Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BAB424425130D4A907ADC474343110DD5B32F7B5.cer
File:                     BAB424425130D4A907ADC474343110DD5B32F7B5.cer (raw, json)
Hash identifier:          oAOw4Km1e0RELrd08N3RUAI/fK8NgaSGmraxm7FG1bA=
Subject key identifier:   BA:B4:24:42:51:30:D4:A9:07:AD:C4:74:34:31:10:DD:5B:32:F7:B5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5D99A325F67F4B7A7C1F412015C11214B4D318C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/BAB424425130D4A907ADC474343110DD5B32F7B5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Mar 2025 12:41:55 +0000
Certificate not after:    Mon 09 Mar 2026 12:46:55 +0000
Subordinate resources:    AS: 270951
                          IP: 177.36.68.0/22
                          IP: 2804:7400::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:99:a3:25:f6:7f:4b:7a:7c:1f:41:20:15:c1:12:14:b4:d3:18:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 10 12:41:55 2025 GMT
            Not After : Mar  9 12:46:55 2026 GMT
        Subject: CN=BAB424425130D4A907ADC474343110DD5B32F7B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b8:61:33:b0:b6:98:b0:2a:f8:cb:f4:ad:b7:
                    f2:13:c4:b2:2b:71:60:10:f8:a2:89:c9:ea:97:33:
                    3b:8f:19:14:57:af:e0:c6:55:7f:9f:4d:40:8e:eb:
                    2f:26:2e:55:84:e5:10:45:fa:15:c4:21:2c:8e:b8:
                    a1:e8:f2:37:be:ba:7b:43:19:0b:f0:64:5d:59:73:
                    11:d1:b6:42:1d:68:ca:48:e5:ec:b5:e1:56:5c:7c:
                    07:8e:d6:2a:95:5d:91:d3:86:bc:17:35:54:59:74:
                    9d:8c:de:cc:b1:ac:de:f4:42:41:d1:18:95:9b:1c:
                    a3:69:e5:ec:a5:05:9f:1f:f6:be:0e:8a:ec:3f:59:
                    82:c6:6e:0e:2b:0e:84:d4:43:15:65:23:03:26:3a:
                    22:c2:53:4c:c4:cb:b6:1b:91:80:1e:05:b6:f6:eb:
                    ad:55:a9:9f:79:9d:f6:16:63:1d:93:8a:06:e5:ff:
                    c4:72:f0:c4:34:dd:f2:d5:47:8f:b1:63:9c:f9:04:
                    22:ee:a1:8f:2c:31:83:f0:30:79:03:a0:f6:19:50:
                    9e:eb:34:2b:a8:2e:5f:68:d4:a7:40:b9:55:34:d7:
                    4c:63:eb:5f:33:0e:96:fe:8d:85:b7:11:24:f5:9a:
                    49:77:99:d7:4c:44:d8:f4:3e:93:74:cf:18:cd:1d:
                    44:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BA:B4:24:42:51:30:D4:A9:07:AD:C4:74:34:31:10:DD:5B:32:F7:B5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/91zbnXj984kL4WkXu8QnBxP9CmWiZJe6Ei4pjzYFwoqq/0/BAB424425130D4A907ADC474343110DD5B32F7B5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.68.0/22
                IPv6:
                  2804:7400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270951

    Signature Algorithm: sha256WithRSAEncryption
         41:3c:4b:f0:74:27:d0:e9:d8:05:89:d8:5c:de:c2:d0:40:49:
         b8:e7:dc:f2:19:a3:b7:c8:29:9c:3a:d6:99:96:58:30:06:cd:
         60:56:d6:91:26:3c:cc:54:43:71:5f:3d:6e:41:62:c3:27:8b:
         a2:e7:4b:c7:ae:f3:6a:2b:e7:78:e7:f2:e2:7c:cf:37:1d:81:
         56:7f:c6:e7:25:43:49:e6:bb:aa:e3:b9:eb:0e:dd:d1:ae:76:
         e4:dc:b5:ea:ee:44:d6:42:3d:8e:eb:19:f1:c1:e3:65:67:c4:
         05:e0:1a:2d:d2:da:5c:6d:b8:59:42:36:93:8c:55:92:9a:cd:
         0a:50:72:74:01:fa:e8:6b:c8:da:8c:b8:0c:8d:c3:56:ed:b5:
         f1:70:5a:fd:57:7d:73:3d:81:6b:8c:c7:df:76:36:7e:ce:b6:
         e0:3d:39:70:6e:24:1e:98:7c:9c:18:d7:33:9a:80:f6:0b:e3:
         6c:cd:44:0b:8a:f1:8e:71:94:4b:9c:9f:58:08:13:f7:48:f9:
         48:fc:fa:5f:14:8a:2b:fa:73:a1:6c:2b:9a:7c:8f:e2:21:57:
         9c:7f:48:9d:20:62:17:4f:56:d8:be:66:56:6c:41:b6:fa:3b:
         98:d1:49:4d:cc:8a:7e:e8:12:12:80:34:56:01:f4:c7:a9:ed:
         62:6e:d8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:51:11 2025 by rpki-client