Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8AD497903AB3566443C9C794694A61EFE427FA7A.cer
File:                     8AD497903AB3566443C9C794694A61EFE427FA7A.cer (raw, json)
Hash identifier:          gpSv52mywP0NRU5NqTcI5ACu+9EK4I3/QWyi9PS+l4M=
Subject key identifier:   8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6CC5888BC5E8A04BFF9B00314E42AA06A79AE07B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 10:57:55 +0000
Certificate not after:    Fri 06 Mar 2026 11:02:55 +0000
Subordinate resources:    AS: 272614
                          IP: 2804:8604::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c5:88:8b:c5:e8:a0:4b:ff:9b:00:31:4e:42:aa:06:a7:9a:e0:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 10:57:55 2025 GMT
            Not After : Mar  6 11:02:55 2026 GMT
        Subject: CN=8AD497903AB3566443C9C794694A61EFE427FA7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f5:ff:89:89:5f:d0:af:81:3d:89:56:94:40:
                    a8:1d:d4:eb:84:47:51:59:99:41:45:11:60:fe:73:
                    99:77:c6:99:2c:35:d6:6f:60:02:04:13:1c:16:a7:
                    2a:65:0d:7f:53:b7:dd:32:4c:24:e0:ac:ac:0f:e1:
                    82:ec:51:4c:eb:66:1d:bf:b2:06:88:29:bb:0c:ce:
                    80:16:f2:fa:13:f2:10:3a:4c:2c:7d:4d:d5:92:65:
                    ba:fc:50:14:70:44:69:59:cc:d3:9a:4f:c7:e9:44:
                    b0:cf:e9:63:a3:c5:95:d3:32:b2:e6:93:19:ae:a2:
                    6f:1c:8f:45:67:be:4e:d0:5a:34:0c:b1:b1:80:8e:
                    9e:db:ca:eb:6d:55:bd:06:df:21:e1:f1:8f:b9:d1:
                    6d:00:d8:ed:a8:9f:27:68:f2:12:b7:6f:7c:61:fc:
                    85:8e:9f:d0:ed:54:26:c9:dc:97:3d:4b:5e:c1:7e:
                    14:fd:ea:48:4a:4d:8e:d9:1c:62:86:6b:32:ca:f7:
                    67:be:89:dc:39:ad:1d:cf:65:71:7d:27:6e:d5:a1:
                    1d:53:d9:b9:82:9b:87:2b:63:61:85:6d:dc:83:f9:
                    20:37:f2:41:d1:5d:c1:1e:ef:c8:de:4c:c0:13:b7:
                    fa:a0:ea:1c:6f:b9:aa:3c:a3:a2:94:a1:b0:38:a1:
                    a9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:D4:97:90:3A:B3:56:64:43:C9:C7:94:69:4A:61:EF:E4:27:FA:7A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/1/8AD497903AB3566443C9C794694A61EFE427FA7A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8604::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272614

    Signature Algorithm: sha256WithRSAEncryption
         d9:f6:38:53:b1:4f:b5:f8:e6:6e:be:3c:7a:6e:d5:ff:20:b5:
         fd:56:b4:72:5e:4f:0f:4d:f7:00:8e:10:7d:62:da:27:be:26:
         47:24:e3:f3:b0:ab:98:d7:2e:36:d3:5a:05:74:52:35:94:31:
         f8:02:9b:a6:c3:e4:fb:60:25:38:a4:af:30:05:72:f1:e1:85:
         8c:9d:20:82:70:52:33:97:39:5f:71:f0:01:68:67:45:36:bb:
         d5:f5:f9:16:c8:68:6d:76:1a:11:4a:89:40:4d:ab:6f:16:0a:
         01:f9:e1:0f:0b:9b:a3:96:1d:10:26:8c:b0:99:96:f9:be:75:
         92:b0:45:81:d6:6c:3a:37:5f:af:c9:e8:9d:8e:01:bd:5a:36:
         4f:64:4e:74:6a:ab:82:18:50:49:d1:8b:b7:7c:99:40:52:a1:
         6d:56:04:9e:68:8f:0c:18:2d:5d:f0:da:05:61:2e:3f:35:74:
         c3:e3:27:ae:86:3f:2a:54:6d:02:7c:bc:65:da:0a:13:9b:5b:
         df:63:6b:63:7c:34:3a:d7:78:9e:98:f3:76:ee:9e:e2:0f:bb:
         7b:35:b9:86:80:c4:bc:12:09:08:8b:73:a7:0d:bb:db:08:66:
         78:0d:76:78:a7:b4:39:9c:d0:f0:62:81:e4:49:6a:58:94:60:
         8e:3a:cc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:40:53 2025 by rpki-client