Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/841C90889EF2740616BDCD520B31777D63885648.cer
File:                     841C90889EF2740616BDCD520B31777D63885648.cer (raw, json)
Hash identifier:          rIMeAa2qvhPwKzIWclEntDyImlkAwG7YGQAjBUrjaJk=
Subject key identifier:   84:1C:90:88:9E:F2:74:06:16:BD:CD:52:0B:31:77:7D:63:88:56:48
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       49ADCBFD41FCB5FE43E7E96AA4E206C35B4CFFE1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GYsqDo2wxxxvjTJGudAqhK1N3NYiCZGsenUmMxKdmsvZ/0/841C90889EF2740616BDCD520B31777D63885648.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GYsqDo2wxxxvjTJGudAqhK1N3NYiCZGsenUmMxKdmsvZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Jan 2025 18:07:42 +0000
Certificate not after:    Tue 06 Jan 2026 18:12:42 +0000
Subordinate resources:    AS: 269321
                          IP: 45.183.72.0/22
                          IP: 2804:62d4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:ad:cb:fd:41:fc:b5:fe:43:e7:e9:6a:a4:e2:06:c3:5b:4c:ff:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  7 18:07:42 2025 GMT
            Not After : Jan  6 18:12:42 2026 GMT
        Subject: CN=841C90889EF2740616BDCD520B31777D63885648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1f:b9:89:27:8d:4a:33:07:96:9f:d2:02:88:
                    37:b2:67:37:dd:96:42:37:34:25:cb:63:c6:f1:09:
                    4a:a8:71:8c:ba:70:68:1c:8e:44:22:31:02:55:d2:
                    60:21:c3:f4:c9:66:e7:3a:47:30:35:93:17:a3:2d:
                    67:7f:4d:ca:4a:ab:2f:b0:47:d2:ec:cc:50:d3:2f:
                    97:a1:69:89:90:df:0f:32:b2:5c:3f:b7:a4:e6:72:
                    19:06:87:3b:10:39:ff:11:a5:cf:2d:ba:7f:d5:c4:
                    ca:8a:81:ea:6e:38:d1:cd:4e:f1:53:ec:63:73:05:
                    f4:dc:11:ce:93:d2:39:a8:77:45:39:4d:f0:6b:de:
                    75:32:a2:8f:a0:b2:aa:4e:df:04:e8:73:2e:c5:63:
                    7a:75:6d:2c:1b:d9:de:28:48:74:65:3e:ad:51:b5:
                    7f:b1:41:6a:fc:e9:0f:f8:1d:bf:93:6e:0d:a4:bd:
                    84:e3:dc:00:a1:c9:09:8f:e6:23:ca:44:23:86:7f:
                    60:9c:84:8a:c5:36:83:3b:a3:28:6d:fc:31:29:b3:
                    e5:59:33:9a:85:d1:7d:25:35:27:67:28:a5:0d:a1:
                    4f:98:2f:09:56:31:1a:a4:b0:80:00:f5:1f:2a:fb:
                    b1:bd:83:15:d4:2f:24:ba:60:c1:8d:09:96:05:56:
                    7e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                84:1C:90:88:9E:F2:74:06:16:BD:CD:52:0B:31:77:7D:63:88:56:48
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GYsqDo2wxxxvjTJGudAqhK1N3NYiCZGsenUmMxKdmsvZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GYsqDo2wxxxvjTJGudAqhK1N3NYiCZGsenUmMxKdmsvZ/0/841C90889EF2740616BDCD520B31777D63885648.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.72.0/22
                IPv6:
                  2804:62d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269321

    Signature Algorithm: sha256WithRSAEncryption
         33:4b:96:b5:49:96:10:28:bb:bb:50:a4:02:19:60:aa:fa:26:
         53:8e:a1:35:31:27:2b:1c:e5:0d:fd:a2:28:18:04:56:f6:3a:
         09:9e:84:e3:10:31:5a:2d:a8:bb:f6:9a:13:99:06:03:a5:95:
         21:3e:60:da:29:6c:e2:81:7e:2a:38:53:78:c5:13:6c:d8:d1:
         c8:cd:6c:b6:22:a4:69:84:f6:04:cf:51:11:b8:eb:fa:f7:40:
         a1:af:d7:06:ab:1f:f6:35:2d:7d:97:20:dd:d9:63:b7:ea:39:
         e9:a2:96:a3:9f:69:3e:c8:8b:3c:a2:f3:dc:16:ca:a0:d7:6d:
         41:d1:fd:b6:0c:2f:39:5a:ff:20:1d:b6:8c:e9:d8:36:9a:34:
         4d:84:e3:5d:50:49:89:b9:8a:a8:f8:0d:24:fc:87:ef:1a:57:
         7a:be:a2:e8:f4:33:79:5d:0a:b0:fa:59:4d:86:9e:8e:26:81:
         84:38:6a:b5:e0:a8:22:8f:e8:d3:a4:29:ba:8c:29:14:3d:78:
         82:81:10:f3:90:1c:ad:c0:12:85:8b:a2:23:4c:5a:29:a2:29:
         14:13:e2:8a:b9:38:8e:86:04:5e:38:7b:58:62:bd:6a:65:39:
         55:01:d0:9a:15:e4:14:5a:25:a4:1b:68:c0:66:23:4b:f7:3d:
         bf:6c:9a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:33:36 2025 by rpki-client