Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/545E87EB1E4C261C305886520F752BA4183E3A9C.cer
File:                     545E87EB1E4C261C305886520F752BA4183E3A9C.cer (raw, json)
Hash identifier:          o6MkqW4MQGrlEkzYuToTwrAJvzXABnK7Sr+APiODKy0=
Subject key identifier:   54:5E:87:EB:1E:4C:26:1C:30:58:86:52:0F:75:2B:A4:18:3E:3A:9C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       554A48A83C11495042852DE9998706298071E4B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8TgRJg1VZmU935LYCdJUCSdetnAi77GUjHB74PjV4xGw/1/545E87EB1E4C261C305886520F752BA4183E3A9C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8TgRJg1VZmU935LYCdJUCSdetnAi77GUjHB74PjV4xGw/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:27 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:27 +0000
Subordinate resources:    AS: 268747
                          IP: 45.171.40.0/22
                          IP: 2804:5a14::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:4a:48:a8:3c:11:49:50:42:85:2d:e9:99:87:06:29:80:71:e4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:27 2025 GMT
            Not After : Mar  4 18:40:27 2026 GMT
        Subject: CN=545E87EB1E4C261C305886520F752BA4183E3A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7a:d2:fd:53:ef:fc:f2:8c:54:da:42:c4:f9:
                    4e:7c:fa:63:ca:1d:1a:7c:e3:87:d6:4d:ed:07:22:
                    7f:f2:1f:d1:0a:8a:3e:0a:14:d4:d8:54:ec:78:f6:
                    26:16:03:b8:2e:64:c6:4e:e5:66:64:60:53:2a:50:
                    66:22:97:ad:d2:81:c0:3d:a2:4e:4c:02:a7:b8:05:
                    16:49:e6:79:5d:f0:e4:bc:ce:0d:43:ea:66:4a:ad:
                    06:23:98:a8:27:14:f3:10:95:bb:17:37:52:b5:36:
                    2f:d4:46:97:64:f8:6b:3f:d1:f9:77:7f:8b:b8:38:
                    78:25:05:e7:da:8a:a1:6d:41:f4:e9:35:aa:13:e5:
                    e4:f4:ec:43:b4:e9:66:91:0f:5f:e9:57:0b:8a:1f:
                    86:cf:ad:76:96:f1:9d:69:71:58:a1:12:00:b3:58:
                    ee:de:03:b6:8f:b1:be:c9:37:85:ed:31:64:43:b0:
                    56:e2:b5:58:87:1f:1e:f1:84:c5:57:bf:86:2e:bc:
                    52:c7:39:31:a9:43:c6:59:96:e0:4c:b1:d2:2d:16:
                    6a:68:98:b3:fd:6e:24:e0:0e:95:08:f2:0f:fd:f4:
                    0b:bd:8c:06:5a:03:d3:af:fd:ec:6c:ab:41:ee:e6:
                    a3:c4:67:7b:93:b1:cd:ef:fa:3a:c2:8a:6e:3c:e8:
                    63:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:5E:87:EB:1E:4C:26:1C:30:58:86:52:0F:75:2B:A4:18:3E:3A:9C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8TgRJg1VZmU935LYCdJUCSdetnAi77GUjHB74PjV4xGw/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8TgRJg1VZmU935LYCdJUCSdetnAi77GUjHB74PjV4xGw/1/545E87EB1E4C261C305886520F752BA4183E3A9C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.40.0/22
                IPv6:
                  2804:5a14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268747

    Signature Algorithm: sha256WithRSAEncryption
         d3:c5:d2:d5:27:81:51:f1:e1:8e:2e:8b:78:33:8b:26:4e:d8:
         07:25:69:0f:13:16:b3:90:6e:3e:37:58:4e:81:69:11:12:68:
         de:b7:3b:8d:3a:03:84:51:31:18:7c:7a:ca:92:ea:94:c6:37:
         7f:18:b6:b7:a7:71:28:43:07:0e:31:1d:f8:6a:19:2d:2a:bb:
         c0:94:67:07:11:85:da:27:4e:69:72:db:ce:aa:b6:90:a6:b6:
         9f:c6:a1:b3:82:fc:d6:b6:29:f9:bd:fa:a0:26:73:52:5c:19:
         0c:e5:d4:c2:9f:60:c9:21:81:c0:d2:59:3e:7a:b4:9d:f9:b4:
         6e:88:ba:f6:14:be:38:c0:58:26:65:bf:dc:62:e2:b0:3c:0c:
         fd:7a:01:37:fe:6f:18:8e:a7:5d:85:c0:14:3b:48:a8:b1:05:
         29:4c:19:8c:90:28:a8:4f:eb:68:51:86:3f:3d:a7:e7:d7:21:
         1b:23:25:2d:c1:9e:fc:fc:75:0c:6b:9e:d3:01:5e:bd:59:01:
         5a:7a:89:32:6d:05:da:fb:8b:f3:21:ec:22:5d:52:d8:96:0f:
         3e:a7:e0:d1:9a:29:f6:d1:49:d7:e0:dd:de:83:40:cb:40:a3:
         b7:f6:8c:f3:14:4a:d6:22:7c:53:62:d1:dd:3f:c2:15:92:bf:
         90:7b:89:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:23:36 2025 by rpki-client