Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer
File:                     B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer (raw, json)
Hash identifier:          8gL+2Hsy4XBf0PQdn2huQBIOTLB0cEbePg59DZEXigc=
Subject key identifier:   B8:27:42:22:DA:E9:FC:A8:09:75:17:13:37:DD:E4:FF:19:CE:8E:24
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       15C96A509E81F9B31D14D6AE3CDC099005372579
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.mft
caRepository:             rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 08 Mar 2025 02:49:19 +0000
Certificate not after:    Sat 07 Mar 2026 02:54:19 +0000
Subordinate resources:    AS: 268269
                          IP: 45.237.100.0/22
                          IP: 2804:4e90::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c9:6a:50:9e:81:f9:b3:1d:14:d6:ae:3c:dc:09:90:05:37:25:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  8 02:49:19 2025 GMT
            Not After : Mar  7 02:54:19 2026 GMT
        Subject: CN=B8274222DAE9FCA80975171337DDE4FF19CE8E24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:26:03:21:e1:55:24:ae:db:8e:b0:d3:1c:96:
                    cf:16:48:0a:66:8a:c2:ea:2c:4e:39:e8:21:b7:94:
                    bb:78:2c:6d:f6:e0:5a:f7:ed:d1:ec:57:cb:86:70:
                    8c:19:4d:63:2d:e3:d1:3f:e7:f7:5b:a1:db:b5:00:
                    1d:71:b1:62:d2:89:4a:f0:b9:01:3e:50:4c:1c:b6:
                    26:fc:c4:56:93:9e:48:c4:20:77:84:a5:ca:0f:e5:
                    e9:d6:a3:42:bf:a6:24:84:b0:83:21:59:b2:58:8e:
                    79:71:6a:ba:0b:44:3c:8a:3b:d0:f0:0e:04:fd:74:
                    6c:83:3c:a7:5f:bb:cd:2b:37:4d:67:96:a7:89:fe:
                    35:4e:e3:4f:70:de:98:c7:b2:3d:84:de:cc:d5:91:
                    34:40:e3:c2:9d:33:5f:13:70:9a:53:f1:0e:dd:57:
                    4e:5e:ed:ac:64:ff:d5:e5:1f:26:09:9e:68:06:89:
                    ae:e6:69:1e:20:7c:41:f3:69:f5:55:14:8f:0d:3f:
                    2f:af:4f:25:c0:d1:0f:b0:a5:a1:78:d0:0b:76:16:
                    fe:f6:fe:bd:3e:e2:ec:4c:7a:12:e5:07:1b:e7:41:
                    df:75:f4:b8:a8:57:e8:da:3b:22:a9:82:f4:f0:66:
                    08:59:90:94:e1:e8:5f:b3:7b:f5:c7:05:ae:74:b3:
                    ab:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:27:42:22:DA:E9:FC:A8:09:75:17:13:37:DD:E4:FF:19:CE:8E:24
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.100.0/22
                IPv6:
                  2804:4e90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268269

    Signature Algorithm: sha256WithRSAEncryption
         20:e2:ee:c3:9c:2a:00:ea:b1:4a:d9:44:30:ad:a3:21:2c:aa:
         3f:83:71:1a:01:18:f2:bd:02:1e:25:1d:c9:eb:8b:55:ff:94:
         fd:92:40:44:57:21:aa:06:91:5e:6c:44:78:06:0c:3f:39:d2:
         65:1b:72:35:e5:fd:2b:0c:05:65:33:40:e5:30:bd:1b:27:58:
         b5:2e:a0:19:e7:8a:30:d6:3a:6f:f0:77:5c:4c:23:e8:cf:e0:
         00:f5:04:04:a5:2f:d6:32:fc:88:08:ac:11:2d:94:c6:5a:8a:
         6c:4b:36:5f:95:38:8f:15:e0:91:1d:75:aa:9a:86:5d:e5:1a:
         6e:23:e2:34:84:4c:b0:1b:33:92:c5:92:17:37:2a:c4:01:98:
         71:00:26:b0:0e:0a:c9:9b:eb:7b:a4:66:5a:b0:48:d4:90:4a:
         78:6b:c2:ed:88:41:ff:c8:c9:7f:61:91:49:22:fd:b8:93:a8:
         b9:96:8b:b1:b5:ac:55:bc:2e:44:ad:93:75:f4:2a:c1:17:7f:
         fe:7c:d4:0a:10:4d:c3:06:c7:cc:16:1c:a0:51:5a:47:00:bb:
         c8:63:e6:11:73:22:21:e9:a5:1b:b0:dc:d5:5d:bf:bf:df:91:
         34:6c:ce:29:d6:23:c3:aa:e5:dd:63:21:e0:88:72:00:7f:cf:
         a1:8f:a3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:04:52 2025 by rpki-client