Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8ABC084B53F9798714C06A642B698DD90EC2F25E.cer
File:                     8ABC084B53F9798714C06A642B698DD90EC2F25E.cer (raw, json)
Hash identifier:          oZmhEpyAplJWDGvxq1DN4sMFGr/d1KusvOeMj3NwdDg=
Subject key identifier:   8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       330C0F9F43530C609A16D49027AA28EB5C4A1ADC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Mar 2025 15:39:12 +0000
Certificate not after:    Wed 25 Mar 2026 15:44:12 +0000
Subordinate resources:    AS: 28276
                          IP: 186.249.96.0/19
                          IP: 187.102.96.0 -- 187.102.110.255
                          IP: 189.14.64.0/20
                          IP: 2804:56a4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:0c:0f:9f:43:53:0c:60:9a:16:d4:90:27:aa:28:eb:5c:4a:1a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 26 15:39:12 2025 GMT
            Not After : Mar 25 15:44:12 2026 GMT
        Subject: CN=8ABC084B53F9798714C06A642B698DD90EC2F25E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:56:6b:05:79:73:2e:bb:8a:f1:c4:2c:35:79:
                    b6:1e:45:8e:f6:98:18:9c:d3:87:0b:e6:10:16:d0:
                    99:83:8f:f8:8f:5b:4d:35:5a:9f:61:7e:25:8f:73:
                    24:fd:70:8d:c9:eb:58:6f:96:2e:85:02:bd:34:56:
                    9b:75:0f:a2:fe:b5:ab:c8:99:32:b2:fe:74:80:1a:
                    45:bf:8f:76:e6:76:68:87:ee:23:1a:81:47:0c:25:
                    fb:43:e7:54:a7:42:d7:ea:80:24:42:b0:b2:c0:4d:
                    4e:61:bf:2f:ed:c2:73:d5:99:6c:81:51:e0:0c:0e:
                    3e:47:b7:06:31:35:0e:3a:89:d4:85:71:1a:76:4f:
                    f5:29:4a:69:99:62:20:34:e3:25:91:64:3e:ca:2d:
                    53:88:82:b1:66:b0:83:ff:bc:86:69:97:bf:6c:ba:
                    e8:47:3b:5b:24:4b:0e:dd:9e:ab:21:53:40:0c:5c:
                    ca:86:2c:de:e4:b1:25:72:72:83:7b:72:12:b3:34:
                    3c:31:94:f9:ac:ad:ff:20:4b:a8:2f:62:e0:42:06:
                    86:b2:c1:89:0e:34:b5:fc:7b:a3:5a:6c:85:fc:dc:
                    7d:38:9f:67:23:17:f8:bf:e9:ee:5f:a1:ec:cc:37:
                    49:b9:1c:bd:ec:6b:ae:d8:db:40:e0:99:aa:cf:99:
                    2a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:BC:08:4B:53:F9:79:87:14:C0:6A:64:2B:69:8D:D9:0E:C2:F2:5E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H1gLreWLfcLs2P4xidRLK14ktCjW1KUn7hDB4ALTqHn8/0/8ABC084B53F9798714C06A642B698DD90EC2F25E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.96.0/19
                  187.102.96.0-187.102.110.255
                  189.14.64.0/20
                IPv6:
                  2804:56a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28276

    Signature Algorithm: sha256WithRSAEncryption
         c8:86:34:42:e6:3e:ca:f3:a6:8a:a0:7b:36:de:06:4f:87:85:
         8c:ee:0c:92:55:15:5f:bd:bc:47:f5:7b:fd:33:ad:06:ca:c2:
         07:05:aa:90:e8:13:31:90:df:86:e8:08:52:ad:81:2d:06:6c:
         23:2b:f9:9f:d5:a9:b5:e1:e6:90:8b:1c:07:6b:46:74:f8:d8:
         09:29:ca:f6:07:6d:a9:50:b9:af:ec:69:07:48:8a:65:2d:b6:
         05:06:b2:0c:29:89:01:3e:7a:07:19:36:3f:f2:85:71:98:bb:
         24:f6:22:9e:0f:83:d0:46:65:82:b8:f4:fd:0a:65:89:f8:16:
         b6:fa:0e:0b:9b:21:9e:ef:23:f1:0d:98:d4:c4:a9:2f:d8:c5:
         1e:e6:5e:a5:9c:33:23:86:3e:d2:14:a6:e5:e6:21:07:0c:3e:
         c1:e0:74:ed:36:34:85:71:1f:e0:39:57:8b:24:1d:8b:79:45:
         d8:de:08:63:8f:c3:b9:0d:65:0c:f9:32:e1:be:0a:bc:9d:df:
         77:0f:a7:8a:cd:7c:03:96:83:c9:d7:e2:5c:23:7b:1a:f9:40:
         aa:33:8d:62:63:e2:10:72:7a:d9:91:2e:b0:81:68:8f:b2:d8:
         43:2b:ad:d9:e8:c7:95:53:cf:56:80:03:51:06:e4:f0:e8:93:
         24:e0:43:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:05:20 2025 by rpki-client