Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C5A26047546067241D33D84B5B25FBA9D232E5B8.cer
File:                     C5A26047546067241D33D84B5B25FBA9D232E5B8.cer (raw, json)
Hash identifier:          JdjjF9nMJG8tqlCpn3HiQZej4p5sTvmbvFGt4u0jqds=
Subject key identifier:   C5:A2:60:47:54:60:67:24:1D:33:D8:4B:5B:25:FB:A9:D2:32:E5:B8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4424BC25C463252F0BDE565A7D545ACEEFCCC037
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/C5A26047546067241D33D84B5B25FBA9D232E5B8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 14:38:01 +0000
Certificate not after:    Fri 06 Mar 2026 14:43:01 +0000
Subordinate resources:    AS: 267158
                          IP: 45.230.68.0/22
                          IP: 2804:4900::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:24:bc:25:c4:63:25:2f:0b:de:56:5a:7d:54:5a:ce:ef:cc:c0:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 14:38:01 2025 GMT
            Not After : Mar  6 14:43:01 2026 GMT
        Subject: CN=C5A26047546067241D33D84B5B25FBA9D232E5B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:a1:76:73:73:e1:a8:8c:30:76:c2:da:e5:
                    8f:a9:f5:37:cc:2b:58:e7:8f:65:51:ea:90:6c:19:
                    07:13:57:69:14:65:16:cc:c7:a6:b7:61:70:67:fa:
                    92:1a:03:98:19:4c:dd:96:35:77:e1:a9:18:53:08:
                    91:43:ad:d1:e1:f9:22:58:0a:14:39:b5:25:b1:33:
                    37:c3:c9:65:77:a4:00:01:b1:e9:eb:e7:83:ba:2c:
                    ad:ae:02:71:fa:38:3a:53:33:d4:ef:6e:36:98:76:
                    06:e8:fb:c1:e4:8e:ac:77:53:16:ec:14:cf:96:78:
                    f9:c4:fb:20:ec:1e:30:6b:fb:b0:ea:e6:04:ca:a1:
                    9e:3b:07:c7:5e:5b:02:54:c9:48:3f:37:3a:b1:fb:
                    31:34:de:e0:73:55:9e:ff:6d:89:01:94:33:7d:1c:
                    2f:09:e4:68:6f:4d:ab:6f:8e:da:2e:98:ab:34:0b:
                    0c:ef:ad:bf:63:53:18:77:a6:74:5c:44:47:06:b0:
                    d2:6d:2e:9c:1c:10:8c:ab:d5:d8:25:7b:65:76:db:
                    e1:f0:26:14:d9:a6:ae:07:46:0d:c6:06:27:0a:6a:
                    23:f5:36:f9:f0:d2:5c:b2:de:2d:b3:f7:b2:fb:11:
                    ca:77:1f:4b:e5:39:6f:bc:e8:c5:f4:64:c2:22:d2:
                    83:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C5:A2:60:47:54:60:67:24:1D:33:D8:4B:5B:25:FB:A9:D2:32:E5:B8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/C5A26047546067241D33D84B5B25FBA9D232E5B8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.68.0/22
                IPv6:
                  2804:4900::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267158

    Signature Algorithm: sha256WithRSAEncryption
         2e:bb:53:16:e3:34:d8:92:ac:be:e8:f5:37:a6:97:ad:24:f4:
         51:73:80:61:80:37:7c:12:24:f0:fa:a2:04:ec:74:bc:97:f1:
         a2:a5:e3:9c:0c:f4:87:9a:3b:4b:24:52:37:8b:dd:97:83:ea:
         11:8c:de:85:4c:5e:18:b4:89:28:2f:87:03:66:f6:48:73:71:
         f5:48:a7:4c:e4:ad:82:c5:7d:11:70:4c:1f:2e:7f:95:61:40:
         19:95:9b:35:8c:cb:64:f3:55:8c:c0:57:63:e3:3a:69:34:96:
         30:5c:47:1a:3a:ce:2d:82:87:4b:b1:97:3c:b6:fb:21:8d:51:
         d7:5d:59:60:25:f3:fc:7b:06:1c:3c:84:38:ae:88:fc:d1:7c:
         66:97:fe:e3:8b:e4:9a:ac:01:75:12:9c:1c:47:72:ab:b6:4f:
         f5:d6:b2:7c:a7:61:ec:00:61:28:5d:3c:46:2a:61:d2:44:95:
         c4:ce:88:fa:76:b2:d9:35:4f:66:8c:53:fc:8d:ed:c8:cc:7d:
         3a:2f:3d:de:65:30:68:8b:5c:cb:e7:a5:d4:20:e7:b6:2d:12:
         97:71:74:87:af:c8:cf:cc:fe:bb:f2:d4:6e:69:1a:1c:fb:b9:
         70:6d:e4:bf:a3:17:c0:d6:68:5b:d8:29:69:70:b5:aa:bf:05:
         80:e4:28:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:34:19 2025 by rpki-client