Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer
File:                     8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer (raw, json)
Hash identifier:          U5j8CjPHbeYES7fe4IzNfej8qEtIKQ8lgdzkhEBdOzc=
Subject key identifier:   8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0329BE73CAA5176FFB523654D5E165E09D1C03AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 23 Mar 2025 20:37:36 +0000
Certificate not after:    Sun 22 Mar 2026 20:42:36 +0000
Subordinate resources:    AS: 263919
                          IP: 138.185.236.0/22
                          IP: 170.0.208.0/22
                          IP: 2804:27bc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:29:be:73:ca:a5:17:6f:fb:52:36:54:d5:e1:65:e0:9d:1c:03:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 23 20:37:36 2025 GMT
            Not After : Mar 22 20:42:36 2026 GMT
        Subject: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7d:c8:85:ba:7e:47:78:bd:c3:9e:5a:d4:99:
                    da:b9:4b:e8:a3:b8:7b:06:01:d4:92:05:70:fc:00:
                    7b:d5:23:43:98:4f:00:71:72:b8:fa:3a:f1:3b:62:
                    97:d7:48:ca:9d:80:65:42:3f:99:d3:4a:cc:28:8d:
                    57:1d:ae:e6:87:20:52:8b:b8:23:a2:95:bd:c6:69:
                    96:00:67:02:de:a9:75:83:08:1b:4f:dc:80:21:2b:
                    cd:08:d0:a7:d6:3a:02:2b:84:27:db:6c:6e:ab:b2:
                    74:16:2a:1b:e7:31:fd:93:d8:c0:ad:7a:07:ef:ff:
                    91:96:8a:28:5f:40:f8:d4:86:03:84:8e:73:91:65:
                    ac:09:c6:cc:f0:e0:8c:67:54:c9:2e:26:4d:46:dd:
                    6b:e5:ff:35:38:a0:43:4f:0b:50:5a:17:e0:dc:ed:
                    99:d5:ab:6f:2b:e2:cc:6b:ee:e3:84:e3:94:5e:e8:
                    06:49:0d:e1:3e:0a:41:8b:0c:b0:65:41:72:ac:88:
                    5c:a3:d4:5b:cb:51:12:f6:ba:90:03:2f:b3:ee:8c:
                    c0:99:64:2f:54:1d:25:fc:7e:7f:49:65:99:f8:6b:
                    ec:28:52:69:13:cc:7d:6d:90:36:41:31:37:cd:7f:
                    87:d5:ac:18:bf:79:34:42:d4:44:73:97:a7:77:d9:
                    b1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.236.0/22
                  170.0.208.0/22
                IPv6:
                  2804:27bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263919

    Signature Algorithm: sha256WithRSAEncryption
         4d:40:28:aa:50:cf:b6:31:7e:32:eb:f9:f4:90:d0:31:46:ce:
         87:c4:25:24:31:63:78:dd:bd:0f:cb:29:50:31:c9:05:c3:8c:
         6d:c7:29:c7:0b:ef:9c:6f:96:d2:39:4e:87:0a:fc:3d:9b:30:
         cf:41:e8:3a:10:d8:b4:f5:0e:44:4c:cf:49:77:8d:6d:09:1a:
         2f:d7:66:43:2d:64:a1:44:fb:33:68:23:f4:79:df:93:09:4b:
         10:cb:41:93:31:6c:ef:07:28:1f:da:cb:a2:f6:81:d1:e5:31:
         8a:ac:c7:82:c9:f3:21:bb:8f:1c:31:7e:e3:cd:3f:63:9a:b6:
         02:50:81:f9:a0:cd:45:f1:59:9e:3c:f4:ea:d5:01:5e:ee:49:
         00:88:51:6e:3d:17:d6:59:62:65:09:af:04:74:f3:c5:86:42:
         14:1b:4b:6f:b0:1b:a3:9f:10:2d:a3:58:2e:4f:3a:22:03:ad:
         a7:5c:a2:e6:b6:30:45:4e:48:11:54:d4:7b:b5:00:a8:44:d8:
         41:df:93:3a:4b:c0:4b:dd:e0:24:5c:e4:83:be:6c:49:7f:f9:
         b4:ca:dd:73:a5:93:43:82:50:54:f3:84:32:d1:bd:6e:a5:7b:
         c0:37:44:62:c4:9a:9d:f9:ef:08:7e:01:16:62:13:50:0d:e9:
         05:4b:0f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:16 2025 by rpki-client