Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BEA0689EB89924F618CAAD670C59C70B4D4DE538.cer
File:                     BEA0689EB89924F618CAAD670C59C70B4D4DE538.cer (raw, json)
Hash identifier:          88YtEMKde97+Q5djbu20rNEcMnpNZNMbfzlNSKX1UMM=
Subject key identifier:   BE:A0:68:9E:B8:99:24:F6:18:CA:AD:67:0C:59:C7:0B:4D:4D:E5:38
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1A7C20388AABEADC1830AFE9951718B02CA1B66E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/BEA0689EB89924F618CAAD670C59C70B4D4DE538.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Dec 2024 21:21:55 +0000
Certificate not after:    Thu 04 Dec 2025 21:26:55 +0000
Subordinate resources:    AS: 27688
                          IP: 200.159.128.0/19
                          IP: 2804:54a0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:7c:20:38:8a:ab:ea:dc:18:30:af:e9:95:17:18:b0:2c:a1:b6:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  5 21:21:55 2024 GMT
            Not After : Dec  4 21:26:55 2025 GMT
        Subject: CN=BEA0689EB89924F618CAAD670C59C70B4D4DE538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9d:c7:86:4b:99:10:eb:f0:76:8b:46:36:d2:
                    0f:7f:49:9e:8a:0c:cc:79:38:26:13:9f:0a:b3:ec:
                    c3:28:67:f8:12:41:e3:44:3f:c9:6e:a1:1f:2d:d4:
                    6f:a6:f3:e6:51:a8:60:0e:ad:40:b1:ac:18:d4:72:
                    2a:dd:ae:44:3d:20:1d:f7:ea:81:f5:71:a3:a9:5b:
                    f6:b9:04:ea:81:40:aa:14:93:c4:9d:0a:d1:30:66:
                    70:69:50:b7:ea:0a:cf:6e:8b:0d:ff:27:84:c8:0a:
                    fc:fc:d0:ae:4f:ac:fe:5a:d2:19:44:2d:ad:c3:e5:
                    3a:b5:41:ae:a7:d8:18:9f:c4:cb:c8:11:6f:b7:b7:
                    4f:75:16:1a:43:f9:53:28:fa:7e:dd:c3:ff:d4:3b:
                    87:ec:1d:1a:57:cb:51:b4:cd:57:2d:7b:48:81:f8:
                    1a:11:7b:ff:89:49:64:a8:4e:ad:54:4b:f4:1e:37:
                    44:51:7c:67:83:00:58:71:50:62:82:b0:fd:a2:1a:
                    9a:2a:83:40:aa:01:c3:fb:22:af:23:9f:de:09:f3:
                    a3:07:23:6e:17:48:1e:0e:8e:f8:44:f2:40:7e:3b:
                    6b:4d:e7:e5:1f:77:e4:8a:14:28:ed:f2:90:3c:00:
                    2d:c5:de:e9:36:51:77:8c:91:bf:ae:e6:be:b3:30:
                    7c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BE:A0:68:9E:B8:99:24:F6:18:CA:AD:67:0C:59:C7:0B:4D:4D:E5:38
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/BEA0689EB89924F618CAAD670C59C70B4D4DE538.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.159.128.0/19
                IPv6:
                  2804:54a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27688

    Signature Algorithm: sha256WithRSAEncryption
         d6:d9:4c:08:40:3d:45:5a:e3:fa:ec:d4:1d:ab:3e:de:86:3f:
         ff:64:e9:78:dd:9f:04:ad:85:e6:8a:56:c2:eb:74:b8:b7:3f:
         d1:0d:07:5d:25:e6:8e:da:b4:55:93:82:5c:f0:d5:0e:eb:9a:
         ac:22:b5:6c:a5:30:29:0d:cc:56:b3:04:63:91:f6:3d:12:39:
         9d:35:9d:9e:f0:30:bb:c4:39:24:b1:a2:44:04:0c:e6:9c:2a:
         9b:b5:a0:9c:e1:85:fb:3c:e1:cc:26:cb:8c:a0:a4:98:bd:5b:
         fa:15:1f:5a:70:bb:e4:84:93:28:82:19:37:04:3b:85:a2:1f:
         8f:bc:d6:95:d9:8b:94:bc:c0:0f:bf:81:e0:0f:3a:9a:46:b2:
         ee:ef:60:7d:01:b1:a9:38:ab:a7:72:55:ec:84:a1:ba:9c:d3:
         56:e1:fb:54:be:e4:e3:67:e2:d3:88:15:92:56:74:65:3a:89:
         4d:b8:d7:f6:de:37:5a:1c:76:52:98:d0:3c:4f:f6:8a:6e:43:
         1c:c0:6a:6d:21:e0:2c:25:1b:bf:ec:6a:a2:9f:6b:c1:db:cf:
         39:4c:0f:d1:73:5c:b3:3a:29:47:ce:35:3e:52:0a:21:0d:cf:
         6d:0e:5b:c5:bb:59:cb:f1:54:0c:c3:68:0b:72:4a:59:d4:94:
         ca:f3:c7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:27:29 2025 by rpki-client