Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7.cer
File:                     BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7.cer (raw, json)
Hash identifier:          L2+uuLiMnfjfniYGBDwHDK1wdikB/RMIq2GzCZ0yfv0=
Subject key identifier:   BC:0D:4A:1B:CF:B2:62:F6:32:8B:E4:3F:0B:FE:09:C3:71:06:8E:F7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2B8EC062F6A1E4BC401B7D2E0587104EA5019C1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Nov 2024 13:12:49 +0000
Certificate not after:    Fri 31 Oct 2025 13:17:49 +0000
Subordinate resources:    AS: 61584
                          IP: 138.94.128.0/22
                          IP: 170.254.168.0/22
                          IP: 2804:23b8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8e:c0:62:f6:a1:e4:bc:40:1b:7d:2e:05:87:10:4e:a5:01:9c:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  1 13:12:49 2024 GMT
            Not After : Oct 31 13:17:49 2025 GMT
        Subject: CN=BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2e:e5:93:75:8a:19:48:90:73:37:5b:30:26:
                    9f:14:0e:19:09:c3:50:5b:40:cf:25:49:e2:ca:4e:
                    da:39:80:87:fa:e1:d6:89:a0:fc:7c:9e:4d:3a:4d:
                    82:14:b3:9f:1f:3a:4b:ed:05:ad:76:bf:42:46:48:
                    d7:fd:b3:ed:6f:25:fa:b4:cf:f3:e8:61:f1:60:93:
                    ce:ea:a5:3b:47:a7:42:bd:5c:79:7e:ea:be:eb:1f:
                    7b:8f:63:bd:68:f7:1e:27:f7:0c:bd:74:98:7e:e7:
                    89:3c:70:47:db:1d:d8:0c:18:3e:36:aa:5c:fa:b7:
                    6e:bf:8a:a7:75:a4:7a:07:bc:f4:25:e5:94:31:6b:
                    92:b9:a5:0a:ee:7a:07:39:b3:1c:89:73:07:ba:a7:
                    c0:6c:c4:e7:bf:57:be:a4:9e:82:5a:74:5d:59:c4:
                    dd:ad:ae:8a:05:35:91:77:9a:9d:da:4d:ba:48:5b:
                    83:3f:1b:a4:e7:c2:93:b4:e1:b1:8c:0a:31:f0:58:
                    7e:3f:7c:df:5a:09:bd:1a:3d:12:00:c7:71:11:de:
                    f0:cf:0f:f4:e2:5e:b1:e8:12:b7:93:69:40:5d:0b:
                    75:1f:6d:58:a2:bf:9b:48:b3:4f:92:b9:7a:6c:0a:
                    69:6e:ae:16:28:ce:e4:7d:0d:d2:3c:8e:32:39:80:
                    fd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:0D:4A:1B:CF:B2:62:F6:32:8B:E4:3F:0B:FE:09:C3:71:06:8E:F7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/BC0D4A1BCFB262F6328BE43F0BFE09C371068EF7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.128.0/22
                  170.254.168.0/22
                IPv6:
                  2804:23b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61584

    Signature Algorithm: sha256WithRSAEncryption
         a4:8a:35:f7:4d:1f:0c:58:18:7e:e7:c4:f6:15:6b:0b:0b:b9:
         eb:1a:f7:47:0f:d5:e6:03:52:0b:c5:46:16:ac:82:10:25:38:
         4b:29:7b:16:be:e2:8d:be:c8:55:c5:fb:47:dd:8d:7a:99:0c:
         0a:67:1f:7b:3f:a1:99:1d:4f:f6:e7:51:f5:7b:a8:07:1f:cf:
         e1:22:2c:db:2e:aa:be:55:0f:cb:3b:df:17:ff:1c:a5:0b:a1:
         52:54:66:c3:9e:5e:6f:78:ff:89:65:11:5d:ab:d4:c7:7a:56:
         d0:96:87:ec:ec:e0:5c:72:7b:39:83:32:f2:1f:97:f3:9f:12:
         37:e9:a6:e1:37:1e:f6:09:f0:9e:3e:26:84:00:a4:b9:90:54:
         3c:c4:90:e0:8a:f4:bc:b0:5e:09:b6:95:64:ac:32:af:a1:7c:
         b2:8b:a8:76:77:c4:7e:42:50:16:4c:24:d0:4c:4b:40:83:74:
         39:d6:f7:8b:b3:5c:29:06:14:80:84:d8:f2:d6:01:ce:87:fb:
         e5:15:87:d9:f1:4d:15:c7:3c:9a:6e:ef:ac:02:b2:54:a0:f5:
         81:2a:09:d2:01:91:79:e1:86:96:c6:67:a9:5a:5e:94:d8:59:
         80:be:20:e2:aa:5f:99:18:7b:75:86:86:1e:f9:7d:a1:89:e1:
         62:09:d5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:47:11 2025 by rpki-client