Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/98F10F1AF7DA0A16BA102F7CE88366D0DC7A8ECD.cer
File:                     98F10F1AF7DA0A16BA102F7CE88366D0DC7A8ECD.cer (raw, json)
Hash identifier:          nuoFDDf3fwvQDQmcqwDgaLNwXDDWoUQCrISYBl5x0J4=
Subject key identifier:   98:F1:0F:1A:F7:DA:0A:16:BA:10:2F:7C:E8:83:66:D0:DC:7A:8E:CD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       20F7FB85A3151BB1002509DBACFE147D2B116F9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/98F10F1AF7DA0A16BA102F7CE88366D0DC7A8ECD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Feb 2025 08:37:54 +0000
Certificate not after:    Tue 17 Feb 2026 08:42:54 +0000
Subordinate resources:    AS: 273392
                          IP: 45.168.94.0/24
                          IP: 2804:8df4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f7:fb:85:a3:15:1b:b1:00:25:09:db:ac:fe:14:7d:2b:11:6f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 18 08:37:54 2025 GMT
            Not After : Feb 17 08:42:54 2026 GMT
        Subject: CN=98F10F1AF7DA0A16BA102F7CE88366D0DC7A8ECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3e:48:43:ca:c8:88:f7:81:85:84:63:bf:a2:
                    80:4f:e2:24:a0:6e:54:9f:55:25:5e:d7:79:4a:9e:
                    43:72:c6:d3:44:c1:84:fa:d5:20:f1:15:dd:23:2e:
                    34:fc:1a:7d:7f:0c:ba:7e:93:f3:fe:d9:67:d9:16:
                    d7:56:bc:8e:a2:43:31:b0:d9:e0:6a:ed:a6:8b:47:
                    65:4a:ca:17:e6:bd:4b:3e:67:ee:c5:8c:73:f9:2a:
                    6a:11:eb:09:b9:d8:0b:cd:d0:86:06:85:8c:2a:6a:
                    6e:6b:be:32:ae:4d:42:67:c0:a5:8c:59:db:17:24:
                    9a:6b:9b:5e:0e:a2:e8:bc:75:89:df:c1:08:0f:ff:
                    bf:61:ca:a5:01:04:ff:7d:3f:4c:07:71:b0:67:a1:
                    58:56:27:c2:5a:92:7e:3e:d4:85:c8:6b:5f:cf:9e:
                    8e:a7:d9:85:fa:b9:50:1a:4e:b3:78:1e:58:f7:ac:
                    8a:cd:b6:7e:81:9f:f6:d9:89:f5:c7:90:0b:ca:90:
                    bd:34:d6:85:07:0e:5f:69:19:66:0f:2c:17:f2:23:
                    24:79:ec:e4:23:29:cd:51:70:2a:3f:f6:6c:61:b6:
                    32:46:81:56:eb:93:4a:fa:78:37:ad:d1:5c:ca:d9:
                    5e:52:fd:98:de:f7:6d:9d:8c:2a:65:1e:01:d5:1d:
                    62:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:F1:0F:1A:F7:DA:0A:16:BA:10:2F:7C:E8:83:66:D0:DC:7A:8E:CD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/98F10F1AF7DA0A16BA102F7CE88366D0DC7A8ECD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.94.0/24
                IPv6:
                  2804:8df4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273392

    Signature Algorithm: sha256WithRSAEncryption
         30:45:00:8c:ae:63:0f:aa:ad:50:9f:2c:39:62:8d:74:bb:4f:
         62:7c:ab:2d:85:1c:27:4e:e9:5a:cd:74:77:8d:4b:25:a0:b8:
         46:1a:a4:35:ec:3b:36:13:7c:2a:0e:91:94:e9:d0:51:e7:05:
         05:14:db:de:5f:27:fd:21:73:e4:47:a0:02:57:9b:af:a5:b2:
         c4:a6:7b:0f:d5:64:76:44:ab:75:51:ec:ab:f0:59:5d:dc:e3:
         82:b3:41:7b:bf:d8:89:a4:42:95:47:9b:73:21:c1:c2:a2:90:
         6a:f7:87:4b:bb:ef:d2:59:8b:17:cb:d8:ad:b8:61:44:c7:b9:
         c4:42:b7:47:20:4f:d7:dd:2f:8c:8e:91:6e:4d:80:4c:1c:a3:
         5e:01:12:78:2d:74:7b:e3:5c:ae:8c:bd:b1:e0:53:3c:59:dc:
         1f:c7:d5:50:39:64:20:7d:e6:01:e8:8c:42:60:2d:38:c8:44:
         08:f2:ff:2e:ab:2e:ca:51:86:9d:ed:0d:95:42:c8:e0:61:f6:
         a0:ba:1a:1a:61:59:d7:0d:a0:35:f9:41:e8:a7:a7:1e:8c:6f:
         54:ae:5e:21:59:d1:51:d3:f6:2e:a2:58:bd:4f:35:0f:45:1b:
         e8:cf:c7:9a:19:62:52:d6:65:98:7b:a4:d3:0a:24:b0:b5:55:
         8d:7c:f7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:27:07 2025 by rpki-client