Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.cer
File:                     8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.cer (raw, json)
Hash identifier:          JQNwHrakKOUdjEAGbiVm8+Qwgz+5mcWD2l81w9j00bQ=
Subject key identifier:   8D:4A:EC:19:8B:B4:EB:46:EC:70:1D:D4:AB:AF:B2:DB:87:1F:D0:28
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6C74556A28C9F075AC35DB9ADC3A8EFEF923BEE0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Feb 2025 21:37:48 +0000
Certificate not after:    Tue 24 Feb 2026 21:42:48 +0000
Subordinate resources:    AS: 268353
                          IP: 45.239.52.0/22
                          IP: 2804:4fd8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:74:55:6a:28:c9:f0:75:ac:35:db:9a:dc:3a:8e:fe:f9:23:be:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 25 21:37:48 2025 GMT
            Not After : Feb 24 21:42:48 2026 GMT
        Subject: CN=8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c5:5a:c4:6a:f7:d5:a2:5b:8a:9a:27:0a:1b:
                    35:2f:5b:0a:8f:2c:a4:a2:29:ad:c3:36:48:38:62:
                    39:9c:e8:7f:4b:ba:0a:38:e6:5c:1b:d4:2e:dd:fd:
                    9a:c0:1e:d3:5e:5e:29:f8:c0:4c:4e:bd:33:d2:b0:
                    97:64:b5:75:6e:1f:84:7f:f5:37:1c:fe:2c:d2:6a:
                    1b:95:1e:c2:68:6f:9f:53:18:30:96:b1:38:2a:4a:
                    86:c4:f2:db:a7:0b:34:52:f5:4b:e8:10:f4:06:93:
                    ae:3e:3a:f6:a8:47:ef:7a:83:43:64:5c:eb:3b:f3:
                    b6:17:de:7f:11:97:39:be:16:51:50:69:7d:f7:56:
                    07:8e:df:6b:4b:87:ce:de:d4:c0:31:12:fc:68:b3:
                    86:a7:77:9a:8b:3a:4f:4c:74:1a:7d:2b:06:2d:c1:
                    81:e9:f7:97:00:1e:16:c0:c5:16:1a:1a:61:c6:25:
                    14:4a:6a:95:e0:0c:ac:6f:f3:63:02:37:2c:b9:53:
                    9d:9f:4c:f6:8d:81:42:5b:80:fa:4e:43:56:0a:c4:
                    4b:55:3f:71:6a:11:14:2b:b8:b3:2a:68:39:d5:69:
                    a5:ec:b3:c6:77:34:d1:e6:f4:ae:a1:67:f2:1b:8f:
                    c1:05:12:ec:ca:c6:a2:0a:dd:2a:0f:8c:59:d6:e6:
                    10:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:4A:EC:19:8B:B4:EB:46:EC:70:1D:D4:AB:AF:B2:DB:87:1F:D0:28
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/8D4AEC198BB4EB46EC701DD4ABAFB2DB871FD028.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.52.0/22
                IPv6:
                  2804:4fd8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268353

    Signature Algorithm: sha256WithRSAEncryption
         52:a4:38:12:00:42:a4:82:da:c0:13:aa:43:ed:f4:80:7a:9e:
         3d:69:86:db:2e:62:a3:39:41:d3:ac:0c:d7:a0:7b:57:a9:33:
         fd:34:15:7c:e0:25:1f:7a:46:3f:ce:9a:c1:f8:a8:e5:d3:df:
         60:3e:2b:92:02:f0:a6:28:c1:29:46:37:f1:19:4d:59:d1:00:
         be:c8:98:ed:57:ff:e5:a5:29:2a:b6:30:6a:d8:c6:5c:c7:1f:
         65:66:cc:51:7a:1a:67:bc:08:f2:f0:54:af:05:92:ac:92:6f:
         53:95:19:e3:27:f0:3e:83:68:72:e2:52:c7:c3:9e:47:f9:60:
         da:b8:7c:72:4c:8e:7f:cd:8f:ee:fe:d9:d3:3b:cc:05:98:e3:
         41:d2:e3:24:ed:f6:84:63:f1:d9:03:19:6f:7d:41:91:03:89:
         f1:9f:80:56:72:dd:25:dc:ca:fd:89:ab:f7:b7:40:ce:47:78:
         b4:49:60:f3:f7:8e:d8:c7:a6:66:d0:9c:0d:94:6a:37:82:73:
         55:18:11:57:e4:1a:34:e1:d2:83:7f:76:99:a7:3a:98:17:98:
         72:3b:1e:55:54:fd:e3:dd:47:51:bc:60:65:c7:2b:1a:bd:42:
         2d:c3:4e:d6:6a:6c:d9:1a:b5:dd:ca:ed:a5:fa:a4:c1:e4:70:
         41:38:d9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:12:14 2025 by rpki-client