Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8810214D39049DAE584E4DE0958ABBECE36C9558.cer
File:                     8810214D39049DAE584E4DE0958ABBECE36C9558.cer (raw, json)
Hash identifier:          AiCINWPA3/BKGTB7krAD4vtD456EqMQeIm3/AKkjasA=
Subject key identifier:   88:10:21:4D:39:04:9D:AE:58:4E:4D:E0:95:8A:BB:EC:E3:6C:95:58
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       61BA3100E01C37C716401A91FD661472DBA26427
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/8810214D39049DAE584E4DE0958ABBECE36C9558.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Feb 2025 23:47:29 +0000
Certificate not after:    Fri 20 Feb 2026 23:52:29 +0000
Subordinate resources:    AS: 264135
                          IP: 138.94.64.0/22
                          IP: 2804:22f8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ba:31:00:e0:1c:37:c7:16:40:1a:91:fd:66:14:72:db:a2:64:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 21 23:47:29 2025 GMT
            Not After : Feb 20 23:52:29 2026 GMT
        Subject: CN=8810214D39049DAE584E4DE0958ABBECE36C9558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7f:4a:73:11:29:75:6c:89:c5:96:5c:13:00:
                    6b:98:00:cc:f6:88:83:8c:8c:74:e5:fb:6c:50:97:
                    8a:71:c0:fb:2f:58:d6:53:9e:32:15:97:79:47:ee:
                    24:96:eb:34:f5:19:a7:08:8b:11:b9:62:ca:5b:e5:
                    e4:10:06:17:ff:83:8c:89:1d:8e:80:c1:56:f6:f0:
                    84:6b:e4:8a:26:13:2c:41:2c:4a:af:fa:a3:ea:b2:
                    41:e5:fa:1c:23:f3:33:81:21:8c:57:c2:6a:fe:21:
                    53:0c:9e:71:fe:8e:bd:06:90:42:43:f4:05:21:6c:
                    a7:52:a2:7e:73:bf:48:5a:b9:61:f2:7d:9e:3c:0c:
                    39:14:68:b8:fd:51:4f:d7:81:0e:ac:79:02:31:7c:
                    f3:f4:f4:24:03:b3:21:d8:eb:a1:69:8a:a2:95:30:
                    5b:d4:64:03:f6:bd:a5:6d:84:68:61:43:72:61:94:
                    41:ec:65:d0:95:ae:5d:2d:27:9a:c9:fb:d2:bd:98:
                    bd:0c:e1:37:ba:63:6d:5a:3f:17:20:bd:e2:02:6a:
                    af:7e:ae:1b:03:27:eb:9b:0b:54:43:d2:fa:2f:dd:
                    ca:fa:85:c8:92:52:ef:b9:c8:be:75:67:b8:56:23:
                    04:b0:ed:f0:6f:23:c0:33:b8:56:26:75:16:92:7a:
                    70:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                88:10:21:4D:39:04:9D:AE:58:4E:4D:E0:95:8A:BB:EC:E3:6C:95:58
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5rJyVVLGkeHnAY44KPwJ5mjZXPi1bErMgC7qr6w4NioQ/0/8810214D39049DAE584E4DE0958ABBECE36C9558.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.64.0/22
                IPv6:
                  2804:22f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264135

    Signature Algorithm: sha256WithRSAEncryption
         47:40:24:97:e5:9e:a1:40:a5:20:24:0a:e2:64:78:40:d5:d1:
         ba:84:7d:b0:a5:36:a6:cd:a5:92:be:08:2c:e7:42:d7:8e:92:
         ca:d4:3e:f6:bf:65:a0:90:21:c2:2a:04:ab:46:e0:8d:8d:79:
         dc:c8:23:f8:97:6a:a9:be:24:d0:ae:79:4d:4e:0d:33:fa:a7:
         e5:75:50:31:92:61:2d:d5:08:bf:86:21:cb:05:7a:a1:80:14:
         53:14:d6:08:60:70:cd:e1:54:f5:80:bf:8e:98:a7:ea:46:86:
         60:b5:fe:ae:28:90:1e:e0:c7:0b:0f:19:9b:18:71:f0:0e:58:
         e0:bc:1f:79:7b:d7:a2:d5:a8:a5:a7:85:d2:7a:69:fd:97:28:
         bc:d9:54:28:8b:54:3e:a8:e6:e5:00:4f:c2:45:ac:57:d3:9c:
         65:ff:84:c9:d2:fb:c1:b3:a1:8a:ec:f8:7b:ba:a5:3f:47:4a:
         23:81:88:6f:a9:b7:cb:d2:d9:16:0a:0d:40:f7:69:04:7f:b5:
         96:12:98:04:9b:d4:64:4c:41:25:de:ce:b6:7a:fd:86:26:9f:
         28:09:75:f5:eb:6e:50:53:15:04:51:21:13:9a:cd:21:66:4d:
         43:40:24:f5:bd:7b:7f:e9:bf:47:20:89:f1:d3:b0:b3:8e:d2:
         16:d0:34:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:59:53 2025 by rpki-client