Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer
File:                     B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.cer (raw, json)
Hash identifier:          UVKNpt4peTQhudxoteZM93mzQiUQ6jJUXPfYiYHh71Q=
Subject key identifier:   B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6B2B1956F0B66630E6C0A54ED246294FAE081163
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 04 Feb 2025 13:29:21 +0000
Certificate not after:    Tue 03 Feb 2026 13:34:21 +0000
Subordinate resources:    AS: 268529
                          IP: 45.162.48.0/22
                          IP: 2804:529c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:2b:19:56:f0:b6:66:30:e6:c0:a5:4e:d2:46:29:4f:ae:08:11:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  4 13:29:21 2025 GMT
            Not After : Feb  3 13:34:21 2026 GMT
        Subject: CN=B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4e:5a:77:ef:29:0a:ee:d2:12:3e:e7:d2:d1:
                    22:0e:01:17:19:a3:d9:25:b8:f5:a8:15:af:2b:8b:
                    41:49:bc:e8:6f:1c:bb:4e:ff:ce:3c:62:d8:74:67:
                    68:ac:66:4b:6e:1e:36:65:39:aa:19:0a:e6:2d:83:
                    05:54:d9:58:83:15:04:b0:85:f8:bd:3a:75:42:bf:
                    da:df:ad:2e:11:07:ae:c1:26:f0:5e:21:c9:78:b5:
                    73:8a:83:af:54:84:96:80:71:14:51:50:33:88:7a:
                    e8:ac:05:55:05:67:2e:89:f6:ff:51:a6:11:95:49:
                    4d:a7:b7:1b:8a:e6:f8:da:af:70:3f:f9:0d:0c:5b:
                    e3:48:56:e9:9f:c1:54:7f:54:89:6b:01:2d:97:fa:
                    ad:7d:b2:a5:14:d3:6c:8e:a6:ee:2e:e0:23:38:9c:
                    2d:37:de:79:11:ac:ae:b3:7d:d1:cd:67:29:8c:ba:
                    b9:46:bc:81:90:52:c2:f1:8d:cc:d7:34:72:7d:0e:
                    45:8f:23:75:09:b8:16:c0:9b:08:1c:0b:ba:a8:0d:
                    63:fc:05:ae:34:83:c0:f9:9f:fc:91:d2:31:62:4f:
                    30:1c:69:20:49:ca:2a:98:75:e3:2c:0d:1b:28:44:
                    00:9c:34:31:72:76:5d:5c:fb:35:10:04:31:8b:65:
                    b9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:1D:6A:9C:5F:D8:1F:51:C4:F5:E7:3E:59:4F:0C:F0:C9:99:B8:43
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C9HKKQTo1gccVVkWm4kYH7BcfGBRybLag1HBjws3oJb1/0/B41D6A9C5FD81F51C4F5E73E594F0CF0C999B843.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.48.0/22
                IPv6:
                  2804:529c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268529

    Signature Algorithm: sha256WithRSAEncryption
         39:28:46:57:89:31:f7:8d:aa:d2:13:4d:aa:29:6c:bd:41:80:
         c9:db:ab:d9:5a:8b:f2:3a:bd:41:99:3b:dd:91:ae:de:e7:a7:
         84:1d:9f:de:e9:33:b2:fb:75:d9:de:0f:ba:95:b1:a9:4f:d9:
         41:ac:d2:0c:35:00:15:72:6f:06:4b:a1:74:c3:04:bc:5a:9c:
         b0:de:9c:c7:b3:cf:b4:a6:c5:86:93:a4:08:75:0a:90:0e:f9:
         1f:30:e0:04:5f:c5:d2:ad:ac:91:e6:ab:46:f6:b0:9e:48:1f:
         15:91:5e:27:45:ce:6a:e8:8d:0d:ce:97:6e:93:aa:a6:d7:79:
         24:18:cc:89:ec:22:0b:2d:95:5c:66:9f:cd:23:a6:86:c6:bb:
         23:12:ea:00:9c:55:c6:29:f3:b2:04:b0:b0:10:ed:18:a7:7d:
         fa:94:55:04:9f:0a:1b:22:6a:af:33:16:12:c2:aa:7f:b8:29:
         a4:06:ec:31:49:d3:52:e7:9b:10:df:65:7d:56:d2:82:ba:67:
         cc:96:9a:45:28:b2:18:90:f1:f9:8c:44:98:01:06:21:e0:0d:
         e8:6b:7f:66:28:95:35:40:4f:56:31:7a:af:32:df:65:14:f1:
         39:ab:b3:fb:44:10:01:da:14:a3:f2:5a:cb:82:6d:2c:3c:7a:
         47:99:77:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:40:47 2025 by rpki-client