Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer
File:                     D539CF929B6A6A2B9596B922F417FAD917799ED7.cer (raw, json)
Hash identifier:          wvjt6YZXNGwiMAgCtnLp4hg0C8vLSvHpii3Fw4WT6Fw=
Subject key identifier:   D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       110063EA80138B96B6926509AE421F0F729402BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 02:55:19 +0000
Certificate not after:    Fri 06 Mar 2026 03:00:19 +0000
Subordinate resources:    AS: 267102
                          IP: 45.228.140.0/22
                          IP: 2804:482c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:00:63:ea:80:13:8b:96:b6:92:65:09:ae:42:1f:0f:72:94:02:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 02:55:19 2025 GMT
            Not After : Mar  6 03:00:19 2026 GMT
        Subject: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e8:d4:52:c5:87:a7:e0:01:d7:ba:0d:04:d2:
                    36:33:3f:36:9f:16:3d:ea:c6:e6:28:78:70:da:ab:
                    f2:ed:04:74:eb:a0:70:9b:83:37:9e:c4:dd:87:d8:
                    c0:de:f8:80:6a:a3:fe:26:b3:14:32:32:97:f4:e1:
                    f4:d3:09:6b:db:84:74:fa:48:8d:25:27:65:14:f9:
                    a6:4b:fa:66:98:a5:1b:d4:eb:41:e4:2f:b7:08:5c:
                    2f:09:c7:ad:18:1e:08:c0:c2:ef:9f:cc:70:5d:6c:
                    37:7f:fd:83:1b:73:15:84:6e:c5:65:50:6a:59:b4:
                    5b:83:cc:d4:06:7a:a7:3e:20:38:43:aa:d2:88:15:
                    37:20:b8:36:c2:54:dc:e8:81:c5:28:1a:21:7c:93:
                    ad:00:fb:b4:5f:aa:9c:f2:77:e7:d9:b7:ca:17:1c:
                    d9:27:d3:c5:12:13:ae:be:d8:a7:23:e9:c3:64:e5:
                    a6:d4:ea:0c:19:53:56:ff:f3:d8:d1:64:5a:38:48:
                    9d:12:ec:ce:0d:11:89:37:d8:ba:85:94:63:69:28:
                    ab:1c:b9:e6:41:e1:e2:0c:70:82:bf:dc:1a:eb:fc:
                    be:12:69:56:7d:66:68:a3:e8:f9:41:c9:49:db:9b:
                    9a:2c:cc:ba:41:36:92:ce:02:dc:36:96:77:a1:5c:
                    dd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.140.0/22
                IPv6:
                  2804:482c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267102

    Signature Algorithm: sha256WithRSAEncryption
         00:a5:54:83:4c:d6:cb:65:f9:96:85:56:4d:fd:d0:1e:5c:ea:
         60:fb:e6:09:64:f7:48:42:4f:5f:cf:29:d6:d6:c4:9f:b7:f8:
         e4:6c:b5:8b:a7:19:81:f3:68:28:4a:f5:95:e4:75:e1:bd:17:
         53:ec:d9:5e:e7:6d:88:5f:a9:e1:b9:55:1e:9f:c4:72:af:bc:
         2b:c0:ba:d8:48:58:ea:ae:75:d5:c5:df:7a:ea:56:46:b7:b4:
         a1:06:14:ed:6d:d5:31:59:d2:e5:1e:ee:55:e7:94:54:95:01:
         87:85:50:17:7d:f7:4e:f4:30:2c:1c:43:60:e7:31:35:00:c1:
         d1:a9:bb:24:3d:54:7e:9d:16:11:05:e2:e0:bf:d0:ac:06:d5:
         50:c2:a7:e6:9c:e5:b8:1e:6c:34:ac:b6:ac:01:c5:2b:c0:cd:
         31:25:6d:04:3c:69:5f:5e:ff:1c:2d:00:95:4c:1c:bd:4a:3d:
         ff:3c:4e:98:47:f5:6b:ba:57:e4:8a:5b:7f:3d:c8:e4:68:1c:
         62:ad:18:05:47:37:3b:3c:41:ba:21:b9:66:7a:f7:73:f9:fc:
         b4:b4:42:80:d0:65:b8:09:4e:14:33:35:49:98:40:e9:f3:79:
         f1:a1:44:57:76:89:63:4a:36:60:01:02:1d:ec:0d:7e:0a:d9:
         e9:18:5e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:34:18 2025 by rpki-client