Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A2547B4C7F3DCE9C068800E0B79911EA899B73D1.cer
File:                     A2547B4C7F3DCE9C068800E0B79911EA899B73D1.cer (raw, json)
Hash identifier:          3RVRPTfLcmE92S5TgB4QjPIQapKmv9cJ5IvvkK924wE=
Subject key identifier:   A2:54:7B:4C:7F:3D:CE:9C:06:88:00:E0:B7:99:11:EA:89:9B:73:D1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7540994C47BBC80E626094CFC66D8D5E434082E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/M8aJ5JGWDZSaeZkNtEWTsRDRKgQmz6PVNrNmP5QEvNN/1/A2547B4C7F3DCE9C068800E0B79911EA899B73D1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/M8aJ5JGWDZSaeZkNtEWTsRDRKgQmz6PVNrNmP5QEvNN/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 00:52:53 +0000
Certificate not after:    Thu 03 Apr 2025 00:57:53 +0000
Subordinate resources:    AS: 266970
                          IP: 45.226.156.0/22
                          IP: 2804:4620::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:40:99:4c:47:bb:c8:0e:62:60:94:cf:c6:6d:8d:5e:43:40:82:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 00:52:53 2024 GMT
            Not After : Apr  3 00:57:53 2025 GMT
        Subject: CN=A2547B4C7F3DCE9C068800E0B79911EA899B73D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4c:68:0c:cd:76:55:b6:ac:fc:37:7e:6a:eb:
                    ee:43:6c:f6:ec:c2:ab:3b:65:07:26:68:28:8e:12:
                    25:76:34:cc:fc:fd:6f:ac:c3:96:6a:1f:a2:ac:5f:
                    d7:9f:40:58:0c:4b:ce:71:8b:72:8d:32:4b:97:2f:
                    e1:8b:81:73:15:ba:69:8d:6d:fb:5a:01:0b:36:a1:
                    43:4b:ae:ad:aa:44:d7:d3:1e:aa:61:f5:d2:5b:f2:
                    c6:58:7a:18:5b:4c:65:4e:e3:14:35:17:4b:6b:a8:
                    5f:48:a9:29:92:68:1f:40:ea:d1:7f:41:37:69:0e:
                    0a:01:5c:f5:26:e8:e5:f3:34:c7:fa:1d:76:63:32:
                    cb:cb:66:c3:bf:e2:47:6a:26:b2:64:bb:05:a9:db:
                    44:ed:df:04:cb:3c:f4:4e:16:89:2c:16:e9:7d:d1:
                    7c:f8:48:3b:ec:51:10:a2:53:97:61:f0:4a:17:42:
                    b7:c9:d3:ec:36:a5:b4:2c:c9:70:42:24:88:5a:63:
                    fc:d1:c1:a0:46:f6:b3:10:a3:34:04:43:2e:26:e1:
                    92:f5:35:3d:d5:cc:23:f3:19:fe:95:1e:33:26:b4:
                    f0:11:5e:4f:52:b3:f7:68:47:79:b1:98:a6:fb:28:
                    45:89:61:e7:c6:03:31:96:bd:78:42:1f:53:96:0f:
                    e9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A2:54:7B:4C:7F:3D:CE:9C:06:88:00:E0:B7:99:11:EA:89:9B:73:D1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/M8aJ5JGWDZSaeZkNtEWTsRDRKgQmz6PVNrNmP5QEvNN/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/M8aJ5JGWDZSaeZkNtEWTsRDRKgQmz6PVNrNmP5QEvNN/1/A2547B4C7F3DCE9C068800E0B79911EA899B73D1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.156.0/22
                IPv6:
                  2804:4620::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266970

    Signature Algorithm: sha256WithRSAEncryption
         18:49:76:c2:15:5b:09:66:0c:fb:3b:f1:c3:72:19:1d:ea:82:
         65:d0:f0:dd:65:50:ec:c2:99:91:f2:cd:5b:f0:ff:41:af:4d:
         75:62:a6:93:33:9a:eb:73:a0:4a:6a:43:c8:f3:b2:1c:88:a2:
         51:59:34:09:f2:c2:a1:d5:d1:53:db:8e:e8:a1:ba:4e:47:61:
         75:e2:1c:18:e2:18:1e:c4:9b:93:27:8b:34:8e:bc:9e:3b:42:
         d4:42:84:85:3e:d3:e4:11:ea:d2:f3:78:0d:2d:a5:0f:8d:a5:
         17:94:e5:50:72:bb:8d:71:e6:34:20:6d:f8:7d:09:24:1f:28:
         9d:8b:3c:a1:ba:30:26:e5:ff:f4:51:d4:f5:5e:09:4c:52:51:
         b3:ef:e9:73:aa:4a:2d:68:51:db:51:b6:ed:7f:0c:31:fc:f1:
         b4:96:f9:9a:cd:86:a7:2c:f5:f8:93:d6:f8:17:64:b3:a5:bb:
         19:1a:a1:de:b2:80:ad:4a:e9:05:cd:04:1a:a4:d6:11:df:69:
         ec:33:33:a8:c2:97:65:db:d6:34:a6:58:71:cc:ca:87:c9:53:
         5c:89:2c:c3:ed:33:f8:5c:6e:bb:e1:a4:79:ee:ef:c0:ad:d1:
         5c:aa:3e:50:56:0c:0d:e4:e7:c7:2c:fe:05:0b:1e:3c:4f:49:
         d6:90:15:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:08:18 2025 by rpki-client