Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer
File:                     71E336AA1EADBE4A610866EDB4141D36A5B77C52.cer (raw, json)
Hash identifier:          wmafcWdGuZLqS6onshSuIJDWgaQAQ95dv2vApZS4E38=
Subject key identifier:   71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       02D5D42FA4B02E90B735160A10947A8962360183
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 15:00:29 +0000
Certificate not after:    Fri 06 Mar 2026 15:05:29 +0000
Subordinate resources:    AS: 263004
                          IP: 143.208.228.0/22
                          IP: 186.237.16.0/21
                          IP: 2804:2be4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d5:d4:2f:a4:b0:2e:90:b7:35:16:0a:10:94:7a:89:62:36:01:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 15:00:29 2025 GMT
            Not After : Mar  6 15:05:29 2026 GMT
        Subject: CN=71E336AA1EADBE4A610866EDB4141D36A5B77C52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f4:4b:bb:35:dc:b7:07:aa:7d:d9:ae:4c:90:
                    f4:35:4e:a5:3f:eb:62:15:12:a0:0a:de:5f:af:13:
                    c2:9c:65:dc:3b:4c:e1:5e:af:f3:4b:3e:fb:b3:25:
                    ba:c5:10:f3:7b:5d:55:89:38:0f:57:66:ec:d2:cc:
                    74:ad:36:bb:35:08:aa:4e:e8:07:8d:77:a6:e3:98:
                    5e:34:18:1d:b3:77:54:89:35:1e:8e:86:f4:49:8e:
                    b4:61:a4:96:f6:89:18:13:cb:c4:26:37:38:d3:78:
                    c7:67:ce:57:2e:b6:9f:cf:e7:05:c9:5c:1d:0f:f0:
                    d1:42:e8:4d:7f:14:39:39:6b:d6:6a:17:d9:4e:3b:
                    ee:ec:80:bf:4d:d9:61:2a:01:12:16:c2:d4:0b:f4:
                    49:46:f1:f6:51:52:9c:2a:86:ad:bb:1b:f0:df:44:
                    1a:f2:d3:ca:3a:94:20:3e:27:2b:b1:c9:07:84:27:
                    8c:33:16:ba:7f:d5:56:29:26:a8:9b:54:00:9e:b1:
                    64:04:a4:bc:43:e4:e3:6a:8c:e3:5c:fb:fb:04:48:
                    22:ff:69:5c:33:a5:9f:2f:00:87:2c:a6:94:f9:e0:
                    04:d3:a1:64:bd:92:85:6c:2f:df:c4:79:0a:ce:0e:
                    ab:51:a3:ac:9f:ef:4f:be:a8:75:1c:52:db:db:9e:
                    13:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:E3:36:AA:1E:AD:BE:4A:61:08:66:ED:B4:14:1D:36:A5:B7:7C:52
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9G6hwnXcxoGVjN1YkfUWrb3UyhKAptGL9pYj3wB9j9Ct/1/71E336AA1EADBE4A610866EDB4141D36A5B77C52.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.228.0/22
                  186.237.16.0/21
                IPv6:
                  2804:2be4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263004

    Signature Algorithm: sha256WithRSAEncryption
         0d:eb:aa:45:12:66:5d:b0:86:dc:16:05:70:ec:01:db:70:f0:
         63:59:12:8d:a8:0e:d3:ff:15:5f:e6:d4:92:97:fb:26:36:51:
         9f:ef:d7:fe:55:e9:28:37:d2:f6:8e:3a:cb:61:49:de:cf:86:
         67:a5:c8:69:81:85:ab:9a:45:f9:cc:4e:04:d3:32:5a:db:c0:
         c7:ab:d6:3e:da:ab:30:15:d5:e3:e4:24:be:a1:3e:80:68:6e:
         3f:3b:6a:93:a4:28:7c:df:26:2c:8b:d2:83:28:45:40:31:76:
         15:ab:86:a5:ad:e4:1b:09:f5:1e:65:4d:a8:29:67:be:37:bc:
         bd:02:49:24:35:67:f7:92:97:a3:40:a9:c9:be:aa:90:64:16:
         93:5c:6a:74:2d:b6:af:db:b4:1b:7e:6a:2f:54:ee:40:f6:ea:
         d9:0c:a9:ca:1d:f8:ef:ec:bb:d3:05:1d:7e:bf:d6:01:e8:a2:
         d4:8d:2f:9a:68:7b:65:99:fe:7b:11:de:a9:eb:04:05:77:fe:
         36:4a:d8:1b:a5:4b:ec:0c:73:1f:df:86:62:32:1d:ad:8f:65:
         3a:1c:0b:38:12:a1:91:ea:fb:be:fd:43:b8:ae:e8:82:71:25:
         7d:d7:26:0d:a9:ca:71:24:fa:ab:ec:9e:9c:01:98:8b:47:d4:
         41:7e:a1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:17 2025 by rpki-client