Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer
File:                     8373C13408682E3BA48652A9BE590C5E4E4A0CFA.cer (raw, json)
Hash identifier:          zC2qvDXju1tdvx4BUDSSwNMlJ53OKiZEuEa6ClIg6W0=
Subject key identifier:   83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7B97C5E07A106585C0BA684C7987B7B49E0CFCB2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:45:05 +0000
Certificate not after:    Wed 04 Mar 2026 18:50:05 +0000
Subordinate resources:    AS: 269700
                          IP: 45.191.76.0/22
                          IP: 2804:688c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:97:c5:e0:7a:10:65:85:c0:ba:68:4c:79:87:b7:b4:9e:0c:fc:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:45:05 2025 GMT
            Not After : Mar  4 18:50:05 2026 GMT
        Subject: CN=8373C13408682E3BA48652A9BE590C5E4E4A0CFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:91:f5:d1:67:38:a4:39:fc:be:aa:0b:90:94:
                    52:b3:11:f2:54:b0:7e:5a:c3:53:53:52:66:23:09:
                    2a:1b:99:82:00:c2:4d:e9:d2:8a:c7:9a:9b:e6:9b:
                    b4:95:49:45:8f:9c:be:da:62:1d:73:4d:86:76:df:
                    a7:d4:51:44:bc:f3:b1:62:f6:f1:83:b5:11:ea:61:
                    ab:2c:59:81:b3:f9:3f:67:9d:76:db:ef:bc:97:fa:
                    9c:30:46:30:33:3d:b1:e7:e4:46:54:68:df:43:fd:
                    02:25:27:66:1e:d1:f6:a0:4d:69:ad:c0:8d:46:a3:
                    47:f4:7d:7e:6b:26:78:42:3e:d9:95:a5:d4:20:93:
                    3d:35:eb:6c:4b:66:cf:2e:b3:1e:c0:77:11:f2:e1:
                    9c:cd:17:81:a8:77:b1:ef:f0:73:41:97:25:71:0c:
                    77:b6:56:45:13:0e:bd:05:3b:85:55:3c:64:2d:4f:
                    3f:0b:11:6f:42:b5:4a:69:1e:c0:f9:50:01:5f:8b:
                    b9:4f:c7:b2:50:cd:62:c8:1d:f5:60:8d:0c:58:39:
                    92:e3:33:8e:bc:ef:e2:10:f0:9e:98:9f:f3:97:1b:
                    c6:7c:cc:32:78:73:91:dd:c5:b3:9b:92:39:fb:ee:
                    4e:61:09:2a:0e:26:54:d7:dd:64:d1:b0:3f:0f:a7:
                    de:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                83:73:C1:34:08:68:2E:3B:A4:86:52:A9:BE:59:0C:5E:4E:4A:0C:FA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ArcBrQpzFuTfEkHVFFqhMkvUYzA3RhSVTmt2svMD2Kqy/1/8373C13408682E3BA48652A9BE590C5E4E4A0CFA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.76.0/22
                IPv6:
                  2804:688c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269700

    Signature Algorithm: sha256WithRSAEncryption
         7e:f9:86:ce:40:9e:70:a4:d3:34:45:38:dc:bb:22:a1:ad:69:
         ee:c4:0d:06:29:c4:46:b2:be:fc:b2:72:4e:ee:3e:2c:df:95:
         7f:ab:71:6a:2e:81:b6:db:2a:9d:25:40:d6:6d:5e:e8:99:ec:
         26:aa:f4:d3:90:e3:bc:6a:c2:21:8e:e7:3c:14:01:e4:ec:90:
         0c:d3:4c:b2:cf:17:14:9e:2a:18:cd:6d:00:b4:92:c0:a4:d5:
         e4:93:3e:08:45:f4:01:f4:da:47:35:c3:4f:a6:eb:8f:ed:ce:
         76:61:62:0b:db:e6:96:3c:5f:98:30:88:b1:17:8c:34:4a:99:
         dc:f1:68:cd:69:9e:10:a6:75:32:70:9d:61:2c:a3:55:60:a5:
         59:1e:95:39:fc:df:a1:9f:63:30:7d:c8:84:28:34:af:dc:71:
         5e:6a:78:34:8d:b4:ca:af:35:d3:0c:3f:cb:12:53:11:ef:aa:
         46:f2:19:e8:81:b0:28:ef:c8:c2:ad:32:15:b6:74:81:3e:33:
         5e:1b:78:b6:3c:bb:98:5c:66:df:7c:96:c8:08:5c:5c:11:94:
         2e:fc:45:66:84:ed:85:62:41:75:9a:a7:81:83:11:15:a1:49:
         b1:9f:5c:3a:40:69:5d:af:0a:90:5e:66:36:33:f6:ee:56:79:
         5f:23:0c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:21:59 2025 by rpki-client