Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.cer
File:                     D05EC24593D2026D2D5B7D7EF76C0E52331234DF.cer (raw, json)
Hash identifier:          1Ld1d6gTeh1s9dqK8+V8cPW5YgXOiKc3vKx8Dl9Cds0=
Subject key identifier:   D0:5E:C2:45:93:D2:02:6D:2D:5B:7D:7E:F7:6C:0E:52:33:12:34:DF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       132D1400E34CB4291FA3826FEC7F5714E4902997
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 18:43:30 +0000
Certificate not after:    Thu 05 Mar 2026 18:48:30 +0000
Subordinate resources:    AS: 267622
                          IP: 45.71.168.0/22
                          IP: 2804:4448::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2d:14:00:e3:4c:b4:29:1f:a3:82:6f:ec:7f:57:14:e4:90:29:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 18:43:30 2025 GMT
            Not After : Mar  5 18:48:30 2026 GMT
        Subject: CN=D05EC24593D2026D2D5B7D7EF76C0E52331234DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:99:76:93:70:57:b2:ee:a6:79:29:ff:30:f9:
                    35:73:25:e4:29:0c:60:6f:1e:14:fc:98:ab:3a:80:
                    9f:6b:04:7b:81:97:0b:0f:c6:05:c3:2f:d7:a7:c9:
                    6b:d5:ec:bc:5b:30:f4:e5:32:a6:31:99:52:5e:14:
                    8f:6b:61:bf:a7:b1:c7:b5:50:4c:21:ea:81:38:e9:
                    f8:ad:02:dd:2a:da:c8:d5:58:48:50:30:f7:d5:a4:
                    92:bf:6c:13:0b:61:65:49:a0:bb:85:3f:6d:8c:11:
                    32:fd:7a:cc:fd:a0:05:d4:a8:15:a4:6f:68:5f:d0:
                    84:04:2e:cc:79:b2:86:42:93:dc:7e:9d:c1:b9:d6:
                    2b:20:88:2b:3a:d0:50:72:3a:d6:9c:ea:1f:da:be:
                    d9:73:de:41:23:5e:4c:fb:fe:f4:d3:23:f7:b7:04:
                    81:50:5c:44:06:bd:60:ad:2b:00:19:08:11:3b:51:
                    75:5a:38:27:f4:e6:50:84:7b:59:1a:d4:82:c0:f4:
                    78:1e:52:9f:02:39:70:a3:3b:cc:92:b3:fa:33:31:
                    95:21:eb:fb:a9:a3:fd:70:cd:91:b2:fc:44:f1:39:
                    28:d8:d4:f8:b6:38:54:91:be:bd:84:b7:64:a5:42:
                    85:cb:62:2b:9c:d9:45:b2:a9:06:1c:7f:81:8d:81:
                    4b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:5E:C2:45:93:D2:02:6D:2D:5B:7D:7E:F7:6C:0E:52:33:12:34:DF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/1/D05EC24593D2026D2D5B7D7EF76C0E52331234DF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.168.0/22
                IPv6:
                  2804:4448::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267622

    Signature Algorithm: sha256WithRSAEncryption
         39:8a:c7:e6:24:94:bb:88:25:11:80:77:c8:06:bf:b3:9c:02:
         ce:0b:b3:9c:65:22:6e:25:69:c3:4e:a9:e1:03:2b:c4:4d:fc:
         82:42:9f:7f:30:6a:ab:7e:37:cb:11:a8:dc:08:ef:ed:ad:e6:
         8b:03:a1:3e:ea:e9:c3:b8:7d:49:1f:24:ed:f4:63:b3:ac:33:
         d1:08:e0:a5:57:7f:af:bc:af:e5:e0:86:d5:1b:b2:8f:76:19:
         f5:8f:89:bc:d8:6c:61:50:96:e1:54:31:a3:2e:46:d5:7c:5e:
         0f:a4:2e:df:ee:d2:97:6c:44:d4:09:3f:bd:2f:97:d1:fc:3c:
         51:90:74:cc:13:ae:ce:6f:a9:a4:2d:88:75:46:00:25:cd:cf:
         97:d2:bc:3b:5f:b8:b6:96:b6:a3:59:af:4b:a6:b7:ad:d9:cd:
         a0:18:92:fd:33:42:b9:4f:5c:2e:84:02:32:41:eb:64:82:60:
         a0:7a:57:c0:3d:e2:0b:b1:f4:24:e4:bc:4b:45:0f:70:d6:5d:
         23:50:3a:88:70:49:05:5f:0d:5d:47:ad:cf:4c:65:90:33:10:
         b6:11:be:6b:a7:4c:c1:3d:37:4d:43:b9:79:4e:0f:22:93:9f:
         e5:aa:c4:14:90:bf:4d:94:2e:33:b4:95:fe:e9:7b:3c:ca:a1:
         45:c5:82:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:08 2025 by rpki-client