
Certificate not after:    Tue 13 Jan 2026 20:08:51 +0000
Subordinate resources:    AS: 270954
                          IP: 201.49.240.0/22
                          IP: 2804:7408::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:49:9a:90:66:a1:9b:09:7c:88:0a:83:d4:82:60:48:3d:29:39:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 14 20:03:51 2025 GMT
            Not After : Jan 13 20:08:51 2026 GMT
        Subject: CN=53AE4C1D924B860BE87CF0663D8D38DF05783F7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6f:6d:dd:9a:61:69:40:b0:71:0f:50:da:ad:
                    c0:00:bd:30:7d:ac:07:eb:86:f5:b9:f8:5d:f4:ae:
                    63:c8:38:5a:1d:e2:64:4a:ed:66:f8:5e:26:d7:41:
                    0b:a6:8c:cc:5e:a9:e9:75:27:77:a9:b8:66:15:dd:
                    5d:bf:b5:42:2a:cc:74:6d:50:c0:60:fe:45:d4:3a:
                    47:91:47:ae:49:2b:91:23:0a:42:e0:7f:8a:91:14:
                    ef:bc:89:68:c9:fa:ca:1c:62:e8:81:4b:81:18:9f:
                    57:11:80:42:1e:18:62:f0:92:10:e3:14:7f:4a:da:
                    2a:78:6d:2c:82:39:bd:94:42:62:e2:23:2d:b1:7e:
                    31:ff:78:17:c7:5f:ea:79:d7:93:69:dc:04:2e:f8:
                    fc:b6:d2:ae:5c:d9:8d:8e:9e:4e:45:cc:a5:34:31:
                    33:e0:e0:1d:cb:a8:79:24:8f:7c:d5:35:75:b9:06:
                    b7:20:d0:f8:46:5e:35:0d:8b:3f:0f:cc:eb:09:f6:
                    f2:39:a1:e1:18:23:15:5d:69:30:c5:8c:c6:29:3c:
                    62:23:9d:bd:e5:3f:bc:db:ef:a7:7a:9b:e6:94:98:
                    8d:68:b4:7d:bb:65:0b:32:9b:38:58:3e:58:09:0e:
                    02:ec:c8:45:62:2d:35:68:78:71:7b:06:22:3c:84:
                    3e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:AE:4C:1D:92:4B:86:0B:E8:7C:F0:66:3D:8D:38:DF:05:78:3F:7D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BgEY67vY2vWjEbKCn7LMosJ2Lu6wzYqeZ1TMkD628r5C/0/53AE4C1D924B860BE87CF0663D8D38DF05783F7D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.240.0/22
                IPv6:
                  2804:7408::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270954

    Signature Algorithm: sha256WithRSAEncryption
         85:23:ba:0d:ee:c1:7e:6d:e3:ce:2f:8e:ba:68:49:d5:eb:ba:
         6a:d7:85:ed:5a:77:4d:9b:14:69:7d:1a:6d:e2:64:9f:dc:a2:
         bf:7a:d7:3d:4a:d2:ca:ff:b7:1f:91:1a:8e:bb:d9:88:d0:d6:
         9a:5a:66:09:6b:87:44:a3:e1:e7:7d:0c:09:68:dd:db:85:6c:
         00:fb:30:0a:f5:78:82:99:6d:56:d2:7c:d7:6e:62:57:e7:51:
         dc:92:e3:41:7c:57:96:a9:df:42:26:33:16:46:b2:8d:38:74:
         f0:d8:0f:ee:76:44:60:c7:a1:3f:48:30:fa:d4:b2:a8:2f:19:
         71:f6:a9:aa:4b:c9:74:1c:1f:c0:f4:f2:0e:de:4e:66:98:ee:
         4c:67:b3:09:26:90:71:56:a4:1c:fe:bf:4c:f6:87:30:26:7b:
         77:ae:ab:d9:4a:e6:27:c2:c2:a8:49:2a:4c:41:e0:6e:74:83:
         3f:30:b6:1c:41:5c:b4:f0:a6:4a:9f:35:34:d1:3b:e1:06:04:
         32:c3:7c:76:a1:19:23:45:17:bf:e4:18:50:0e:b0:02:b4:f4:
         3e:f3:bb:33:65:db:0e:3f:3e:1c:62:f6:60:a7:bd:a0:b9:a8:
         32:33:cd:5c:cc:6e:50:25:6e:00:01:f5:e4:19:a9:6e:2d:05:
         45:33:0f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:02:54 2025 by rpki-client