Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.cer
File:                     94C8960DB5853BB60A49187478AA5E61DA0D3288.cer (raw, json)
Hash identifier:          6ThA4iwdNlgPP1JKXNwFHsXdCONQ6kOF0nZZKfCXQAI=
Subject key identifier:   94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       065BDD23D599E78D0CDD845275FE8B766D124E35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 11:14:59 +0000
Certificate not after:    Fri 06 Mar 2026 11:19:59 +0000
Subordinate resources:    AS: 262462
                          IP: 177.37.0.0/20
                          IP: 177.54.224.0/20
                          IP: 177.105.144.0/20
                          IP: 181.224.84.0/22
                          IP: 200.196.128.0/22
                          IP: 2804:4bc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:5b:dd:23:d5:99:e7:8d:0c:dd:84:52:75:fe:8b:76:6d:12:4e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 11:14:59 2025 GMT
            Not After : Mar  6 11:19:59 2026 GMT
        Subject: CN=94C8960DB5853BB60A49187478AA5E61DA0D3288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c6:32:2f:6d:4b:22:d2:09:64:32:04:a2:d6:
                    54:d4:7c:58:55:d7:57:d5:0c:4c:da:a1:50:44:33:
                    f6:dd:8e:02:c5:c5:24:83:eb:70:ca:d1:98:fa:fc:
                    5b:09:31:16:60:ff:0d:82:03:56:87:9a:31:a3:a9:
                    e8:a6:0a:52:cf:1c:73:38:b3:39:5f:1c:f6:b2:11:
                    59:e2:58:9d:00:b4:83:2a:f5:4e:ac:cd:52:66:74:
                    fc:c1:5a:d7:60:74:fb:dc:38:28:c6:65:78:88:45:
                    ef:2c:33:82:5a:9f:cb:50:81:8c:a1:b1:e1:2b:46:
                    f0:1e:4b:05:e0:95:86:9a:6b:72:f5:bc:18:38:b9:
                    24:19:12:bd:ac:a3:bf:1e:38:dc:c1:c0:25:60:81:
                    bf:42:0d:70:82:e4:de:ad:5c:9b:a0:e7:0e:89:aa:
                    85:80:f0:e7:04:c7:6b:82:90:8f:ec:34:71:6a:f5:
                    3a:4c:f6:1b:4e:da:c8:bc:65:a1:96:79:be:79:60:
                    58:37:e7:e2:d9:06:5b:2f:12:11:f3:c9:d3:b7:76:
                    0c:a8:9f:06:a1:c5:23:7b:6a:92:e7:de:73:42:fb:
                    6c:15:40:39:3a:bd:31:fb:15:82:ba:d9:62:6a:a5:
                    5a:d6:cf:3e:69:5f:a0:6b:d3:44:5b:18:78:0f:71:
                    17:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:C8:96:0D:B5:85:3B:B6:0A:49:18:74:78:AA:5E:61:DA:0D:32:88
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/1/94C8960DB5853BB60A49187478AA5E61DA0D3288.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.0.0/20
                  177.54.224.0/20
                  177.105.144.0/20
                  181.224.84.0/22
                  200.196.128.0/22
                IPv6:
                  2804:4bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262462

    Signature Algorithm: sha256WithRSAEncryption
         d8:c5:d4:06:9b:60:40:5d:e2:aa:f9:04:d7:0a:ae:40:3e:e7:
         8e:7b:41:47:9b:56:97:e7:c5:d8:97:40:3c:16:46:92:f2:a4:
         eb:04:0d:d8:03:8e:72:e1:92:d4:a6:3f:de:68:33:a2:e4:09:
         60:f8:a6:e4:21:e5:89:46:a6:aa:6d:e9:f5:14:bd:05:59:e1:
         ec:48:34:24:01:ef:38:59:7e:69:b6:05:06:61:a0:5d:27:23:
         0f:25:e4:04:69:1a:4b:b9:98:53:7b:9c:4b:a5:83:8b:82:1c:
         4d:0a:66:3f:94:6a:46:83:e9:5d:1b:ec:1f:43:11:6c:12:90:
         6e:96:7f:eb:c2:df:ef:64:76:62:e6:ca:da:f7:dd:ca:cf:83:
         de:be:2b:c6:3a:0a:72:03:7b:c5:9a:dc:7b:18:9c:a1:ab:be:
         94:2a:9b:0d:16:d2:e4:b5:5c:9b:ca:9d:18:fb:a7:a8:04:41:
         3a:c0:ec:52:08:fa:cf:f4:dd:04:63:88:c5:ac:ca:ae:bd:ab:
         77:06:0f:a9:c8:ec:bd:2f:fb:6e:21:56:9b:f4:95:d0:f6:35:
         9a:db:ed:88:f3:c0:31:9a:fa:9a:b0:5c:be:5c:b2:c3:bc:0d:
         49:ad:1c:5c:b5:19:c6:0b:2f:e3:f3:a7:62:f2:42:e6:35:21:
         d8:ae:68:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:20:05 2025 by rpki-client