Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer
File:                     85EE0CD661887CC88F64F6B4BE9D420426E200DB.cer (raw, json)
Hash identifier:          VMIIDWzQU2o01NlpWekiKh5DQ+EGLJCnOzornWSMFEo=
Subject key identifier:   85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7873A067E9780B740B13E3551967A3660543F68A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 02:56:10 +0000
Certificate not after:    Fri 06 Mar 2026 03:01:10 +0000
Subordinate resources:    AS: 272559
                          IP: 2804:8520::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:73:a0:67:e9:78:0b:74:0b:13:e3:55:19:67:a3:66:05:43:f6:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 02:56:10 2025 GMT
            Not After : Mar  6 03:01:10 2026 GMT
        Subject: CN=85EE0CD661887CC88F64F6B4BE9D420426E200DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:b5:76:66:2f:4c:7d:f8:d3:ea:15:3a:2f:
                    e0:e5:0f:14:80:5f:12:3d:a3:aa:c5:04:1b:2b:0c:
                    73:1b:85:dc:a8:3c:8b:a2:b6:c3:61:09:21:a7:4a:
                    f9:eb:bd:13:01:15:e9:58:02:eb:84:00:df:31:13:
                    0f:bd:a2:5e:86:40:c4:2c:c9:27:c5:a3:b6:12:30:
                    a7:40:86:a9:a4:15:c5:29:24:2b:31:c6:b4:c8:0d:
                    71:29:87:2a:2b:3d:da:1a:b9:92:c6:23:41:2e:bb:
                    4d:67:a6:09:1f:43:b3:e4:51:6d:08:f4:f0:f9:13:
                    0e:99:0b:e4:55:b3:0b:bc:f6:19:3e:c0:50:5b:3e:
                    3c:f5:8a:d8:d5:24:0b:fc:ed:77:8a:06:5f:47:9b:
                    88:36:bb:8a:0d:3b:cb:3f:74:7b:00:67:64:29:04:
                    60:e3:0f:be:7b:14:bd:cd:e8:77:75:e5:5b:da:39:
                    be:fd:87:37:f9:79:b5:ad:76:68:dc:0c:ba:f8:fd:
                    53:76:08:02:0c:23:06:24:d0:dc:9a:81:eb:9e:67:
                    bd:b2:b5:c1:21:45:16:31:ec:57:c2:01:70:b4:ff:
                    13:a2:59:14:b2:2c:0b:1c:f1:c4:88:5d:ce:1e:7f:
                    16:89:54:34:fe:0f:80:a6:ea:ec:68:64:20:71:94:
                    41:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                85:EE:0C:D6:61:88:7C:C8:8F:64:F6:B4:BE:9D:42:04:26:E2:00:DB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/97swh38pTCzSg8x5bLps7YB6AAxyHr5owaVHFsRb2LDp/1/85EE0CD661887CC88F64F6B4BE9D420426E200DB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8520::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272559

    Signature Algorithm: sha256WithRSAEncryption
         55:a4:c6:9a:90:73:fd:34:59:33:62:69:3d:83:b7:df:12:f3:
         2a:39:0b:26:ff:b6:5b:b5:29:4d:05:7d:d4:f9:b3:2f:a8:ef:
         13:45:b9:22:75:b7:fd:15:2f:dd:0c:b7:82:2b:c3:69:73:14:
         50:98:c6:15:a6:8a:d1:5d:74:89:25:06:16:b6:b2:03:ad:f9:
         95:8d:ed:a2:b3:fd:a8:19:26:07:08:1b:9f:c1:0d:d9:54:0f:
         41:75:a6:95:a0:90:3e:0d:d9:2c:47:ff:f6:b0:89:fa:c3:2f:
         70:ed:d3:71:7f:76:04:75:70:a2:29:72:be:bd:ec:ca:c9:df:
         18:3d:7a:d6:6f:6c:80:35:f0:26:c8:f9:37:ab:7f:79:7e:57:
         41:cc:46:3a:f6:14:80:76:29:7e:85:95:62:11:1c:c0:81:17:
         8e:c7:49:6d:fc:cd:f5:01:a4:a4:e8:d4:5d:bb:26:f2:00:86:
         98:7f:2e:6f:4e:4c:1d:be:9d:07:96:57:4c:b5:b3:a7:f0:c1:
         bc:33:e7:37:c6:7e:48:cb:87:bc:23:ef:15:8d:b9:21:2d:b1:
         e3:89:94:a4:a3:c6:08:c0:14:f0:d5:36:da:98:70:f4:f5:32:
         ba:eb:ff:b2:d9:81:ab:ce:43:b8:ab:7d:49:b0:7d:e4:a2:78:
         9d:d3:d1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:13 2025 by rpki-client