Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D1361B7715799B3E73DD86494EE9843F71C4BB81.cer
File:                     D1361B7715799B3E73DD86494EE9843F71C4BB81.cer (raw, json)
Hash identifier:          CqACrGNBrBD5pbbvXed2z63CC9XAaOPGQaFHwLP9v48=
Subject key identifier:   D1:36:1B:77:15:79:9B:3E:73:DD:86:49:4E:E9:84:3F:71:C4:BB:81
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       33C8E57965507441325A304B0A51927D4963F45C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/996ZhSKuBpszQgxz89YGBffsdqMVRGRQL5x6RfuteTzA/0/D1361B7715799B3E73DD86494EE9843F71C4BB81.mft
caRepository:             rsync://rpki-repo.registro.br/repo/996ZhSKuBpszQgxz89YGBffsdqMVRGRQL5x6RfuteTzA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Dec 2024 13:24:10 +0000
Certificate not after:    Thu 18 Dec 2025 13:29:10 +0000
Subordinate resources:    AS: 270952
                          IP: 177.154.93.0/24
                          IP: 2801:80:39b0::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c8:e5:79:65:50:74:41:32:5a:30:4b:0a:51:92:7d:49:63:f4:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 19 13:24:10 2024 GMT
            Not After : Dec 18 13:29:10 2025 GMT
        Subject: CN=D1361B7715799B3E73DD86494EE9843F71C4BB81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c5:19:65:91:cc:29:e3:69:c0:7b:27:07:8f:
                    58:12:c7:09:b5:d6:38:95:d3:08:2a:b8:b3:92:d5:
                    de:0f:5e:45:6b:76:63:8f:48:94:62:12:03:a2:b7:
                    5a:c7:d6:a9:85:1b:81:8e:0b:36:44:ca:cd:c8:ae:
                    1f:ee:58:91:64:5f:ca:f6:24:86:6f:0e:a4:18:a9:
                    12:f9:d0:15:d4:17:9a:2d:d8:9b:da:bb:43:1f:7a:
                    e0:54:58:9c:e9:14:79:7c:7b:09:f0:2e:74:db:4b:
                    c6:08:30:1a:01:d5:8b:28:0d:e8:0f:90:86:6f:b8:
                    0d:78:5e:56:3c:a7:27:df:c9:2a:cc:d9:f4:b4:60:
                    da:69:8b:e9:26:64:82:38:da:de:e9:21:77:50:8b:
                    a9:e8:2c:ff:a1:27:b3:1a:15:8c:94:f6:36:97:8b:
                    a1:bd:c6:04:28:ea:4a:06:3e:74:ba:7a:85:93:44:
                    93:9f:f6:4b:06:d7:d6:17:29:f1:26:15:d4:34:6d:
                    1f:e4:90:c7:8d:31:74:00:18:48:df:1c:8c:1c:de:
                    9f:47:f4:f4:cf:24:99:4f:1e:51:10:f0:13:b9:5b:
                    c1:cc:0d:98:ff:87:d5:5c:15:fd:02:d4:85:20:91:
                    ec:bb:62:2c:2c:7a:7d:a2:bb:a8:c6:b9:a9:7a:f0:
                    6d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D1:36:1B:77:15:79:9B:3E:73:DD:86:49:4E:E9:84:3F:71:C4:BB:81
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/996ZhSKuBpszQgxz89YGBffsdqMVRGRQL5x6RfuteTzA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/996ZhSKuBpszQgxz89YGBffsdqMVRGRQL5x6RfuteTzA/0/D1361B7715799B3E73DD86494EE9843F71C4BB81.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.93.0/24
                IPv6:
                  2801:80:39b0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270952

    Signature Algorithm: sha256WithRSAEncryption
         0a:4e:76:73:53:88:bc:85:92:36:68:30:b7:f9:19:7f:13:8f:
         ff:b8:0b:aa:2b:4b:36:0f:5e:e3:69:ef:71:b6:77:b0:0d:2c:
         2a:6e:d2:7c:14:97:73:f0:0f:72:e3:93:7b:30:cd:47:92:05:
         28:96:af:30:fc:aa:68:9d:c8:94:91:a3:6e:13:30:c0:e6:89:
         35:11:fc:54:6c:3d:65:14:da:c1:af:ab:d8:84:cc:fc:e5:aa:
         98:33:e6:24:8a:6c:f8:3d:ff:9f:a2:8d:82:cf:fa:4d:99:0d:
         1a:4d:b9:7b:e1:42:cf:17:31:39:5a:77:66:cd:4d:bc:cb:a4:
         b2:cd:ae:f0:f7:64:4d:55:5e:12:c6:20:1a:63:51:2c:d1:16:
         5d:f3:8e:83:c0:2a:de:2b:02:e2:e0:fc:65:6c:99:29:43:4c:
         be:d9:14:f3:9c:21:46:e9:b7:a0:cb:92:56:6d:be:8d:17:72:
         e8:9d:12:4c:15:15:36:08:ab:0c:c3:24:e1:83:67:25:3d:a2:
         01:9e:00:35:10:7d:0b:22:79:d3:44:d6:57:f4:a8:2d:ea:c1:
         c3:b9:67:71:9a:ed:2a:a4:cf:6b:aa:9a:39:f0:54:1b:bf:07:
         53:3c:88:b5:f4:dd:49:e0:c2:cf:95:0c:64:ae:d1:bf:41:66:
         d5:5b:a9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:22 2025 by rpki-client