Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.cer
File:                     914016D20FC6BF392388EBF2192D8F5AA78B8FD3.cer (raw, json)
Hash identifier:          G7xrDYyoDcdS4IdaSBE8zh7MuuVo9TD+qxtF24aWDME=
Subject key identifier:   91:40:16:D2:0F:C6:BF:39:23:88:EB:F2:19:2D:8F:5A:A7:8B:8F:D3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2CBDD3D0FDD7C34F2A0391395CC6CE176FD79EE8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Feb 2025 13:38:45 +0000
Certificate not after:    Fri 20 Feb 2026 13:43:45 +0000
Subordinate resources:    AS: 267409
                          IP: 45.166.104.0/22
                          IP: 45.235.72.0/22
                          IP: 2804:4d0c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:bd:d3:d0:fd:d7:c3:4f:2a:03:91:39:5c:c6:ce:17:6f:d7:9e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 21 13:38:45 2025 GMT
            Not After : Feb 20 13:43:45 2026 GMT
        Subject: CN=914016D20FC6BF392388EBF2192D8F5AA78B8FD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:33:5c:40:63:bd:5a:d6:48:d0:17:ac:18:9f:
                    9c:23:cb:84:a3:fe:55:e7:b5:b3:8f:e9:03:bb:81:
                    41:85:7a:07:ff:4c:0e:24:3c:07:12:f0:a1:d8:1d:
                    79:1a:ef:9c:1c:ab:ba:7f:1e:bb:0e:aa:8c:04:5d:
                    0e:e1:f2:0e:49:4a:87:96:83:dd:a6:cf:f7:3b:66:
                    ce:62:2a:57:13:6f:49:d1:18:29:64:0b:77:e5:d8:
                    8f:b1:e4:21:42:03:9f:4d:e9:03:e9:6c:88:4b:26:
                    c0:a2:ca:b6:f2:d8:4d:d2:b6:a3:1b:a1:db:f4:c9:
                    d2:e0:ef:26:ef:83:ae:7c:c3:33:2c:78:62:16:93:
                    08:70:dd:55:4e:d4:32:8f:c5:fa:be:c4:4e:82:d5:
                    28:10:d5:5b:ce:03:e6:7f:31:1f:f8:b2:7f:e3:c6:
                    58:b6:d4:bb:b3:94:db:9f:24:53:ec:b9:64:2a:85:
                    b8:66:70:4b:4e:01:64:12:90:43:e7:df:ad:78:25:
                    01:03:8d:73:14:84:8d:45:7f:87:4d:68:71:f2:f3:
                    67:b7:19:b1:c8:aa:c9:0b:da:35:f9:6a:d2:06:43:
                    58:fd:5a:31:18:0c:ec:e2:b2:da:97:45:5e:a1:a3:
                    f9:db:60:ec:b6:e1:d6:74:cd:59:52:e5:08:37:4b:
                    05:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:40:16:D2:0F:C6:BF:39:23:88:EB:F2:19:2D:8F:5A:A7:8B:8F:D3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.104.0/22
                  45.235.72.0/22
                IPv6:
                  2804:4d0c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267409

    Signature Algorithm: sha256WithRSAEncryption
         08:d7:86:37:61:a8:d0:83:ef:1d:ff:1b:38:f0:0a:5c:6f:d2:
         53:a2:78:38:26:00:a3:68:69:df:41:a3:2c:aa:20:46:79:c2:
         61:97:32:0b:97:3a:16:55:3f:a2:7d:e2:08:55:23:e2:e0:55:
         68:c9:34:52:31:e3:d8:d1:30:ee:fb:69:0a:03:18:a5:22:95:
         4e:55:8b:c6:80:fb:04:57:07:70:f8:9c:9c:51:ba:0f:dd:1f:
         90:e6:90:8c:6f:06:74:c5:27:86:53:dd:9d:77:5d:72:73:f3:
         e0:52:4b:69:47:20:e2:5a:6c:48:be:33:32:f2:e9:71:00:e9:
         3d:4a:bb:d7:1b:47:64:ea:cd:ed:67:66:83:41:9e:81:de:06:
         ed:89:22:0e:a2:75:2b:03:18:53:1a:31:58:b6:7a:ad:f5:43:
         cf:3d:86:c4:db:b5:30:ee:91:8f:61:dd:e9:27:c4:c1:71:dc:
         96:b0:f0:a3:69:b1:1a:23:d7:b8:37:07:9c:c8:bd:ff:82:35:
         be:2f:87:cc:e6:cb:9f:84:7d:fc:aa:9d:91:e6:6a:b8:ad:0a:
         e4:0d:f3:ca:99:30:22:45:9d:06:dc:7d:e6:f5:54:50:44:d7:
         b7:37:50:73:4b:aa:01:2d:9b:18:f1:95:5e:c9:c0:73:58:21:
         7e:d4:68:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:03:17 2025 by rpki-client