Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/591A5E28538FC2E6A42ED311941B9D128D78D596.cer
File:                     591A5E28538FC2E6A42ED311941B9D128D78D596.cer (raw, json)
Hash identifier:          LWqqKCDJXOtYe6pzT41E6/wkiDh4nbJ3wyJLlWhtd1g=
Subject key identifier:   59:1A:5E:28:53:8F:C2:E6:A4:2E:D3:11:94:1B:9D:12:8D:78:D5:96
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2CA73D9DC6AF371EBC7F168CB71CABC4123DBAF5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/591A5E28538FC2E6A42ED311941B9D128D78D596.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 04:09:13 +0000
Certificate not after:    Fri 06 Mar 2026 04:14:13 +0000
Subordinate resources:    AS: 14346
                          IP: 200.196.192.0/19
                          IP: 2801:80:f0::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a7:3d:9d:c6:af:37:1e:bc:7f:16:8c:b7:1c:ab:c4:12:3d:ba:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 04:09:13 2025 GMT
            Not After : Mar  6 04:14:13 2026 GMT
        Subject: CN=591A5E28538FC2E6A42ED311941B9D128D78D596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:48:2d:dd:b6:10:38:d0:e8:24:aa:65:33:6a:
                    1e:6a:c2:61:27:97:58:41:5e:b5:8c:9f:46:69:d9:
                    06:30:a0:69:79:d8:f1:db:2a:08:d6:3b:2e:7b:56:
                    33:3f:6b:3f:6b:40:50:b3:fa:36:06:b7:63:96:03:
                    7d:3c:c1:02:c5:e5:2e:c1:3c:a6:f1:69:b6:bd:e2:
                    9f:9f:a4:c3:1c:cb:c8:1d:01:cc:78:34:ed:6f:52:
                    e1:7f:fd:19:a9:af:db:e8:b1:84:b1:49:9d:f0:78:
                    33:12:2c:06:04:87:e7:4c:43:4c:10:b2:74:60:6b:
                    42:d2:42:06:e0:2c:87:98:68:c5:e9:46:d7:40:5b:
                    be:fa:ba:52:18:be:a6:af:1a:ae:b6:32:34:e5:70:
                    a7:58:6c:3f:9f:d0:ac:8c:79:88:16:db:05:25:46:
                    ed:8b:69:2d:df:3f:31:13:1c:88:2d:d9:55:a4:a0:
                    1a:24:84:65:3e:88:f2:7a:08:97:3b:05:9d:02:ac:
                    07:81:6d:89:1e:29:70:c3:65:73:50:8f:55:c7:37:
                    d9:65:ca:87:8a:da:81:e6:6c:e5:8a:99:0b:d8:71:
                    69:c6:b5:11:62:91:c8:38:1a:61:d1:74:0c:90:7f:
                    c0:8f:2d:87:2f:d0:98:ca:8e:13:1c:5e:ff:08:7d:
                    ee:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                59:1A:5E:28:53:8F:C2:E6:A4:2E:D3:11:94:1B:9D:12:8D:78:D5:96
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8hgGAdCbS3u5VtXfhrv6omPLXyrGYAA3aketkL2ZZiy4/1/591A5E28538FC2E6A42ED311941B9D128D78D596.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.192.0/19
                IPv6:
                  2801:80:f0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14346

    Signature Algorithm: sha256WithRSAEncryption
         ad:95:a5:3f:d9:db:34:de:6a:5f:f1:33:15:1a:38:ac:56:e2:
         36:fc:fd:9c:23:d3:07:85:3c:0c:eb:1a:e9:25:61:f8:ed:19:
         25:c6:f1:05:25:f6:b0:52:60:96:c0:80:4c:28:c5:45:bb:4a:
         90:34:87:6e:de:21:79:96:14:e8:70:65:33:1c:de:fd:7d:00:
         46:45:f4:74:24:fc:c3:52:74:c4:e3:80:63:79:ea:29:70:bb:
         6a:06:89:97:58:3e:9e:55:be:cf:3d:36:a2:03:ac:aa:7f:00:
         af:9f:dd:3e:0e:e6:58:a6:4e:7e:f6:ad:07:5a:eb:ed:32:7d:
         b2:78:dd:a1:a3:b1:37:37:87:4c:7c:24:8b:98:b1:9c:1d:77:
         04:9c:77:84:88:e5:b9:e8:28:91:43:66:a8:dd:3b:0e:25:f1:
         4e:75:de:8d:3b:5e:62:ef:49:d8:4e:59:b4:fe:37:91:37:2f:
         43:76:85:a7:89:f4:f9:43:f7:74:ba:82:00:27:be:3c:c4:01:
         23:9e:c4:8b:d4:c2:bd:99:dc:7b:14:da:be:74:f6:70:d7:53:
         72:9a:52:2c:be:5e:d6:0b:65:71:24:c5:58:98:a0:ac:4f:b8:
         ff:fe:7c:f4:3b:69:f6:4c:47:6f:e1:b3:b5:56:01:75:a6:d8:
         13:07:4b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:00:26 2025 by rpki-client