Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.cer
File:                     C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.cer (raw, json)
Hash identifier:          8wd5WnzIF1ydOokxr0oQqoy8Sbju8FR9P9rQB8GaNdc=
Subject key identifier:   C0:04:F2:CC:C9:AC:B9:EC:01:A2:6E:FA:FF:53:A1:5B:B3:09:EC:E3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0E6753B1CEA0088308BBA23892BC6DA4C1587DDA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Jan 2025 14:54:02 +0000
Certificate not after:    Fri 23 Jan 2026 14:59:02 +0000
Subordinate resources:    AS: 270254
                          IP: 45.191.40.0/22
                          IP: 2804:6930::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:67:53:b1:ce:a0:08:83:08:bb:a2:38:92:bc:6d:a4:c1:58:7d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 24 14:54:02 2025 GMT
            Not After : Jan 23 14:59:02 2026 GMT
        Subject: CN=C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a7:76:8e:97:6d:43:5e:b8:9c:ac:94:77:f1:
                    b3:0b:83:9f:11:86:c9:bc:3c:29:40:48:33:02:24:
                    16:a1:9c:e3:ed:08:9a:b7:11:af:eb:fc:73:f3:71:
                    cf:78:52:9e:eb:f2:64:66:41:dc:58:23:cc:d9:0c:
                    c0:76:66:c6:2b:a3:17:f5:18:04:c9:aa:b0:93:3f:
                    83:06:7a:12:96:0a:41:b1:66:cc:4c:e5:b7:75:9e:
                    d4:f6:9e:f3:c3:6b:a6:7e:b9:ce:79:3d:5d:dc:18:
                    b4:96:80:5f:0a:7c:df:d2:7b:97:18:83:80:88:46:
                    5b:d9:30:ce:63:3a:53:6d:68:02:b3:21:da:5d:08:
                    83:bd:c3:f5:25:03:c7:f2:73:f3:c3:19:00:5d:1b:
                    b5:ba:49:d6:0f:89:df:02:33:ec:69:53:36:47:a9:
                    9c:21:bb:47:ee:61:82:d2:ca:ff:b5:18:ae:64:03:
                    77:48:25:e0:41:13:dc:ca:70:24:f9:f0:54:19:07:
                    7f:18:46:28:ea:3e:18:54:33:e0:1d:6e:6e:4a:31:
                    c3:f3:1b:4f:9d:cc:b0:37:81:e3:4c:4b:43:cd:16:
                    11:44:5c:1c:91:c5:40:4a:a2:59:bb:f8:29:72:9f:
                    0f:2f:38:59:ea:5d:73:46:96:a4:7a:fb:5f:a9:28:
                    94:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:04:F2:CC:C9:AC:B9:EC:01:A2:6E:FA:FF:53:A1:5B:B3:09:EC:E3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/C004F2CCC9ACB9EC01A26EFAFF53A15BB309ECE3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.40.0/22
                IPv6:
                  2804:6930::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270254

    Signature Algorithm: sha256WithRSAEncryption
         22:fe:3e:3b:b7:a4:4e:12:d0:26:b8:2f:c8:18:ab:a2:9a:1a:
         5d:db:fe:9f:2e:c4:61:15:6f:36:51:39:cd:b6:46:70:e7:21:
         b6:01:7f:26:a6:68:6d:92:5d:06:eb:a8:da:00:b0:d6:17:51:
         6b:30:96:53:65:de:46:d2:4d:9f:74:75:6c:cf:a2:ba:6a:21:
         c7:ae:cd:1f:86:31:40:e4:c4:f4:4e:cd:4d:57:a9:d9:93:53:
         ca:72:ef:a4:4d:d9:58:b6:fd:a1:41:5b:f0:92:24:b0:1a:da:
         8f:41:70:a8:4b:1d:b2:ef:7a:29:56:1d:0b:ea:c9:12:b4:f7:
         64:29:57:18:0e:fc:60:09:c7:ed:39:a6:ce:99:78:9e:70:7a:
         5e:a9:d1:2c:ce:e1:7e:6b:10:1d:21:04:5a:65:70:87:f1:1d:
         b6:4b:4e:e1:9e:7b:fc:37:4a:b2:d4:8b:1c:72:09:ba:de:ae:
         d1:4a:31:c5:9c:69:5b:72:c4:92:0a:3c:5a:ca:3e:1a:9d:e3:
         23:14:ea:9a:77:df:50:71:71:da:95:db:24:0a:30:8b:34:02:
         36:d7:ea:68:f3:29:3b:49:bf:fc:9d:29:ba:25:2d:ec:3f:26:
         b5:6e:24:8d:9b:9b:99:80:5a:aa:ec:60:82:4b:f0:9c:80:ac:
         69:40:2a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:19:57 2025 by rpki-client