Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/83DB8824320D38B985E019F808C2A0AAB470FB37.cer
File:                     83DB8824320D38B985E019F808C2A0AAB470FB37.cer (raw, json)
Hash identifier:          BrO7L7YfFU2R9xvCIB2H1xzJrp+kclnQE738uCFqY7U=
Subject key identifier:   83:DB:88:24:32:0D:38:B9:85:E0:19:F8:08:C2:A0:AA:B4:70:FB:37
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0867DAF4CA10815DF2C90AF1FFC04689362F4633
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/83DB8824320D38B985E019F808C2A0AAB470FB37.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 00:32:08 +0000
Certificate not after:    Fri 06 Mar 2026 00:37:08 +0000
Subordinate resources:    AS: 270460
                          IP: 200.50.220.0/22
                          IP: 2804:6c54::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:67:da:f4:ca:10:81:5d:f2:c9:0a:f1:ff:c0:46:89:36:2f:46:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 00:32:08 2025 GMT
            Not After : Mar  6 00:37:08 2026 GMT
        Subject: CN=83DB8824320D38B985E019F808C2A0AAB470FB37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ce:41:8f:fd:f4:ee:49:95:c2:21:02:3f:8c:
                    eb:80:6e:a7:8d:dd:15:49:0a:6d:3f:af:58:fe:75:
                    c1:52:cf:af:f1:a7:21:7d:75:e3:06:52:1c:76:e2:
                    0f:88:31:32:10:0c:3a:f8:e6:5b:73:6f:22:bd:93:
                    86:40:fb:e8:bd:9d:49:0c:a1:46:be:2b:6c:28:6f:
                    d3:d6:91:50:37:27:06:6f:67:0b:2c:d0:d1:fb:05:
                    fb:ef:6b:30:32:5d:2d:25:1d:24:08:23:ec:77:b6:
                    39:03:f5:d5:f0:ed:90:c8:b5:1f:fb:03:b4:51:d8:
                    c6:48:a4:7f:79:ac:13:57:67:d6:da:49:21:6f:bc:
                    8f:f8:f9:87:67:11:db:96:d5:76:f9:7e:af:ba:aa:
                    b5:be:ef:ee:30:ec:49:ec:e8:ea:a3:e9:74:09:9c:
                    b6:51:93:b2:d1:f6:0c:50:b9:46:1d:22:be:c6:f7:
                    3a:7b:81:a4:13:6b:72:59:88:2c:f9:37:ef:e7:15:
                    78:c8:da:71:b3:b0:78:f3:34:12:ef:6e:85:d3:7b:
                    d9:74:c0:90:57:1b:74:65:bf:8c:73:38:e4:a4:fc:
                    60:5b:4f:a5:8c:0f:5c:0f:8d:94:7e:03:66:fa:f7:
                    f4:6c:05:b0:9d:1a:09:19:9c:56:c3:84:a4:6e:66:
                    f1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                83:DB:88:24:32:0D:38:B9:85:E0:19:F8:08:C2:A0:AA:B4:70:FB:37
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DQTnSerBe5MQC1kJ2ZnJrmEEm9uLksbkQJh99jNtNEJc/1/83DB8824320D38B985E019F808C2A0AAB470FB37.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.220.0/22
                IPv6:
                  2804:6c54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270460

    Signature Algorithm: sha256WithRSAEncryption
         71:86:45:b4:ba:84:a0:ad:ef:73:96:d7:af:65:5a:f5:88:b7:
         03:56:ce:dd:9f:e2:cb:9d:1a:54:d6:91:f5:f4:73:67:06:d8:
         72:49:22:2b:6b:93:4d:fe:d2:79:9d:da:20:ee:5b:55:ac:71:
         dd:29:b9:96:8a:b1:dc:f2:da:4b:8a:22:47:40:46:8b:0e:53:
         10:d3:50:f8:f0:81:7f:d7:19:75:dc:dd:d7:af:b0:ae:ef:fe:
         a5:5c:46:ef:17:fa:8a:35:72:e5:94:5b:97:57:2e:d2:d7:c2:
         87:6e:b3:17:43:d6:f4:0d:a3:81:73:ae:06:db:bd:cd:2e:a1:
         f2:7e:54:14:4e:69:c0:ae:b0:d9:5a:56:56:5a:2d:4e:44:63:
         2d:46:6a:9c:14:aa:28:8d:0a:55:64:8e:fc:4d:61:1b:4f:a7:
         a1:0f:f6:ea:65:89:d7:ca:6a:92:f6:b7:26:68:ad:f8:fe:51:
         6c:95:24:be:a0:3d:d0:ed:a4:39:9b:fd:35:5f:dc:7c:71:d8:
         6b:50:b6:70:ba:c4:6e:1d:30:fe:c8:00:ed:81:aa:c5:b5:02:
         7f:5f:89:85:e2:16:a2:9e:23:9c:2b:33:7e:e8:ce:c9:15:d4:
         77:57:e6:77:32:63:8d:b1:83:f8:e3:40:77:1d:5d:a4:a3:47:
         c2:18:c1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:47 2025 by rpki-client