Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9AF0CBFFE3000E7D89211B15F5EA30C8FA6C5F43.cer
File:                     9AF0CBFFE3000E7D89211B15F5EA30C8FA6C5F43.cer (raw, json)
Hash identifier:          iLSf8dQaDpiqjjwIc1rJ6xt/1yr2NMTr/q3RvvSKeZM=
Subject key identifier:   9A:F0:CB:FF:E3:00:0E:7D:89:21:1B:15:F5:EA:30:C8:FA:6C:5F:43
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       52ECF65A7A2C4EBCDB26801CD2CE5B94B50084CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/9AF0CBFFE3000E7D89211B15F5EA30C8FA6C5F43.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Mar 2025 16:21:47 +0000
Certificate not after:    Wed 11 Mar 2026 16:26:47 +0000
Subordinate resources:    AS: 262469
                          IP: 168.196.172.0/22
                          IP: 177.47.160.0/20
                          IP: 179.127.96.0/20
                          IP: 2804:4d4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ec:f6:5a:7a:2c:4e:bc:db:26:80:1c:d2:ce:5b:94:b5:00:84:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 12 16:21:47 2025 GMT
            Not After : Mar 11 16:26:47 2026 GMT
        Subject: CN=9AF0CBFFE3000E7D89211B15F5EA30C8FA6C5F43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:35:59:4b:3a:1e:49:ae:af:40:2f:c0:9a:e5:
                    03:72:bf:2f:6a:0a:c3:15:11:fa:70:41:b4:81:25:
                    06:55:ad:da:2b:03:87:83:6c:fa:92:aa:2b:3b:13:
                    61:1f:f1:62:7e:37:26:97:83:62:7f:44:54:74:e7:
                    3a:90:57:73:ca:df:b1:1c:51:8c:86:f7:67:0f:bc:
                    c3:6d:de:90:62:7d:ee:1e:c1:be:69:ae:f0:4b:7a:
                    1d:05:06:4d:a8:ad:2b:5a:2b:59:6f:df:d3:f3:96:
                    e1:1f:31:3f:a6:db:a9:d3:5a:e7:57:15:5b:64:0c:
                    4e:40:bf:8b:cd:15:2a:29:37:d2:06:86:55:69:9d:
                    9c:de:d7:f2:06:12:ef:7b:34:a9:f7:02:07:94:4e:
                    7f:7b:b0:4b:90:51:39:3b:28:ec:82:95:8f:c5:98:
                    f2:66:a3:6f:c8:f2:a1:e2:b4:20:82:c1:2c:dc:92:
                    84:e4:d4:54:6f:68:e4:6f:ad:49:ab:bd:27:99:b8:
                    66:cf:3f:29:2f:e4:6a:e9:a9:54:33:3d:40:e2:61:
                    ba:97:1f:67:f7:ad:2e:4d:2f:aa:6a:9e:16:de:f3:
                    8d:2d:bf:96:3d:4b:01:ad:6f:39:7e:63:34:0c:e3:
                    91:e8:06:44:f9:57:1c:c4:fb:89:eb:9d:3a:ab:86:
                    80:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:F0:CB:FF:E3:00:0E:7D:89:21:1B:15:F5:EA:30:C8:FA:6C:5F:43
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/9AF0CBFFE3000E7D89211B15F5EA30C8FA6C5F43.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.172.0/22
                  177.47.160.0/20
                  179.127.96.0/20
                IPv6:
                  2804:4d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262469

    Signature Algorithm: sha256WithRSAEncryption
         4e:24:6d:d3:1a:6e:17:9a:f4:16:f0:17:af:7d:14:ea:17:87:
         85:35:4e:66:fa:a1:15:2f:bc:6b:65:97:87:ec:3a:92:cb:d2:
         63:e4:50:9d:86:6e:e4:32:7c:5f:50:7c:69:35:94:29:4f:f6:
         ba:65:5e:b7:39:01:93:54:76:3b:6b:4e:cf:2d:c4:46:7d:9d:
         3a:8a:95:51:a4:ac:ba:5c:fb:22:bc:75:6e:4f:72:92:8a:32:
         e7:68:da:dc:ac:5f:75:8d:5a:29:d7:90:b0:66:67:cd:db:fa:
         b2:d2:ea:ed:ae:f7:80:a0:94:8d:0c:f4:27:22:e8:50:1c:38:
         ca:2b:fb:a7:c9:1a:2c:21:a2:86:f7:07:5f:63:77:d1:ab:0e:
         7e:3e:8a:89:b1:8c:cc:f6:5f:d8:68:a1:47:d9:5d:33:34:0c:
         01:c7:0f:aa:01:52:94:fc:4f:f6:f6:ff:34:85:2c:13:c3:00:
         37:81:9f:92:5f:37:10:53:36:c9:45:0b:89:c8:49:0f:b9:d0:
         90:5b:6f:af:8a:83:c4:65:b1:3f:5f:a8:0e:36:00:d7:24:04:
         c1:9e:cc:7f:4f:a0:7f:70:64:eb:83:47:53:76:32:e1:10:d0:
         72:38:0a:65:43:ed:4d:d9:42:06:f9:1b:c2:87:01:04:f8:84:
         c0:8f:0e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:35:19 2025 by rpki-client