Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5E1114F349B885222E5B551B7066E55CEE43A516.cer
File:                     5E1114F349B885222E5B551B7066E55CEE43A516.cer (raw, json)
Hash identifier:          yFL2l0JkxFXXSyNdrIe0ZDBBDnQQLZXVQDRhRY6qWvE=
Subject key identifier:   5E:11:14:F3:49:B8:85:22:2E:5B:55:1B:70:66:E5:5C:EE:43:A5:16
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4085957367D50DB1E97AFC0D711825FBD0FD4D11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/1/5E1114F349B885222E5B551B7066E55CEE43A516.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 15:46:00 +0000
Certificate not after:    Fri 06 Mar 2026 15:51:00 +0000
Subordinate resources:    AS: 268687
                          IP: 45.165.140.0/22
                          IP: 2804:5510::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:85:95:73:67:d5:0d:b1:e9:7a:fc:0d:71:18:25:fb:d0:fd:4d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 15:46:00 2025 GMT
            Not After : Mar  6 15:51:00 2026 GMT
        Subject: CN=5E1114F349B885222E5B551B7066E55CEE43A516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5f:7f:85:8f:0b:15:1e:d3:dd:7f:e3:d2:2e:
                    8f:f3:7e:4f:e8:bf:39:1f:70:49:28:52:18:bb:78:
                    9c:7f:e0:7d:a7:f3:4c:04:59:66:d1:f3:8d:05:33:
                    b6:92:60:f4:70:d2:15:0b:23:c7:67:63:e5:97:62:
                    b7:2b:73:10:1e:33:82:dd:b0:73:45:d3:57:65:2e:
                    72:c0:6c:ac:22:4f:55:bb:08:67:29:b7:dd:91:d4:
                    33:78:9a:10:f3:74:62:76:e3:f8:27:ec:25:7e:f7:
                    26:44:86:c3:65:68:8d:af:9a:5e:1a:6a:e8:23:27:
                    92:6a:71:4d:87:36:09:40:b0:9c:bc:83:62:20:0c:
                    37:81:36:4b:a4:a8:e1:92:6d:b6:ba:5b:ae:8f:a8:
                    8e:3e:1d:e1:7a:0d:44:2f:f6:ad:fe:4a:e8:0d:e4:
                    c4:7d:76:b9:58:1e:77:05:c4:57:9b:32:e2:1b:da:
                    18:60:9d:f0:31:5d:d0:84:bc:e4:d8:3e:50:5e:3f:
                    93:77:9b:24:91:45:a1:ea:a4:96:4b:18:ed:4b:e1:
                    14:a3:ea:c2:37:ae:a6:72:61:41:6f:1c:78:6a:4b:
                    cc:c2:b4:50:6a:79:b5:25:f5:d5:ce:3a:42:5d:45:
                    ea:15:5c:74:64:0e:98:bd:02:64:f2:54:6e:74:f6:
                    92:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:11:14:F3:49:B8:85:22:2E:5B:55:1B:70:66:E5:5C:EE:43:A5:16
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8awtV8rwB6CjQZP5q1FHmbGYT7m5VunV7NcvdRJt9PEo/1/5E1114F349B885222E5B551B7066E55CEE43A516.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.140.0/22
                IPv6:
                  2804:5510::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268687

    Signature Algorithm: sha256WithRSAEncryption
         b1:de:9d:39:a2:43:b9:6e:66:cd:2f:b9:97:5f:9b:72:23:68:
         00:ff:28:78:14:3e:aa:5c:1e:0c:cf:d3:8d:24:51:27:b1:fa:
         5c:94:05:ca:49:4e:ed:84:48:00:59:58:2f:6e:80:11:70:c7:
         1f:d3:b0:4b:d9:cb:72:72:df:40:9e:58:78:37:5c:90:db:8b:
         80:64:12:ec:64:4c:bc:20:5e:97:6a:75:09:0f:06:c0:42:6e:
         62:51:ae:aa:a4:6d:da:22:a0:ac:3e:ad:35:d5:25:2b:1c:bb:
         19:13:4e:3e:1e:aa:47:c5:e0:74:92:5e:60:29:80:fc:9e:c1:
         05:91:ca:66:45:0c:8f:78:e5:8b:0f:71:41:5b:67:6b:af:e6:
         f9:d5:3a:29:59:3b:db:04:45:ec:4c:f0:74:de:3f:35:2b:bc:
         36:aa:74:b0:63:99:d9:ad:6d:84:8d:3d:de:e2:da:c1:24:9c:
         a0:94:28:07:6e:b2:9e:ae:ae:2f:43:c1:05:31:99:9e:82:7f:
         59:7b:ad:12:42:b1:b7:b2:c6:98:f2:42:b8:0f:7c:7b:96:cb:
         e6:7c:a7:c2:3d:87:7f:61:02:84:50:31:33:9a:e8:f1:dc:28:
         bf:24:84:50:c5:47:56:a4:52:f1:c1:d2:d6:7b:e8:ac:a2:4d:
         56:72:d5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:50:48 2025 by rpki-client