Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C7304639F9F3AB50BA218929634A7AE49A8A9A0D.cer
File:                     C7304639F9F3AB50BA218929634A7AE49A8A9A0D.cer (raw, json)
Hash identifier:          PsKeFtGw+5hkE49eu5zY54BLkW7WOpR1Tsczg5jfa6Y=
Subject key identifier:   C7:30:46:39:F9:F3:AB:50:BA:21:89:29:63:4A:7A:E4:9A:8A:9A:0D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4B8FA6A7259D017AC210C0BDE526435D6D5F8BBB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/C7304639F9F3AB50BA218929634A7AE49A8A9A0D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 13 Dec 2024 18:05:18 +0000
Certificate not after:    Fri 12 Dec 2025 18:10:18 +0000
Subordinate resources:    AS: 273774
                          IP: 45.177.248.0/23
                          IP: 2804:8c04::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8f:a6:a7:25:9d:01:7a:c2:10:c0:bd:e5:26:43:5d:6d:5f:8b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 13 18:05:18 2024 GMT
            Not After : Dec 12 18:10:18 2025 GMT
        Subject: CN=C7304639F9F3AB50BA218929634A7AE49A8A9A0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ed:9b:f4:b7:b4:45:28:7d:aa:87:5a:cc:4e:
                    f9:58:da:d7:66:78:de:4f:2e:96:bd:2a:92:69:14:
                    c8:80:a7:52:77:cc:9d:8e:5a:6f:cd:0a:90:2d:3a:
                    ae:d4:d3:24:a3:75:4f:c9:16:ec:39:87:37:b1:b1:
                    ed:19:8a:eb:10:ff:45:11:d1:4e:bb:9e:16:55:4e:
                    0a:a0:aa:d3:dd:f7:17:52:85:53:c2:97:91:f1:87:
                    98:ee:47:bb:d4:95:15:84:b6:38:0f:4a:90:9f:7e:
                    4c:27:1c:ff:bc:e0:1c:6e:4a:dd:89:89:88:78:5e:
                    88:55:8e:3c:37:1f:3b:d1:bd:e6:b9:0b:2c:17:33:
                    8c:87:3e:88:ae:c0:16:a9:b6:ed:d6:44:9f:2d:96:
                    49:d9:f3:35:e5:85:c5:ec:5c:50:7c:01:e9:d9:e5:
                    e3:48:2f:02:49:c8:22:68:41:c9:14:32:d0:10:0a:
                    b6:1a:4c:0f:08:9c:6f:f0:d3:e7:04:1e:d7:a2:83:
                    0e:d2:09:24:40:1b:1d:77:76:28:04:b6:bb:16:b3:
                    77:20:91:a4:d9:e3:30:3d:4b:e5:b5:cd:61:e5:66:
                    8d:d7:27:a5:1e:0d:15:21:4c:52:93:bd:94:19:96:
                    92:80:02:a7:0a:2e:d4:c9:37:24:b3:8f:d8:15:3e:
                    84:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C7:30:46:39:F9:F3:AB:50:BA:21:89:29:63:4A:7A:E4:9A:8A:9A:0D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ESAmdAz6A7xMw58uZnvEi1ZfEhw457c6uaS7FsnjShBf/0/C7304639F9F3AB50BA218929634A7AE49A8A9A0D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.248.0/23
                IPv6:
                  2804:8c04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273774

    Signature Algorithm: sha256WithRSAEncryption
         15:aa:77:4b:80:01:61:6e:66:c5:f9:c9:17:f1:30:d6:d2:3e:
         2c:05:5a:ab:2b:61:cb:5e:80:70:40:31:29:7c:3e:1a:29:ca:
         a7:55:c5:03:0d:8d:14:97:9f:39:00:7a:b0:cc:61:80:53:8c:
         2a:24:fd:b9:ce:58:6b:47:0d:72:80:f9:6d:ee:2a:90:6b:ca:
         03:84:56:b5:ea:80:1a:97:be:e4:88:b7:a6:32:e9:e6:23:df:
         8b:a4:0a:06:58:9f:32:91:13:bb:4e:cb:11:ca:7b:2d:36:f5:
         5b:66:d1:4d:a1:44:9a:be:37:68:21:be:de:eb:29:91:c8:3a:
         49:f4:f1:23:ce:6d:b4:8c:a2:29:48:84:bb:d4:35:b2:74:29:
         c6:40:85:6a:f4:b9:b5:45:44:a5:5f:60:20:42:18:2f:f0:a6:
         fe:2d:0d:dc:4a:eb:bd:ce:b1:d1:53:6c:a7:e1:98:1c:7f:8c:
         19:da:4b:e7:74:37:70:7a:08:b5:07:1b:5d:a6:81:77:01:28:
         06:3e:2c:6b:11:c6:50:a9:86:51:6f:a8:8e:2f:a2:51:90:19:
         5d:dd:b1:95:44:44:79:e0:c2:6a:aa:d1:99:45:d0:9c:9d:70:
         57:23:84:4d:60:fa:fb:0e:0d:ec:38:57:6b:f1:5e:d0:81:da:
         47:a1:02:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:21:18 2025 by rpki-client