Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CA96975EC56E9F9D55E9D80B65D71F97F0036496.cer
File:                     CA96975EC56E9F9D55E9D80B65D71F97F0036496.cer (raw, json)
Hash identifier:          trehzxrsXdnHmqAgea2X+V3nWi2nq+B6fv0pSsuWDQM=
Subject key identifier:   CA:96:97:5E:C5:6E:9F:9D:55:E9:D8:0B:65:D7:1F:97:F0:03:64:96
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2D4CD9A48B3AEAB92206B0C1B1725CA214517134
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/CA96975EC56E9F9D55E9D80B65D71F97F0036496.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 15 Jan 2025 15:35:24 +0000
Certificate not after:    Wed 14 Jan 2026 15:40:24 +0000
Subordinate resources:    AS: 273436
                          IP: 2804:8e98::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:4c:d9:a4:8b:3a:ea:b9:22:06:b0:c1:b1:72:5c:a2:14:51:71:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 15 15:35:24 2025 GMT
            Not After : Jan 14 15:40:24 2026 GMT
        Subject: CN=CA96975EC56E9F9D55E9D80B65D71F97F0036496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:72:f4:c0:8f:1f:87:82:22:26:e8:b0:e9:c7:
                    77:85:74:f4:d2:c5:70:c2:17:9e:71:74:14:7f:03:
                    86:d1:79:ce:ba:99:24:f0:0e:6e:9a:bc:6e:60:e5:
                    7b:4a:5b:42:43:81:79:52:da:b3:49:07:ce:b5:d7:
                    a6:9f:19:ea:54:55:49:6a:c8:7c:82:a8:c5:91:d0:
                    ef:49:32:e8:a1:ef:7f:3b:9b:08:2b:5b:e7:3c:65:
                    30:b5:d0:c8:cd:d1:dd:ea:52:ea:77:e3:77:1f:42:
                    ae:04:47:1c:4d:be:6a:bb:fa:93:49:3f:36:65:e5:
                    a5:22:f5:f8:1d:75:f8:95:43:94:03:14:79:7a:f9:
                    3e:01:d2:6d:07:5d:5f:cd:f3:de:c3:83:5f:b7:d3:
                    6c:ad:c5:e1:02:9d:35:53:5c:a7:e2:2e:65:4b:1a:
                    dc:51:c0:52:f3:e3:eb:e5:06:7b:dc:d3:b2:e6:33:
                    1f:dd:4d:ec:79:96:84:e9:26:c7:6a:f2:ec:d2:5a:
                    af:83:3f:9c:5a:b9:94:40:96:a3:8d:cb:c1:b5:ec:
                    60:a8:7e:93:00:e2:f0:69:3b:26:55:01:db:8d:40:
                    f9:25:d3:50:82:5e:fc:24:1a:3b:97:66:8a:d1:88:
                    1b:6f:17:1f:cb:83:b4:0e:4a:73:c4:74:cf:8d:0e:
                    9a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:96:97:5E:C5:6E:9F:9D:55:E9:D8:0B:65:D7:1F:97:F0:03:64:96
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FH3Z8eRpbbnBzMePbD6LoHvT8TvnV4MY3zuZAKsGbZqp/0/CA96975EC56E9F9D55E9D80B65D71F97F0036496.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8e98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273436

    Signature Algorithm: sha256WithRSAEncryption
         86:0f:69:06:af:7c:e1:d4:5e:3d:37:fa:81:6e:ac:ee:d8:93:
         ec:67:2d:82:51:fa:a0:51:dd:89:59:4b:01:57:51:38:15:24:
         43:95:b6:2c:e7:bc:7a:13:f7:b1:5e:12:46:6a:16:f0:ec:c0:
         0c:9b:ef:1c:2e:41:4e:74:57:d3:b1:6e:f5:b8:1c:8c:d3:2b:
         2e:e0:b0:0f:67:38:0f:b8:83:d9:ef:dc:8b:d5:e7:60:cd:08:
         46:f8:69:d6:5b:94:81:de:f0:cf:f2:c5:b5:7d:2d:83:03:72:
         1e:ee:78:2e:2e:fe:fc:a3:da:64:a1:5d:62:07:66:8c:7a:89:
         f9:f8:15:a6:79:d9:4b:b4:95:dc:b2:9b:47:ff:f1:70:5d:ff:
         3d:40:d9:b4:e3:6d:ad:b5:a9:c3:26:05:e1:5a:90:c0:c8:68:
         4e:55:02:30:45:b9:da:e1:a7:22:19:80:30:c9:e3:96:44:78:
         d8:67:13:29:35:e8:f4:de:4f:72:ec:51:80:8e:f3:1d:aa:fc:
         0f:61:36:57:4e:9e:02:7d:de:dc:3d:aa:30:10:56:7a:57:eb:
         c9:33:dc:a3:48:d8:c9:8d:32:bf:57:90:9c:fb:38:b2:c8:f8:
         9b:5b:f1:12:68:cc:19:b5:c4:86:48:86:dd:e6:c1:e0:15:91:
         3f:0b:3d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:23:28 2025 by rpki-client