Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer
File:                     954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.cer (raw, json)
Hash identifier:          0aElq85sdPJQviienuOHajyiJ3gJzdfwMK/GH6X87ys=
Subject key identifier:   95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3606F5848BE86C20154C0DCB930210AE5C77ECC5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 16:18:36 +0000
Certificate not after:    Fri 06 Mar 2026 16:23:36 +0000
Subordinate resources:    AS: 270282
                          IP: 201.71.4.0/22
                          IP: 2804:69a4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:06:f5:84:8b:e8:6c:20:15:4c:0d:cb:93:02:10:ae:5c:77:ec:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 16:18:36 2025 GMT
            Not After : Mar  6 16:23:36 2026 GMT
        Subject: CN=954C9DB1285C0B22F0BAC0FE38F74F0FD2278744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5f:08:b0:87:9a:9f:1b:7b:e8:6c:2c:5d:40:
                    70:4b:86:23:16:62:92:67:4f:18:ce:12:4d:83:c0:
                    66:41:9c:42:c4:1f:6e:01:09:ba:05:11:66:9b:fc:
                    cb:15:4e:93:30:a0:73:b6:97:8b:b8:f5:93:17:a1:
                    97:7d:13:68:88:28:36:ec:fa:b5:1f:19:5d:f6:3e:
                    69:6f:af:9c:f4:17:c1:02:be:12:03:47:ea:e6:c3:
                    a0:50:59:57:bf:6e:c7:48:5b:5d:dc:a1:42:e1:67:
                    3b:cf:b5:90:73:02:a6:4b:8f:89:5a:03:bb:6c:85:
                    e4:08:47:da:05:bb:85:1b:3b:a9:40:0e:bf:1e:7c:
                    4c:18:03:fa:1d:35:27:e2:d1:e7:2f:88:37:35:01:
                    93:f4:c8:95:dd:6b:8b:4e:47:f5:a6:f0:bd:39:ca:
                    a6:57:16:80:53:ae:10:e7:21:82:20:65:85:08:e5:
                    8a:57:8a:a9:b5:27:58:ab:93:b9:4b:95:6a:fa:62:
                    51:cc:5a:59:f3:4e:45:1f:36:a7:1d:02:48:a7:3d:
                    dd:f1:53:ee:f6:f2:8c:71:83:a1:3b:92:d2:6f:c8:
                    4c:c6:d0:93:17:c5:c1:fa:a3:01:f4:bb:35:5a:f7:
                    a9:21:f8:f4:bd:f9:b7:06:8c:92:3b:be:7a:1c:26:
                    d4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:4C:9D:B1:28:5C:0B:22:F0:BA:C0:FE:38:F7:4F:0F:D2:27:87:44
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GmEbB276KoREmZnJUyz3N7ZXL1cS7b52zmfzyLYSUE9e/1/954C9DB1285C0B22F0BAC0FE38F74F0FD2278744.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.4.0/22
                IPv6:
                  2804:69a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270282

    Signature Algorithm: sha256WithRSAEncryption
         26:5b:1b:c0:74:17:0a:3b:86:af:95:6f:e5:89:98:57:82:cc:
         28:c0:d1:67:70:b1:24:1b:6c:5f:76:cc:14:34:15:59:1f:7e:
         5a:34:2b:1a:00:08:b7:70:4c:b5:24:28:f8:be:1f:27:0a:19:
         6f:8e:7b:22:a7:5b:2b:bc:9e:b3:18:29:54:9b:fe:9f:79:08:
         3b:55:f7:aa:55:9e:59:dc:ff:44:4e:64:d4:f2:f1:ad:e8:ce:
         94:2c:05:54:61:d2:87:5a:ef:82:41:0c:99:d1:8d:38:2e:ab:
         3d:09:1c:78:68:a5:0a:f9:59:af:a8:bd:75:75:42:cc:94:f7:
         e7:fa:97:cf:cc:ad:91:9f:7e:15:db:43:92:40:7b:8d:19:5b:
         a1:4a:94:1f:9b:2d:5b:65:48:05:d9:6a:1e:98:df:11:82:4a:
         de:c6:d1:58:e4:37:04:f4:97:ef:0f:a4:44:75:e9:df:78:b7:
         17:42:08:f1:eb:02:e2:53:e4:9e:f9:96:00:9d:ba:b5:4e:6b:
         76:4f:31:da:70:97:ea:79:01:45:16:c7:93:de:6d:70:17:17:
         42:a1:8c:7a:62:93:88:27:32:f1:07:8e:f7:44:45:1f:99:2f:
         3c:39:aa:2b:94:2c:d2:a7:d0:e5:91:65:13:16:2b:c4:4d:c8:
         e1:4b:bc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:34:52 2025 by rpki-client