Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer
File:                     8FB0A435AA71965FD7774887BFE0AE34E6E39B03.cer (raw, json)
Hash identifier:          miMGc0LD/jGNcLgeAhKlbOE6JXZJ3TR2Yljv31IvVes=
Subject key identifier:   8F:B0:A4:35:AA:71:96:5F:D7:77:48:87:BF:E0:AE:34:E6:E3:9B:03
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4156FD4F6D77B65B323A684CF56B23A7CA54B6CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Dec 2024 22:00:57 +0000
Certificate not after:    Thu 18 Dec 2025 22:05:57 +0000
Subordinate resources:    AS: 52561
                          IP: 177.86.76.0/22
                          IP: 186.227.120.0/22
                          IP: 2804:e8c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:56:fd:4f:6d:77:b6:5b:32:3a:68:4c:f5:6b:23:a7:ca:54:b6:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 19 22:00:57 2024 GMT
            Not After : Dec 18 22:05:57 2025 GMT
        Subject: CN=8FB0A435AA71965FD7774887BFE0AE34E6E39B03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:13:c0:a5:a6:22:d9:3c:28:49:fd:59:c1:9e:
                    84:d5:cf:db:e0:f5:1a:1c:e5:d8:4c:ef:6f:f6:b4:
                    23:ba:b6:96:31:cd:a7:2c:95:3f:75:31:60:b0:53:
                    6b:c3:c3:8b:b2:ba:f0:0b:43:ba:06:bf:4b:44:e0:
                    07:e7:84:96:85:af:c4:30:a4:60:49:b3:c6:d0:26:
                    b2:29:5b:61:91:81:28:28:39:08:10:ae:3a:e6:85:
                    ab:75:e7:20:ba:69:be:b7:f7:f0:c9:ec:53:6d:24:
                    8b:98:c1:d8:ba:30:0e:1e:2a:6e:c7:47:2a:40:d1:
                    18:9d:71:79:ab:fa:1d:df:86:03:2e:a2:8e:a0:fb:
                    63:22:92:73:4a:ba:e9:e2:53:de:19:46:41:a5:b4:
                    65:da:4f:16:d0:db:0e:a0:a0:d0:10:7f:6c:bb:1d:
                    fd:b5:da:08:39:1f:7a:cb:7a:c7:13:c9:01:5e:eb:
                    52:59:07:dd:2e:c8:ae:b9:a3:49:a3:bd:0e:3b:00:
                    f3:72:bc:b0:51:e5:67:bf:9f:e2:20:74:99:0b:f7:
                    af:e0:4b:fa:7e:e0:80:6d:59:e9:42:f5:97:05:2b:
                    b1:a0:bf:39:85:7c:6e:a9:5b:2d:52:25:25:b7:e8:
                    32:5d:d8:69:9f:2a:38:d5:50:40:2e:fe:15:0f:45:
                    4c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8F:B0:A4:35:AA:71:96:5F:D7:77:48:87:BF:E0:AE:34:E6:E3:9B:03
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6p2fnSWRd2TFoezjmukshEaB1St1eJasDQ5KwcKQ6fTM/0/8FB0A435AA71965FD7774887BFE0AE34E6E39B03.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.76.0/22
                  186.227.120.0/22
                IPv6:
                  2804:e8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52561

    Signature Algorithm: sha256WithRSAEncryption
         c6:e9:88:15:a8:46:d4:42:b6:fd:72:e0:d8:e2:48:62:a2:4c:
         40:2b:cc:ef:4b:da:f4:e2:a0:10:14:0b:f1:1e:d8:56:fc:9d:
         a5:99:e2:6a:f9:79:78:e9:9e:3a:73:ce:f5:86:4e:4a:ca:3a:
         76:c6:f6:38:73:e2:c5:6f:68:1f:4c:6b:48:4a:06:e3:54:b1:
         45:40:f3:fe:3b:f4:12:88:3e:c2:5d:70:c2:0c:29:a7:57:97:
         66:a8:d9:08:6c:11:f0:68:3d:55:cf:e0:0c:6b:76:6f:8b:3a:
         73:97:40:53:af:90:2f:e3:92:c6:d1:9a:cd:93:2b:2c:47:5d:
         f6:e5:05:30:f9:70:b6:9f:d1:a1:b3:f4:25:b2:d1:83:ba:6f:
         b6:30:55:62:93:08:0f:b8:2c:91:ff:52:5b:60:95:c9:47:04:
         d5:17:f9:ce:8a:15:26:97:42:c2:df:89:77:f2:80:64:87:9c:
         e6:52:3c:5b:47:12:64:27:6a:0f:c3:2e:69:5d:5c:ff:49:35:
         5e:f7:59:49:5d:68:72:46:3f:6f:e0:d6:4a:f5:86:14:c7:ea:
         21:1d:be:ff:45:e2:0d:a1:c8:f2:54:7d:e4:b1:70:49:48:d9:
         b3:70:cd:7b:9d:c4:ff:e7:29:cf:31:c0:4b:16:40:24:f9:6c:
         17:0d:c2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:31:47 2025 by rpki-client