Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer
File:                     B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.cer (raw, json)
Hash identifier:          DGO36ire9OkGhOg9wpkLI7u5xcKwFXrJX+cOQr+ttMA=
Subject key identifier:   B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5DD2CC98A3C9088DC684A1F551D9C7CD954AD683
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:19 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:19 +0000
Subordinate resources:    AS: 264311
                          IP: 138.122.100.0/22
                          IP: 2804:25f0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d2:cc:98:a3:c9:08:8d:c6:84:a1:f5:51:d9:c7:cd:95:4a:d6:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:19 2025 GMT
            Not After : Mar  4 18:40:19 2026 GMT
        Subject: CN=B5E0BE3C4F73F852BFF3535537037CAE482A4EFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5b:0b:e1:f4:b8:e9:cc:1c:cd:9b:ac:64:b2:
                    4a:ae:2f:55:64:80:bb:1a:36:1d:76:e5:d0:28:4f:
                    99:e5:06:2c:01:bc:93:f0:7e:0f:4b:71:a8:06:80:
                    25:80:e1:e3:07:b1:c6:5e:9e:12:fa:46:15:c5:b6:
                    68:ef:2d:47:86:f5:c3:f0:40:f6:52:93:8b:41:09:
                    51:f2:5e:1d:4c:ef:fe:19:e9:02:fd:ba:46:90:49:
                    cf:f7:6a:53:b8:56:7b:e7:1f:45:ef:88:52:c7:9f:
                    c4:07:da:49:5f:49:d3:a6:86:cc:01:f6:2a:97:a2:
                    53:6b:ac:5c:35:bb:9d:35:7f:31:7f:b1:8b:a0:3c:
                    59:98:7b:06:05:9d:e8:24:8f:33:6a:a3:9e:ac:25:
                    35:3b:d5:11:d6:7d:fc:f1:4b:53:d2:9c:c8:dd:ea:
                    99:69:de:2d:55:6b:9f:e9:c4:67:3e:32:62:8e:6e:
                    85:ba:3d:33:a6:b3:ae:d4:f3:c9:13:89:64:80:f9:
                    91:14:31:bd:10:f3:15:5f:d8:79:c9:94:9f:8a:12:
                    9e:7e:fe:d6:15:c0:8a:31:b0:29:7c:2d:9d:74:7e:
                    12:eb:71:d6:04:e0:f0:26:cb:81:6c:99:3c:f0:49:
                    3a:b1:8e:19:b9:ad:c0:22:94:e7:0d:e9:aa:c9:8d:
                    e6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:E0:BE:3C:4F:73:F8:52:BF:F3:53:55:37:03:7C:AE:48:2A:4E:FA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/1/B5E0BE3C4F73F852BFF3535537037CAE482A4EFA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.100.0/22
                IPv6:
                  2804:25f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264311

    Signature Algorithm: sha256WithRSAEncryption
         93:0a:c4:0e:32:0a:d5:e7:94:ec:5d:ad:fb:8f:a6:a9:33:ff:
         56:7c:5f:ac:e6:be:f3:b7:8c:84:63:d4:f4:aa:3a:81:c0:91:
         7b:a6:38:af:6d:74:1f:ad:11:ea:51:06:e5:9d:05:94:b4:20:
         8f:3a:be:e5:56:63:75:f4:39:b3:97:34:a2:7d:a5:89:46:c4:
         3d:78:4a:ad:03:5f:05:d6:00:42:5c:39:b6:34:a6:0d:ce:91:
         15:cd:57:2f:3c:de:44:87:b0:41:0f:45:14:80:a8:bd:6f:f1:
         b8:4b:72:24:d4:3f:65:4c:06:81:18:5e:af:c1:3c:e2:ea:eb:
         57:9c:b8:5e:b8:86:8e:a3:22:d3:29:17:eb:45:11:ad:ce:f2:
         cf:ae:75:e5:11:ea:77:ac:46:3c:f5:57:97:28:75:1b:e0:1c:
         aa:a6:a2:d9:c9:08:b7:c0:3f:27:e6:0a:db:62:a0:df:7a:0c:
         c2:c4:86:29:7d:1d:33:65:c9:fb:6a:32:b7:ce:cb:12:fd:4f:
         89:d5:5d:e1:b6:27:18:36:f4:94:b8:93:a4:3d:ae:ca:f3:77:
         44:5d:4b:32:4a:39:ea:f9:d1:dc:7a:eb:cf:a7:0c:7f:ad:2e:
         2c:9d:f7:cb:64:e9:fd:2a:c1:b8:7a:82:5d:e8:35:b7:d5:01:
         9f:a3:01:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:48 2025 by rpki-client