Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer
File:                     93DF79992F907CC44F1D42DDB40851C3F07D8F5F.cer (raw, json)
Hash identifier:          KQ6GlLbhdF8zvdZ5qFZGJNeEHsCLcFICyJU34XWo8n8=
Subject key identifier:   93:DF:79:99:2F:90:7C:C4:4F:1D:42:DD:B4:08:51:C3:F0:7D:8F:5F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0E0E89FE8529B4E1FC10ACFB7388830F7EA6FFE7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 18:45:14 +0000
Certificate not after:    Thu 05 Mar 2026 18:50:14 +0000
Subordinate resources:    AS: 262300
                          IP: 138.36.168.0/22
                          IP: 168.181.112.0/22
                          IP: 177.87.104.0/22
                          IP: 179.0.32.0/22
                          IP: 2804:788::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0e:89:fe:85:29:b4:e1:fc:10:ac:fb:73:88:83:0f:7e:a6:ff:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 18:45:14 2025 GMT
            Not After : Mar  5 18:50:14 2026 GMT
        Subject: CN=93DF79992F907CC44F1D42DDB40851C3F07D8F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:67:13:89:23:6d:cb:dc:34:96:bd:0a:36:fa:
                    89:10:8d:a2:18:64:21:d9:14:a9:5a:a8:ea:06:db:
                    33:ee:04:78:6e:99:2c:85:2d:cd:af:a9:50:25:a8:
                    0c:c3:0b:0c:ee:cf:c3:91:23:cd:7f:a7:31:70:6c:
                    ba:14:70:8a:ef:24:7c:d0:99:9a:0d:7b:f6:96:3f:
                    8a:7f:33:e9:78:87:fb:5b:60:63:e3:87:c8:1f:6f:
                    df:2e:1e:22:ed:7a:9a:ae:4d:65:ff:00:04:2c:77:
                    12:fe:e4:4c:11:69:5a:2d:1c:fc:0c:73:d7:8f:ff:
                    12:d9:d3:3d:a9:06:e8:05:7d:2c:e4:43:ec:2e:ce:
                    df:63:6d:76:79:51:bc:62:7c:d8:0c:d4:fa:aa:78:
                    54:c6:42:3b:b2:d1:d1:e0:56:0e:aa:ff:a3:c5:68:
                    91:0e:49:c8:9d:f4:bf:9a:b5:69:1d:7f:bd:d3:72:
                    21:62:38:0a:d4:48:db:33:98:c8:ed:ff:94:d4:34:
                    a6:23:3f:ec:b1:6a:cc:19:89:cf:c9:c4:a3:65:ab:
                    e8:8f:dd:f7:ef:36:02:10:2e:da:9f:76:cb:f5:ed:
                    8f:28:06:77:0a:98:8b:54:b8:0e:af:3e:4a:3e:fb:
                    03:6a:ea:3d:14:91:af:26:9d:f9:df:83:5d:b7:8f:
                    c6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                93:DF:79:99:2F:90:7C:C4:4F:1D:42:DD:B4:08:51:C3:F0:7D:8F:5F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/1/93DF79992F907CC44F1D42DDB40851C3F07D8F5F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.168.0/22
                  168.181.112.0/22
                  177.87.104.0/22
                  179.0.32.0/22
                IPv6:
                  2804:788::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262300

    Signature Algorithm: sha256WithRSAEncryption
         38:88:fc:09:5f:94:ca:8c:0c:9e:d6:73:89:7e:f1:e7:23:c6:
         14:24:cb:43:7b:8e:00:1b:51:d5:36:0b:51:d5:40:6c:db:8c:
         b9:ac:cf:5d:65:01:fa:73:2e:cb:a7:f7:96:b9:ca:81:8e:3c:
         62:89:e2:e2:26:da:20:e8:a7:7f:a9:a3:ab:56:d0:d2:f7:6c:
         00:23:b0:8c:3c:65:35:87:74:65:7b:86:d1:46:04:e6:bc:e6:
         c9:c3:9b:41:81:22:0a:01:9e:19:81:12:de:c0:c9:a7:6a:71:
         7b:0c:cd:fc:74:92:f7:9f:e6:05:11:ba:73:1e:4f:d1:7f:f4:
         9b:c2:d2:2b:8f:7f:1a:be:23:1c:87:e5:2f:b5:fb:01:1a:92:
         d3:c4:8b:22:51:21:94:c8:7e:46:c3:30:6d:02:83:01:0e:c5:
         21:dd:ff:e7:25:30:85:36:29:77:a0:48:e2:57:bb:55:f0:e5:
         5a:64:e0:43:8d:fe:6c:63:ca:32:01:73:4f:0e:28:8d:f1:0c:
         66:c4:4e:cf:24:09:f9:96:67:ec:77:27:91:c4:c4:34:f8:17:
         9b:5b:dd:3b:9a:dc:6a:c5:23:e5:18:dc:80:18:7f:bf:86:7b:
         cf:3f:82:2d:8a:89:a7:d6:3a:cf:dd:39:93:c9:54:4f:10:8a:
         75:03:ac:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:42 2025 by rpki-client