Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A942C31B9D70569B2761518A130F2D4756DBFC61.cer
File:                     A942C31B9D70569B2761518A130F2D4756DBFC61.cer (raw, json)
Hash identifier:          /sHqhdUjOMDwkPe/AM7VntNUA5icHLLKbgOu0yFSmM8=
Subject key identifier:   A9:42:C3:1B:9D:70:56:9B:27:61:51:8A:13:0F:2D:47:56:DB:FC:61
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       442CC047B21DB203C208316B72700CD33EC64B52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:45:05 +0000
Certificate not after:    Wed 04 Mar 2026 18:50:05 +0000
Subordinate resources:    AS: 267072
                          IP: 45.225.200.0/22
                          IP: 2804:47b4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:2c:c0:47:b2:1d:b2:03:c2:08:31:6b:72:70:0c:d3:3e:c6:4b:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:45:05 2025 GMT
            Not After : Mar  4 18:50:05 2026 GMT
        Subject: CN=A942C31B9D70569B2761518A130F2D4756DBFC61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c9:bb:d6:56:07:fe:c4:5d:42:b6:a0:48:a4:
                    72:b6:ec:67:b6:c4:0c:38:7b:cd:ca:72:4d:6c:26:
                    b2:6b:0d:0b:39:46:13:b7:03:03:ad:86:e5:f8:fd:
                    19:f1:2e:f8:66:54:0e:d3:46:9c:e2:d4:03:41:32:
                    e7:2c:e7:32:eb:70:c9:7b:82:15:64:cb:0a:1d:cb:
                    1b:90:ac:57:e3:2a:d3:6e:fd:ee:74:2c:d0:86:54:
                    c8:c9:b4:fc:4f:33:ca:5c:cc:bf:6e:82:aa:85:3e:
                    97:77:a9:03:cc:3c:a9:7a:ec:e7:72:2d:3f:88:ad:
                    c5:4d:90:53:d6:71:0e:10:74:2e:7c:ab:62:20:77:
                    02:56:2e:56:62:52:72:c2:bf:a2:7e:20:a1:e7:45:
                    cc:23:03:94:64:7b:e5:72:79:ce:be:fa:20:69:72:
                    49:cd:99:dc:53:c3:e6:88:ba:6b:19:08:1d:bd:f9:
                    ab:63:61:ba:e1:2c:ff:b8:d1:90:02:ca:0c:94:56:
                    6c:df:2e:e8:d0:3d:3c:2b:20:be:d9:14:fb:55:72:
                    b1:32:94:8d:2a:33:31:03:f8:9f:cb:57:c5:11:d8:
                    05:7e:07:74:51:f0:bd:d4:c8:69:e0:4e:ee:e7:25:
                    bc:2a:f4:35:a8:4a:7a:fe:1f:a9:5e:85:53:bc:a8:
                    f1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:42:C3:1B:9D:70:56:9B:27:61:51:8A:13:0F:2D:47:56:DB:FC:61
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/1/A942C31B9D70569B2761518A130F2D4756DBFC61.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.200.0/22
                IPv6:
                  2804:47b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267072

    Signature Algorithm: sha256WithRSAEncryption
         10:e6:d4:17:81:c4:f9:31:7a:8a:e2:15:4c:1d:b7:73:ce:d1:
         35:0c:57:a4:66:2c:33:c3:13:54:55:4b:da:e1:c8:b9:40:6f:
         26:2a:12:46:2b:dc:d8:a6:f2:5a:07:8c:9a:59:3e:2f:03:c8:
         d3:95:58:2b:79:ed:3a:c7:e3:fa:6d:b3:97:77:0e:7c:45:34:
         54:16:35:30:85:2c:dd:14:e8:ad:24:8a:53:d2:27:51:a0:d0:
         3c:c8:b1:38:29:9e:57:ec:f0:7a:dc:d9:08:21:32:4c:de:8a:
         81:d8:64:ce:9c:83:3f:7e:1d:e7:ae:8a:77:f9:49:21:4b:ed:
         2c:d1:a5:54:67:e8:6c:cb:04:e8:e0:e5:ca:43:aa:7d:9d:16:
         a5:b9:f7:fd:41:32:0e:8a:fc:f9:f8:05:1b:e9:9e:40:25:c3:
         7b:69:d3:77:71:13:78:b6:87:33:b8:af:03:86:14:a7:7b:22:
         57:c5:fa:57:67:48:cc:37:51:b3:f3:0e:e2:ac:a9:5c:56:cf:
         58:1c:89:e2:10:73:2c:26:16:20:5d:47:3d:0f:4e:31:47:50:
         50:2d:8d:1e:9b:fd:26:2f:5a:ff:ef:3f:3a:37:b9:a1:fe:e0:
         8a:0f:b8:be:4e:65:15:14:e2:a7:30:f8:e4:4e:b9:4e:c8:5d:
         e9:00:e2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:26:54 2025 by rpki-client