Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer
File:                     901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.cer (raw, json)
Hash identifier:          IuCWaIvU1MTO7swVCXOl9oxs4Zt9u5Xycg7290kRbqI=
Subject key identifier:   90:1A:65:E3:E0:FE:6E:92:2A:42:C5:C9:7F:BA:18:CA:D6:A0:AF:4F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6198EBBCE6BA7A2A7816CE7163D35BA24FF425F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 05:25:08 +0000
Certificate not after:    Thu 05 Mar 2026 05:30:08 +0000
Subordinate resources:    AS: 262302
                          IP: 177.10.204.0/22
                          IP: 177.87.128.0/21
                          IP: 2804:ef8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:98:eb:bc:e6:ba:7a:2a:78:16:ce:71:63:d3:5b:a2:4f:f4:25:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 05:25:08 2025 GMT
            Not After : Mar  5 05:30:08 2026 GMT
        Subject: CN=901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4e:ec:56:74:07:a6:bc:4a:cc:07:44:89:aa:
                    77:08:62:ea:99:f8:b7:c1:b3:6c:e6:2a:2d:98:b1:
                    9b:53:e1:a0:96:32:c7:48:41:55:13:64:98:bc:82:
                    84:6a:88:a3:c5:67:f7:4d:1f:47:8d:3f:3c:10:9e:
                    a2:61:e4:fb:14:24:01:3b:38:75:8a:6d:8f:9e:cb:
                    cc:eb:14:d7:34:22:ab:26:d0:c6:ab:8a:e8:07:8b:
                    2c:4b:bf:7d:fe:9a:cb:b3:a7:21:66:c6:2b:6b:b9:
                    5b:5f:a8:02:c0:fc:7e:7c:22:97:0e:b3:6d:c8:f3:
                    49:ec:e8:cd:ca:52:63:b1:34:31:85:b8:f1:bc:d5:
                    58:76:71:19:91:a2:8d:47:22:d4:5d:bb:36:14:6d:
                    9f:de:98:7c:28:45:92:87:dc:0e:4e:75:8a:ca:8c:
                    6b:e4:c8:de:79:59:06:14:2b:25:08:50:17:ba:03:
                    65:b0:73:cd:74:99:e1:60:0a:bd:e4:5c:24:5e:bc:
                    d9:e1:25:44:6c:2b:58:e3:4c:4d:05:bb:7d:fe:06:
                    be:0d:55:d9:c9:8e:b8:a1:90:e6:85:b9:29:36:fd:
                    84:cd:ff:f4:64:5c:cc:6d:ea:17:81:74:92:67:8e:
                    ee:36:12:ff:af:f9:fe:21:fc:4f:18:74:00:42:06:
                    e1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                90:1A:65:E3:E0:FE:6E:92:2A:42:C5:C9:7F:BA:18:CA:D6:A0:AF:4F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5vf7woXezwHNBH5GbLuhihBRaokBiz989gnWMYAYLjoQ/1/901A65E3E0FE6E922A42C5C97FBA18CAD6A0AF4F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.204.0/22
                  177.87.128.0/21
                IPv6:
                  2804:ef8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262302

    Signature Algorithm: sha256WithRSAEncryption
         21:01:81:6e:c3:7e:8d:51:77:21:e4:a7:37:3b:ce:e9:55:e1:
         f1:18:48:8a:d6:25:e9:54:8f:fa:53:22:a9:af:70:26:f5:90:
         88:42:4b:5f:32:5f:9c:d8:b7:79:ee:c1:01:1b:d7:92:b2:cb:
         a3:d2:6d:e3:3a:32:7e:64:98:6f:a0:ed:ed:ac:a4:a0:d1:c5:
         cc:95:6b:e6:55:60:f4:90:bd:2e:fb:72:7e:bd:17:f8:29:5e:
         c7:f0:1c:b3:30:1d:94:e5:54:56:23:4e:19:7f:6f:ea:c6:05:
         03:97:24:af:77:39:11:03:5b:61:a8:ab:f7:21:6c:71:cb:6d:
         ce:fb:fc:da:59:8b:a7:5d:fc:a1:7f:43:d3:97:23:57:b8:83:
         8b:01:3a:97:e9:84:39:ec:2a:9b:8a:99:78:b9:b0:fe:d9:27:
         5b:bf:62:a0:d5:4d:89:8b:c1:d0:64:22:f5:c1:2f:63:8c:29:
         3f:67:b8:66:1a:3e:ab:cc:12:a7:49:08:3b:0c:a3:6e:a1:a9:
         03:01:60:2b:7f:47:92:6e:42:03:c3:2a:f4:e4:e6:85:d2:92:
         99:b5:49:27:a8:cf:26:a7:68:06:fa:4d:32:21:b0:3c:8a:ab:
         10:8d:93:5a:12:d3:8b:52:6e:bc:4a:82:cd:d9:37:55:66:f2:
         71:e2:46:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:43 2025 by rpki-client