Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5E82705FF857324984E1087AAFCCE6BD46657C71.cer
File:                     5E82705FF857324984E1087AAFCCE6BD46657C71.cer (raw, json)
Hash identifier:          7i2rkzVrp1Ywtvl49ipKl21BGoGkhOJHRwemW7f7v8Y=
Subject key identifier:   5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4CBE2235BF973E53F1ED95E67DC476D03DAC8618
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Mar 2025 06:25:57 +0000
Certificate not after:    Thu 26 Mar 2026 06:30:57 +0000
Subordinate resources:    AS: 263450
                          IP: 168.232.156.0/22
                          IP: 177.91.232.0/22
                          IP: 2804:1200::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:be:22:35:bf:97:3e:53:f1:ed:95:e6:7d:c4:76:d0:3d:ac:86:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 27 06:25:57 2025 GMT
            Not After : Mar 26 06:30:57 2026 GMT
        Subject: CN=5E82705FF857324984E1087AAFCCE6BD46657C71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:ef:a7:ff:ff:e2:e4:f4:1f:8a:e0:40:ca:
                    dc:74:28:0b:27:4d:08:36:32:b6:50:5f:ae:a7:85:
                    9e:85:12:a3:cd:71:21:9e:e4:7a:31:dc:7d:b1:09:
                    ba:30:50:b9:26:87:ec:99:d2:e8:1a:f1:e7:09:76:
                    68:22:74:b8:d8:40:96:f9:05:d8:67:77:21:89:78:
                    31:a1:59:98:69:b6:6f:ff:39:85:57:09:e9:95:55:
                    7a:3f:b9:ac:22:e9:a5:78:c9:be:d4:28:0a:d8:bb:
                    19:94:fe:41:1e:f9:a3:ad:43:e4:5d:04:e5:4b:e2:
                    9d:ae:7a:be:62:04:6a:9f:d0:2a:76:a8:85:d4:af:
                    27:ea:ea:24:1f:97:49:0f:60:43:45:7f:28:b1:7e:
                    16:ea:7f:ec:80:c4:84:f9:a4:f6:e5:8a:11:58:f0:
                    23:48:f9:bf:fd:50:d2:28:20:c8:a5:0f:c5:8a:e1:
                    8c:32:ff:72:8a:8b:7a:27:35:e2:6f:48:ae:ae:84:
                    04:4d:b5:fe:2a:d2:3b:f2:e9:33:ee:49:34:70:3e:
                    4c:a0:78:d1:5b:b8:1f:fa:2a:75:4d:3c:d5:73:50:
                    6a:ac:0a:8a:0f:76:6e:fa:95:53:bc:84:f1:4e:67:
                    a9:e0:77:9c:61:f2:ad:74:cd:5c:d7:b3:ee:92:2c:
                    9c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5E:82:70:5F:F8:57:32:49:84:E1:08:7A:AF:CC:E6:BD:46:65:7C:71
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ZRi9J7cJMUBmsyBsaBLaRtRRSgFPZQ4fDwkkGekxqUC/0/5E82705FF857324984E1087AAFCCE6BD46657C71.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.156.0/22
                  177.91.232.0/22
                IPv6:
                  2804:1200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263450

    Signature Algorithm: sha256WithRSAEncryption
         2e:33:6f:57:86:2d:fa:1a:dd:7d:9d:53:d4:5c:0b:54:73:b1:
         e3:f7:b7:60:8b:ea:51:25:18:ef:0d:ed:20:6b:86:c6:1e:b8:
         b0:f7:76:5f:68:d4:d5:d2:d0:d1:e7:c5:51:a5:fe:b2:01:bb:
         42:39:cf:3c:11:bb:af:ee:41:3c:fa:2c:0e:42:db:5d:5d:13:
         85:b6:c2:e2:c4:bb:74:f0:af:66:dd:bb:d2:b6:36:e8:34:af:
         1a:4c:e2:ed:3f:bc:37:8c:44:74:21:57:23:4f:79:a2:e3:64:
         67:08:25:74:ae:6e:4a:f2:f8:cc:35:fc:b9:3b:ee:d8:42:b4:
         34:29:8e:aa:94:6e:de:0e:27:73:a5:a0:9b:d1:97:cb:95:e7:
         d3:10:92:7a:d6:c1:4e:05:45:2d:27:d5:b5:4e:26:5d:8b:c5:
         c6:23:ea:13:f4:ef:27:36:78:06:51:0f:1d:97:09:2b:20:75:
         a7:f9:e8:c0:f5:f7:4e:58:f0:e1:7b:0b:0a:b0:79:78:f1:29:
         b1:b6:db:40:66:36:b3:dc:d5:98:24:3b:4c:de:5c:a0:c3:5c:
         ae:95:57:a2:d4:8e:1b:79:e7:9a:16:a7:00:86:9a:a9:7e:25:
         c7:a5:ae:85:b0:8b:ba:75:26:52:4a:b2:de:93:2f:7d:a0:c2:
         e2:41:75:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:34:08 2025 by rpki-client