Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/896EBA0532E8601F8056D3EFCFA7787B3A582833.cer
File:                     896EBA0532E8601F8056D3EFCFA7787B3A582833.cer (raw, json)
Hash identifier:          L0B9mJCyivf6eFv8BR3A/eZ5xNLRL4Rpd7pjsVF3NbE=
Subject key identifier:   89:6E:BA:05:32:E8:60:1F:80:56:D3:EF:CF:A7:78:7B:3A:58:28:33
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       316DFD10FE52AE4F085601C3DCA8A10908A12213
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BVEYtT8ahRhC8xBHuFHqrunYKUbs3qRbmvVqHDjfTxx5/0/896EBA0532E8601F8056D3EFCFA7787B3A582833.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BVEYtT8ahRhC8xBHuFHqrunYKUbs3qRbmvVqHDjfTxx5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 Jan 2025 14:43:25 +0000
Certificate not after:    Mon 05 Jan 2026 14:48:25 +0000
Subordinate resources:    AS: 269521
                          IP: 45.188.116.0/22
                          IP: 2804:65e4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:6d:fd:10:fe:52:ae:4f:08:56:01:c3:dc:a8:a1:09:08:a1:22:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  6 14:43:25 2025 GMT
            Not After : Jan  5 14:48:25 2026 GMT
        Subject: CN=896EBA0532E8601F8056D3EFCFA7787B3A582833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1f:8d:5a:36:79:fa:92:cc:0a:2f:5e:4c:67:
                    42:ed:52:00:97:06:4d:99:34:55:58:6c:33:86:58:
                    f4:f7:9f:bf:a0:72:ac:17:50:db:4d:4f:fa:63:a8:
                    3a:df:7b:4a:5d:9b:18:92:2c:49:79:fb:72:20:55:
                    53:20:b3:b0:4f:90:d5:28:8d:d6:98:7a:cd:10:49:
                    f3:3c:85:18:0e:2e:00:60:94:4f:24:2f:4e:97:f1:
                    a9:8a:13:10:45:3b:d0:b5:32:a0:19:b6:b0:a4:1f:
                    b9:1e:c7:98:c8:46:a8:02:1f:16:e7:9f:4c:64:d8:
                    bc:13:40:ac:33:b1:20:27:a1:18:48:85:2b:0d:d1:
                    4e:f4:75:df:78:94:2c:3f:8e:3a:94:f8:89:aa:65:
                    9c:9d:2e:aa:00:cd:72:7d:4b:9c:19:f7:d5:59:ad:
                    69:48:6b:ee:5b:4a:7f:e5:88:f7:71:43:ba:fd:61:
                    2e:5e:74:06:b0:04:5d:df:c1:c2:98:c6:02:5d:ab:
                    0f:10:00:fa:94:b4:95:b5:80:c4:0a:2a:ca:f9:39:
                    a5:12:02:b6:19:33:a3:3b:bd:3b:5e:7d:d2:a9:7a:
                    01:cf:81:5d:0d:92:c8:88:71:ed:74:13:ed:61:a8:
                    bc:af:54:b2:33:da:f4:19:ff:6e:ce:b0:67:a4:59:
                    db:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:6E:BA:05:32:E8:60:1F:80:56:D3:EF:CF:A7:78:7B:3A:58:28:33
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BVEYtT8ahRhC8xBHuFHqrunYKUbs3qRbmvVqHDjfTxx5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BVEYtT8ahRhC8xBHuFHqrunYKUbs3qRbmvVqHDjfTxx5/0/896EBA0532E8601F8056D3EFCFA7787B3A582833.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.116.0/22
                IPv6:
                  2804:65e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269521

    Signature Algorithm: sha256WithRSAEncryption
         3f:09:c7:c7:fc:07:61:e7:eb:d1:98:6a:f0:c6:11:f4:a4:2a:
         7b:fe:e5:4c:cd:65:d8:31:ba:2e:7f:76:f6:00:fe:d2:14:17:
         07:1a:f4:30:34:eb:f2:78:2e:8e:c3:69:69:ac:9d:73:81:68:
         33:64:af:a6:d7:47:ff:2a:7e:3c:7c:ef:49:94:d8:94:c9:ff:
         27:c1:5d:96:c9:4f:a1:92:93:19:4d:23:5d:84:ed:60:26:9a:
         a1:da:22:bf:9b:a0:4c:e3:ef:65:58:49:bf:12:4c:2e:f8:59:
         71:c7:7d:b0:2b:d1:12:fc:80:e6:32:7a:27:de:0f:67:9f:0e:
         49:65:ee:3a:17:62:51:8f:f9:4d:f2:fe:80:ce:ec:49:ce:8d:
         46:91:8c:c4:6a:d4:77:05:7c:84:03:9c:06:ef:e3:4a:fd:09:
         a4:cd:8b:b3:5a:14:30:20:11:23:62:71:5e:3d:ba:ab:cc:cd:
         46:d1:c7:dc:93:6a:35:73:dd:7e:5d:fd:b2:7b:0f:78:11:ff:
         bb:59:c7:d1:44:68:01:46:55:41:13:ca:02:e3:48:e0:f7:81:
         af:48:d0:ca:3c:87:5a:c5:46:39:50:74:8f:5f:e8:b8:5f:34:
         93:74:98:77:47:01:c2:a2:f6:e6:8a:70:a8:65:44:e0:dd:21:
         54:db:b2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:30:10 2025 by rpki-client