Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A55E93D565F6F77E37BF561CEEE467048A013F7C.cer
File:                     A55E93D565F6F77E37BF561CEEE467048A013F7C.cer (raw, json)
Hash identifier:          cfGVrW18FpAf/2uy4TWbWh4UWZrXt100mjdIxrukFGM=
Subject key identifier:   A5:5E:93:D5:65:F6:F7:7E:37:BF:56:1C:EE:E4:67:04:8A:01:3F:7C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       68C9D5659AD702D3B07F19C5A19883CAA60D3556
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/A55E93D565F6F77E37BF561CEEE467048A013F7C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Feb 2025 11:08:46 +0000
Certificate not after:    Fri 13 Feb 2026 11:13:46 +0000
Subordinate resources:    AS: 52790
                          IP: 177.39.12.0/22
                          IP: 200.196.140.0/22
                          IP: 2804:18dc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c9:d5:65:9a:d7:02:d3:b0:7f:19:c5:a1:98:83:ca:a6:0d:35:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 14 11:08:46 2025 GMT
            Not After : Feb 13 11:13:46 2026 GMT
        Subject: CN=A55E93D565F6F77E37BF561CEEE467048A013F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:46:9b:62:b4:6d:5c:09:a5:fe:56:e2:5e:49:
                    ec:f2:9f:c8:5f:14:39:2b:a2:68:40:40:2c:8d:30:
                    a5:6d:a0:4f:13:27:3a:50:ed:0f:f8:c6:16:cd:b0:
                    d1:01:1f:09:25:ae:79:9b:e4:81:f7:ef:b2:67:e3:
                    57:da:46:72:ed:ef:8b:1b:bc:71:4e:ea:69:c5:94:
                    db:0b:4b:c8:12:e0:9c:87:2e:7f:c5:4e:11:6a:d1:
                    24:60:2a:8a:cb:68:33:69:c5:cf:ff:83:e0:c9:c6:
                    d7:01:f3:12:ff:0a:56:05:4f:0c:aa:2e:74:f9:46:
                    64:83:ba:e3:36:55:f9:c7:f3:0f:ad:8f:2a:83:21:
                    51:09:55:20:6e:57:7e:63:67:d3:1a:26:d4:11:43:
                    93:ae:ea:20:7c:cd:8e:77:1b:42:88:de:ee:0d:af:
                    4a:47:79:31:4d:06:bb:d6:08:ef:37:1b:f7:05:d8:
                    b3:e2:74:6e:f4:32:4a:6c:06:ab:63:12:75:7c:a9:
                    39:c3:c4:3b:b6:f4:04:5c:f9:84:21:6e:45:ca:e8:
                    03:cb:5c:2c:fe:19:39:24:6e:ca:86:73:dc:03:3b:
                    70:19:16:5f:b2:4b:51:ee:12:b3:3b:13:0b:cc:d9:
                    6f:07:48:97:08:0a:69:03:07:7f:c2:49:1b:6b:c7:
                    30:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:5E:93:D5:65:F6:F7:7E:37:BF:56:1C:EE:E4:67:04:8A:01:3F:7C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6bQjfCPwLofcPu5Vbx7KEdEsp1t5QJEurPcyPaiXgcuN/0/A55E93D565F6F77E37BF561CEEE467048A013F7C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.39.12.0/22
                  200.196.140.0/22
                IPv6:
                  2804:18dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52790

    Signature Algorithm: sha256WithRSAEncryption
         74:16:cf:d1:9a:49:00:20:f6:80:40:53:09:29:be:0e:33:ce:
         4c:6a:86:2f:f4:98:e1:09:50:7f:77:c4:dc:b5:f8:3e:62:2e:
         3e:8f:f7:91:33:cf:9f:cb:fd:94:76:f3:cb:60:a7:ec:ac:3e:
         a8:7a:68:f0:b6:68:7c:df:6a:7d:06:83:58:86:e5:1b:24:94:
         e9:70:2f:91:69:50:45:18:4c:a1:64:7f:97:f8:06:60:3a:8c:
         37:ff:48:95:74:70:ac:0e:c7:5b:d2:80:b2:d2:56:33:67:e4:
         54:53:00:4b:e4:91:89:36:5f:20:f0:de:fe:d9:51:5a:11:6e:
         29:51:b6:3b:b6:29:e2:81:ec:14:32:21:e4:0b:2d:7e:a8:26:
         f1:da:0a:f6:b7:28:b4:ec:ea:8c:59:d3:a2:b1:f7:c4:7d:cb:
         88:f0:af:d5:e2:40:bf:22:f1:5c:9b:3b:0d:73:f9:5c:8f:14:
         78:4b:85:2d:78:2a:8a:b1:0c:c8:b6:06:de:76:13:be:a5:75:
         87:f9:17:b8:4e:cf:95:98:5a:45:56:8f:b0:88:5a:93:44:3a:
         99:9f:69:3f:68:14:17:56:0d:7f:23:f8:dc:31:69:ba:c9:cd:
         40:48:ed:e9:86:1c:f7:50:25:76:81:23:12:53:41:35:cb:f9:
         0e:c0:90:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:36:31 2025 by rpki-client