Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C9F71779FCAA18544B4D3820D10E4E4416FDAF38.cer
File:                     C9F71779FCAA18544B4D3820D10E4E4416FDAF38.cer (raw, json)
Hash identifier:          dfJ1CDImTGcQ2XX+EtuB9vDMqlytHuET3W9+qNS83J8=
Subject key identifier:   C9:F7:17:79:FC:AA:18:54:4B:4D:38:20:D1:0E:4E:44:16:FD:AF:38
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5502F0E1CDCE74A31B015D61E9AD453CE788662B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/C9F71779FCAA18544B4D3820D10E4E4416FDAF38.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Mar 2025 15:47:08 +0000
Certificate not after:    Fri 20 Mar 2026 15:52:08 +0000
Subordinate resources:    AS: 262606
                          AS: 265157
                          IP: 143.255.240.0/22
                          IP: 177.101.32.0/20
                          IP: 2804:6c8::/32
                          IP: 2804:2b84::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:02:f0:e1:cd:ce:74:a3:1b:01:5d:61:e9:ad:45:3c:e7:88:66:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 21 15:47:08 2025 GMT
            Not After : Mar 20 15:52:08 2026 GMT
        Subject: CN=C9F71779FCAA18544B4D3820D10E4E4416FDAF38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:16:12:70:e6:6b:74:59:91:cd:ce:08:f5:
                    99:ae:8b:ea:a5:28:47:c0:d5:b1:f2:ad:26:d6:ad:
                    63:53:af:ad:e7:cb:e2:e0:49:aa:1c:30:4a:a1:24:
                    84:22:6d:2c:98:03:97:4a:69:a1:9b:11:87:e5:8d:
                    28:1f:40:94:d0:11:ed:6c:e9:fd:bf:92:ea:21:88:
                    df:13:03:f4:c1:9c:88:56:1b:cc:8b:c1:85:2e:39:
                    a2:51:ef:93:a6:99:dc:5d:9b:6e:e4:95:9a:48:8b:
                    8e:53:14:df:e2:3a:25:a4:77:4e:78:b4:3a:4f:60:
                    58:2f:6d:7b:8c:22:b9:9b:f7:c7:9a:a1:e6:ca:78:
                    15:d8:a4:a5:6d:e2:b6:f7:a4:82:3a:7e:14:b5:df:
                    c3:f6:04:e8:83:6b:2a:72:b3:65:9b:ea:85:0a:94:
                    07:76:c9:ea:88:4d:c3:31:cd:2e:e7:65:31:17:27:
                    34:67:e3:d1:a0:06:d7:be:e0:b4:17:6c:49:80:47:
                    27:c3:8a:19:b7:d1:72:64:10:b8:d7:fc:71:a4:1c:
                    8b:07:81:5c:b2:f0:e8:71:56:be:b7:96:17:44:2b:
                    f8:bc:53:94:d2:b8:dc:cc:c1:ef:10:8a:2c:2e:dd:
                    f4:ec:4c:70:91:01:c4:90:b2:bf:ea:cc:d6:f6:8c:
                    ca:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:F7:17:79:FC:AA:18:54:4B:4D:38:20:D1:0E:4E:44:16:FD:AF:38
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/C9F71779FCAA18544B4D3820D10E4E4416FDAF38.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.240.0/22
                  177.101.32.0/20
                IPv6:
                  2804:6c8::/32
                  2804:2b84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262606
                  265157

    Signature Algorithm: sha256WithRSAEncryption
         5d:20:69:74:91:ce:f2:e6:ec:57:d2:63:a8:2b:ed:5a:05:90:
         9f:f2:67:e9:b2:cc:7b:7a:5b:f3:a5:e1:85:72:c9:7b:e7:24:
         79:4d:19:cd:2e:d3:7c:77:d4:08:f7:8c:4e:e6:3b:c0:fb:8d:
         fe:74:67:ab:c6:1d:af:ac:81:e5:cb:13:75:e2:0e:39:a3:f2:
         e5:a1:f3:68:fe:10:3e:6a:6c:47:a2:23:ca:02:44:06:f0:06:
         61:61:15:81:8a:bd:43:cc:03:e8:7b:cc:cc:38:f2:a9:43:4f:
         17:9a:b4:ba:10:e6:a4:3e:6a:2f:86:91:de:a7:3e:ae:01:be:
         80:ab:af:91:69:af:b1:f5:89:e6:72:0a:d2:87:4f:df:04:51:
         cb:3f:f8:19:39:56:88:cc:0d:68:a3:d1:fd:42:e6:ce:1b:56:
         26:60:11:5e:b7:98:1a:94:80:3b:5c:f5:5d:ff:e5:20:74:e7:
         40:97:0c:3b:07:81:80:09:fe:8a:b0:da:d3:52:1a:0f:dc:ce:
         19:be:58:6e:b1:d4:59:33:f7:f1:2d:1f:af:a9:a0:b2:72:56:
         32:58:20:68:1a:f1:6e:7e:17:be:4b:07:bc:5c:71:75:a3:bf:
         aa:5f:61:4a:4f:a7:e4:48:7f:92:66:3a:d7:a0:3c:36:17:e5:
         f6:02:2f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:49:43 2025 by rpki-client