Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer
File:                     694BE45479B10BFCA7BB40A44C06B51D15F2D053.cer (raw, json)
Hash identifier:          7RM9domL3ipVzY8tovAPOGalpSHR257IqvxvSltnABQ=
Subject key identifier:   69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6FA8B0FABB2B6275331AB4F83DAE95BA5550730C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Mar 2025 01:17:19 +0000
Certificate not after:    Thu 26 Mar 2026 01:22:19 +0000
Subordinate resources:    AS: 262791
                          IP: 168.0.108.0/22
                          IP: 186.233.192.0/21
                          IP: 2804:220::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a8:b0:fa:bb:2b:62:75:33:1a:b4:f8:3d:ae:95:ba:55:50:73:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 27 01:17:19 2025 GMT
            Not After : Mar 26 01:22:19 2026 GMT
        Subject: CN=694BE45479B10BFCA7BB40A44C06B51D15F2D053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:93:39:6e:ff:99:23:89:91:31:ff:07:2e:1c:
                    a7:5e:54:58:f5:9c:af:07:93:48:e5:cb:cd:97:33:
                    d0:ed:3b:f3:54:64:b1:f1:b5:35:d0:3b:1f:1a:6e:
                    7b:9f:c2:ee:c4:24:18:7c:7d:bc:be:ba:f1:9c:11:
                    c7:d0:2e:c1:c0:79:a1:ca:ea:de:86:5f:f3:ec:42:
                    a8:8a:bd:da:1c:10:37:03:51:8f:04:b3:fe:c8:f2:
                    46:7d:0b:5f:42:da:9e:a4:5d:22:7f:ad:e7:40:ea:
                    77:eb:cf:a6:43:64:9b:0c:bc:5b:76:ca:88:be:cd:
                    e1:d8:42:0e:a8:b6:6e:53:89:c2:a6:94:96:05:92:
                    55:d5:c2:8d:25:e8:68:f6:cb:dc:b8:9a:df:ec:e7:
                    7d:f3:7d:99:1e:ff:85:6a:75:d3:dc:20:b3:8a:75:
                    33:90:a5:74:d1:6e:c2:34:58:61:bf:ce:c1:e3:82:
                    39:0e:b2:66:dc:26:4e:36:aa:60:a0:da:96:53:ca:
                    e9:6e:dc:5a:e7:c5:61:87:f4:cd:23:9d:0b:fa:24:
                    e2:e6:3b:3a:e4:ec:83:14:e6:3e:e8:fb:ca:09:9d:
                    64:85:5c:38:95:17:e2:cc:8a:fd:dd:fd:20:40:3d:
                    8b:e5:db:27:81:af:d7:11:46:ee:c2:3d:78:34:15:
                    07:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:4B:E4:54:79:B1:0B:FC:A7:BB:40:A4:4C:06:B5:1D:15:F2:D0:53
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3omDB3zxJW1e7nMZtJZVoeek2JTML34x1x2q1tKnmgXQ/0/694BE45479B10BFCA7BB40A44C06B51D15F2D053.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.108.0/22
                  186.233.192.0/21
                IPv6:
                  2804:220::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262791

    Signature Algorithm: sha256WithRSAEncryption
         cd:be:e3:5e:0d:13:a2:15:67:80:4e:dc:70:bc:f0:97:3e:65:
         b8:3e:bc:2a:bf:2b:90:8e:e7:93:45:9d:31:9c:b2:80:f7:59:
         a2:f5:3e:b5:8c:cd:db:2b:5d:ec:0f:4e:1c:76:ff:02:c2:b1:
         fd:2e:4b:dc:6e:91:5e:63:b0:70:c5:3f:1a:6c:18:e3:c9:6a:
         8d:dc:2e:f9:ae:65:69:a7:ad:3b:d8:a2:ec:31:53:91:ee:b3:
         f9:10:b0:ab:76:4d:f8:41:09:37:6b:33:74:8d:23:16:bd:29:
         fb:89:0e:b7:04:cc:ef:1f:e5:fb:02:08:46:a4:06:12:70:90:
         3b:b2:8e:53:ac:45:12:48:c1:e0:bd:61:39:9a:1b:81:b5:2e:
         9b:0a:ad:b7:a3:0c:af:fb:e1:72:1c:77:49:57:0d:e0:08:8b:
         59:d6:f2:03:e7:fc:dd:ab:75:3f:b5:b7:4f:38:18:ec:09:6d:
         9f:02:3b:f6:37:c8:7d:8d:6f:07:a2:69:cf:30:47:fa:c1:32:
         33:5d:73:92:2d:64:c9:82:53:f1:e8:7f:55:4e:a0:ba:d1:bd:
         b6:94:46:b9:11:77:4f:ab:db:81:61:10:66:78:74:14:3f:99:
         49:46:ca:34:ab:c3:a8:c1:ad:fa:e6:54:5b:cb:2b:5d:e2:b9:
         1c:7b:b9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:27:43 2025 by rpki-client