Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9B0FDA073951168EEB28943672D529AFE023A2B0.cer
File:                     9B0FDA073951168EEB28943672D529AFE023A2B0.cer (raw, json)
Hash identifier:          1W9wHMoCGEZXRYKJiL7J5Iqg6pD+3k/pRVTWXQ5+Y/Y=
Subject key identifier:   9B:0F:DA:07:39:51:16:8E:EB:28:94:36:72:D5:29:AF:E0:23:A2:B0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1DC9827AF30744FCA1D80AE383515262BD5C4393
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/9B0FDA073951168EEB28943672D529AFE023A2B0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 14:37:26 +0000
Certificate not after:    Fri 06 Mar 2026 14:42:26 +0000
Subordinate resources:    AS: 271694
                          IP: 187.111.124.0/22
                          IP: 2804:7f88::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c9:82:7a:f3:07:44:fc:a1:d8:0a:e3:83:51:52:62:bd:5c:43:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 14:37:26 2025 GMT
            Not After : Mar  6 14:42:26 2026 GMT
        Subject: CN=9B0FDA073951168EEB28943672D529AFE023A2B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c3:a8:4f:11:dc:35:5f:f7:e3:00:ea:8e:c2:
                    00:95:be:f7:9a:a9:b1:00:f4:f4:e5:9a:40:e3:f8:
                    04:59:b0:4a:cb:2e:3f:2a:ed:17:42:af:10:38:4c:
                    a5:6b:bc:af:22:97:be:19:56:1f:7b:ed:bd:b9:4c:
                    fa:e4:c8:17:c8:43:ad:9b:34:29:2f:d9:df:85:cf:
                    9f:68:ca:02:a3:1b:6b:1d:8d:84:36:86:86:67:b6:
                    5d:eb:82:d6:1d:bf:22:9e:36:e4:05:c0:de:9d:03:
                    8f:9c:96:3e:3e:3d:2b:bd:b3:c5:f4:d3:76:a6:9b:
                    48:c5:8e:e4:2c:d7:6a:68:96:83:8f:f0:df:79:6c:
                    75:e8:9a:9b:01:a6:1d:2f:31:fe:23:15:9e:e1:1a:
                    51:c9:d9:b3:97:44:2d:37:66:3e:36:59:48:7a:d1:
                    50:4e:fa:23:e2:4e:8f:0f:08:bb:63:65:62:ea:84:
                    86:e0:c0:4c:2f:75:bd:50:c3:49:ab:eb:51:d2:e6:
                    8d:7b:75:3a:3b:14:70:dc:06:0e:54:6f:90:91:62:
                    b1:ae:c9:d0:3b:9b:b8:59:99:2e:bb:19:8b:98:37:
                    c0:06:ec:95:f4:a6:9f:9d:4d:34:c1:ba:e6:1f:ae:
                    01:03:b9:85:ef:cf:cd:9e:a4:fb:f8:a7:17:22:b2:
                    c2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9B:0F:DA:07:39:51:16:8E:EB:28:94:36:72:D5:29:AF:E0:23:A2:B0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/1/9B0FDA073951168EEB28943672D529AFE023A2B0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.124.0/22
                IPv6:
                  2804:7f88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271694

    Signature Algorithm: sha256WithRSAEncryption
         d9:80:28:35:fc:32:d5:79:b9:8d:60:90:c2:cb:bc:82:ff:0a:
         a5:2f:ef:e7:50:50:9d:aa:7b:06:49:fb:a8:78:c4:96:48:cc:
         fb:43:3f:38:01:8f:00:c0:6e:2f:82:65:f3:5e:04:c9:1d:78:
         47:8a:0e:4b:76:7c:b5:98:0d:83:08:26:a8:3f:a9:30:1f:df:
         72:d2:04:56:a3:78:08:fb:5d:b4:11:16:82:aa:4e:b4:25:78:
         fb:4e:c6:35:29:f1:22:63:94:b6:30:aa:d3:6d:8e:23:d7:5d:
         7d:bc:ac:63:f2:4a:19:a6:9d:58:72:41:61:06:66:2f:63:e6:
         28:1e:58:53:99:9f:83:03:a6:9a:2a:a4:5a:d7:07:1b:bc:e1:
         dc:39:57:f2:7a:6f:bc:1e:b4:de:c6:0e:15:fb:7a:64:ae:dc:
         3a:b7:42:8c:b3:0f:1d:75:e5:5e:00:df:c6:94:fd:19:79:d1:
         7a:87:93:00:b6:60:99:ca:87:fc:dc:1e:0b:d2:3a:6c:27:d9:
         ea:24:83:9e:cc:c1:29:f8:56:e3:c2:f6:08:25:2b:ad:6f:4a:
         cf:93:90:83:17:e9:4d:a2:14:1c:28:46:e3:64:30:c0:5b:47:
         b2:65:07:52:bb:c7:2f:51:a2:6c:f9:e3:df:8e:ff:e9:c3:ad:
         b7:61:f6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:50:38 2025 by rpki-client