Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B5568D235613C8FBA63E48026996810FAB5904D3.cer
File:                     B5568D235613C8FBA63E48026996810FAB5904D3.cer (raw, json)
Hash identifier:          jKuHs5ejAKh00Ap7WqSfewTUf3ucyQpbnlNVqmwAnjw=
Subject key identifier:   B5:56:8D:23:56:13:C8:FB:A6:3E:48:02:69:96:81:0F:AB:59:04:D3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1134A46EC96D40BE551D414B0F35736D41F4899B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/B5568D235613C8FBA63E48026996810FAB5904D3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Mar 2025 05:06:26 +0000
Certificate not after:    Fri 13 Mar 2026 05:11:26 +0000
Subordinate resources:    AS: 264462
                          IP: 132.255.52.0/22
                          IP: 2804:2010::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:34:a4:6e:c9:6d:40:be:55:1d:41:4b:0f:35:73:6d:41:f4:89:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 14 05:06:26 2025 GMT
            Not After : Mar 13 05:11:26 2026 GMT
        Subject: CN=B5568D235613C8FBA63E48026996810FAB5904D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7d:a2:2e:de:86:22:01:e9:c6:95:be:b2:4f:
                    55:78:e8:1d:50:8c:43:48:31:f9:b8:8e:c9:40:a1:
                    0a:15:20:68:55:f8:cc:d3:20:6a:31:d8:d0:31:df:
                    1f:1d:30:fb:27:3c:14:da:68:6b:d8:62:6c:8b:fe:
                    00:4c:cb:aa:78:3f:31:9f:02:eb:47:5b:3b:7b:9f:
                    8a:2d:a4:b4:e5:94:88:ce:c8:cb:67:3e:5b:5a:db:
                    2d:9e:53:8e:e1:cd:26:fd:c1:f0:77:9b:5c:dc:67:
                    30:0f:d4:48:08:c8:f9:f1:cc:0b:2b:c3:97:6f:03:
                    44:7b:4a:dc:4b:1e:78:4d:6c:40:63:12:00:15:2b:
                    cc:86:44:a2:0d:31:32:30:58:32:aa:21:b3:59:0b:
                    d5:e8:e7:17:aa:58:bf:3c:ab:23:1e:d9:84:50:77:
                    ba:fa:1f:97:18:d4:73:0f:b7:6e:6d:9a:c5:8c:3f:
                    e8:47:0f:bf:9d:9b:d8:3d:7e:b1:4c:5e:f5:a8:06:
                    8c:37:9b:40:1e:56:5c:b9:d8:10:4f:f6:d4:ac:e2:
                    8a:f5:8a:c9:0d:f3:56:1e:c3:7d:d8:11:08:e9:09:
                    1c:6f:0e:00:9a:0a:d6:72:36:45:76:f8:1b:48:35:
                    1f:d0:5a:ae:d3:ef:6b:a2:ed:87:c0:97:89:7a:b9:
                    3a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:56:8D:23:56:13:C8:FB:A6:3E:48:02:69:96:81:0F:AB:59:04:D3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FkFoYCfqQoYLMkobSFiRpuCtETV6pKdN3AqbBhZj3Q1k/0/B5568D235613C8FBA63E48026996810FAB5904D3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.52.0/22
                IPv6:
                  2804:2010::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264462

    Signature Algorithm: sha256WithRSAEncryption
         2e:55:74:ec:eb:1f:3e:cb:29:d4:13:20:34:ad:d3:26:61:79:
         c1:fa:2f:ac:c0:bd:18:63:03:74:f0:71:9e:c2:82:62:29:95:
         4d:a7:c4:b4:77:c2:2b:cf:11:8f:02:0a:06:81:5a:bb:44:89:
         78:0c:95:73:fa:a8:0c:f2:f8:4b:9d:dd:13:4b:37:84:8f:da:
         8d:a5:be:d7:b8:a0:05:b6:b8:44:c4:a4:d6:3f:a7:a8:97:f9:
         42:f2:73:1e:f5:e9:d3:d9:8f:e4:05:b9:8c:62:63:e2:e8:66:
         de:17:6f:6b:de:0c:7e:a4:68:96:35:0e:a2:f8:be:af:15:69:
         4c:30:97:be:dd:69:f2:5d:a5:e0:f4:29:50:6b:7d:e7:0e:9d:
         c6:76:97:44:3c:88:ba:46:dd:60:3f:93:65:71:cd:83:ae:68:
         e7:fe:2b:87:51:c4:f9:d5:b5:c6:22:63:57:13:72:cc:79:e5:
         92:0b:ef:23:d4:de:16:61:c9:d0:71:fe:06:fb:ef:38:07:8a:
         03:af:9a:ff:49:97:ca:e7:5f:5a:29:d7:1f:0e:06:33:a6:cc:
         c8:4a:af:ea:60:71:d0:b1:e0:b9:18:b4:97:1e:03:b3:81:2a:
         bb:23:fc:d8:aa:bf:ea:8a:a8:0d:f6:96:9d:a6:ad:b4:2e:89:
         d5:e9:17:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:16 2025 by rpki-client