Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DE56E93EED065486683E3923D7B7101C360505E8.cer
File:                     DE56E93EED065486683E3923D7B7101C360505E8.cer (raw, json)
Hash identifier:          rUqlGftcC1SiowfQ3fznb9yyTnyI3N+G/SiQl6YMTlA=
Subject key identifier:   DE:56:E9:3E:ED:06:54:86:68:3E:39:23:D7:B7:10:1C:36:05:05:E8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0360AC102A9BEA974C3F07313834AEB8A597883A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/77tdsjHfsad7Hzk5mHM54U7vfHPC9vPKByPtz2rmN2vW/0/DE56E93EED065486683E3923D7B7101C360505E8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/77tdsjHfsad7Hzk5mHM54U7vfHPC9vPKByPtz2rmN2vW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Dec 2024 18:40:00 +0000
Certificate not after:    Tue 09 Dec 2025 18:45:00 +0000
Subordinate resources:    AS: 268037
                          IP: 45.168.48.0/22
                          IP: 2804:5700::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:60:ac:10:2a:9b:ea:97:4c:3f:07:31:38:34:ae:b8:a5:97:88:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 10 18:40:00 2024 GMT
            Not After : Dec  9 18:45:00 2025 GMT
        Subject: CN=DE56E93EED065486683E3923D7B7101C360505E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:98:ed:ef:f7:c8:7c:85:42:7f:76:18:94:7d:
                    2e:de:fa:44:23:c2:5e:ac:40:ec:b0:43:c1:69:8a:
                    1d:5d:77:7d:cf:08:65:45:e7:ea:a5:54:55:89:df:
                    cb:31:db:56:38:92:90:03:fe:46:d1:ba:90:53:3b:
                    18:03:a2:2a:4e:fa:80:c8:13:9e:30:b9:2d:04:74:
                    15:d8:dc:a3:34:d9:42:e5:60:7b:71:a4:cc:67:6b:
                    0b:ec:ae:d3:2e:07:a6:05:25:b3:2d:7d:1b:19:ee:
                    19:5c:2e:8f:64:d9:2f:18:de:ed:fa:ab:31:43:88:
                    13:c3:b6:40:72:b7:0c:30:35:0d:66:bf:19:17:71:
                    4a:d6:6d:53:f8:39:29:00:39:90:b1:86:30:58:d3:
                    eb:57:81:1f:0e:37:a8:5d:51:b9:73:23:e2:f0:0b:
                    66:1c:4b:55:36:91:3c:0f:50:cc:a6:16:1c:d9:06:
                    b3:3d:92:38:1c:2f:32:d3:17:2b:8f:23:26:8b:c2:
                    e9:12:48:a6:06:77:53:f0:0d:b2:75:bc:bc:2d:bc:
                    57:f1:9e:54:ff:a2:22:e1:28:90:06:6d:9b:0a:59:
                    80:d6:60:01:6a:f7:fe:75:82:1f:e2:c2:eb:f6:10:
                    4a:4e:f8:ac:b7:94:41:7f:c1:d1:19:17:eb:d5:98:
                    4f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DE:56:E9:3E:ED:06:54:86:68:3E:39:23:D7:B7:10:1C:36:05:05:E8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/77tdsjHfsad7Hzk5mHM54U7vfHPC9vPKByPtz2rmN2vW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/77tdsjHfsad7Hzk5mHM54U7vfHPC9vPKByPtz2rmN2vW/0/DE56E93EED065486683E3923D7B7101C360505E8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.48.0/22
                IPv6:
                  2804:5700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268037

    Signature Algorithm: sha256WithRSAEncryption
         a3:25:84:67:43:1e:d3:25:54:96:ae:24:0b:0b:27:da:f0:f0:
         b4:c0:26:27:82:ca:30:bc:fc:6e:16:9c:f1:49:b6:70:79:9b:
         2d:03:2b:c7:9a:b9:a7:98:12:13:74:1a:90:ad:83:73:d5:11:
         1e:02:ee:48:be:31:a7:49:21:11:1d:b6:fe:7f:a3:4f:de:89:
         5b:fa:a3:8a:90:a2:bf:d8:53:aa:b9:be:78:cc:48:3b:a8:cf:
         8f:e3:3f:b8:41:95:48:b3:28:e2:bb:0a:4b:4b:91:95:8c:2d:
         d4:d6:e2:84:cd:41:b8:85:5b:6e:bc:66:40:32:66:86:c0:88:
         8b:12:df:14:92:5d:f2:27:ad:44:95:e0:2a:35:a1:0e:c3:4a:
         26:13:63:28:9f:60:9f:c7:c4:1e:5b:8b:9f:98:a9:9e:98:8a:
         f8:af:20:77:07:b2:0f:17:1c:6e:2a:f3:6c:86:16:df:d6:23:
         5d:18:6a:c4:f4:bf:5b:7c:9d:31:db:93:fa:1b:e2:ff:24:31:
         a9:c2:64:b5:d1:8e:04:19:2f:67:c0:94:3e:cc:bb:5d:58:f8:
         bd:8b:59:e5:a6:e7:fa:0c:08:3c:bf:33:98:e1:7e:6d:b1:64:
         af:f4:2f:a0:0d:dc:6d:2d:80:e4:38:7a:ac:f2:a6:52:29:e2:
         80:d6:4c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:39 2025 by rpki-client