Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.cer
File:                     BA84972F94DED1627363CADBFA872D5EA75BBC41.cer (raw, json)
Hash identifier:          OzLredltpixmBzpFPSOgX/1ISZvcsVCVF/w8h0SCDBM=
Subject key identifier:   BA:84:97:2F:94:DE:D1:62:73:63:CA:DB:FA:87:2D:5E:A7:5B:BC:41
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6E78D7537FB958A5C7168A80816BE499551BE096
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.mft
caRepository:             rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:19 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:19 +0000
Subordinate resources:    AS: 267533
                          IP: 201.182.208.0/22
                          IP: 2804:42e0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:78:d7:53:7f:b9:58:a5:c7:16:8a:80:81:6b:e4:99:55:1b:e0:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:19 2025 GMT
            Not After : Mar  4 18:40:19 2026 GMT
        Subject: CN=BA84972F94DED1627363CADBFA872D5EA75BBC41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6c:85:55:11:13:27:45:dd:bc:36:63:b8:79:
                    e3:a0:40:f6:bc:75:ae:a2:90:be:39:ba:fd:9e:85:
                    34:66:23:6f:0a:ab:84:50:04:29:76:38:c1:86:ec:
                    2d:e6:35:d1:f9:f9:12:a1:69:6d:61:90:25:9a:99:
                    e4:40:db:ce:9c:d0:1f:4a:07:a8:3f:37:e5:81:03:
                    a7:36:2f:95:d4:3c:68:6c:e6:c4:d1:7c:76:ea:69:
                    df:cd:cd:db:18:ec:77:a0:8e:14:84:39:aa:7e:21:
                    45:a3:16:79:f5:10:4a:b6:cb:40:e0:0c:e5:55:27:
                    45:3b:ba:05:09:e3:03:fc:e6:e5:c5:ec:0d:b7:f9:
                    94:1a:6a:ad:b5:6b:45:be:3f:d7:d5:74:43:e4:50:
                    0a:b6:44:5a:4d:51:3c:c0:b9:98:f8:f4:f3:c0:0e:
                    0a:82:f7:a5:e5:d1:f4:f1:77:32:fb:b6:db:c9:f5:
                    28:53:09:43:1f:bf:77:8d:3e:99:6c:5e:5b:c4:62:
                    7b:e2:87:a8:78:df:45:5e:cc:92:77:c7:18:d7:19:
                    88:0c:bd:d9:7f:06:7c:eb:2c:cf:87:95:14:9d:c8:
                    10:d3:5a:86:c9:a8:8c:bc:b4:61:09:e6:1e:cd:cf:
                    91:84:ac:27:96:82:36:28:5c:ca:f9:15:4d:a0:5a:
                    c5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:84:97:2F:94:DE:D1:62:73:63:CA:DB:FA:87:2D:5E:A7:5B:BC:41
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/52e2UjxSp7KkoHUFxdNqqQ1dQzLwZKEK2RvnrdKGJDpd/1/BA84972F94DED1627363CADBFA872D5EA75BBC41.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.208.0/22
                IPv6:
                  2804:42e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267533

    Signature Algorithm: sha256WithRSAEncryption
         07:d6:27:dc:1e:9b:a4:ba:ac:03:19:be:f0:a6:5f:6a:40:8e:
         0f:32:56:43:3a:04:8d:ce:a3:37:7b:f3:4a:09:aa:70:50:ef:
         7d:17:ba:96:2c:38:51:83:04:57:7f:2b:1a:51:93:de:45:ff:
         96:5b:a9:8e:fe:2e:29:c7:f9:98:df:ea:79:c4:7d:6d:fe:4c:
         04:d5:ec:e3:d7:d9:6c:1f:9a:d1:8c:88:ec:5e:36:ff:07:00:
         64:f5:75:a3:4e:64:f4:a0:7e:3c:39:17:ef:c0:23:0e:29:c9:
         4d:37:58:96:dd:5a:3e:c1:d9:f4:ad:a4:91:60:c0:fa:ec:61:
         2f:5e:3e:c2:6d:42:d1:f8:b4:96:45:e2:e2:aa:ac:9a:fc:86:
         7e:d6:37:20:89:e4:56:3e:5d:25:e1:f7:40:ba:60:da:68:4c:
         78:0f:eb:08:18:62:14:90:e9:8a:99:be:ff:f5:83:2f:02:1c:
         f5:fb:9e:1e:fe:b1:8a:b8:92:68:e3:28:16:64:a9:5e:a1:af:
         b1:a8:23:87:dc:88:6b:d5:2d:63:57:9b:55:78:4e:0c:c3:8b:
         5b:84:be:22:3a:4e:ea:23:d7:a2:3f:89:12:dc:e3:22:f8:4f:
         c8:f6:88:5e:38:58:f1:1b:af:2c:62:cf:7a:14:9a:c5:60:65:
         f9:68:0f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:55:06 2025 by rpki-client