Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.cer
File:                     E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.cer (raw, json)
Hash identifier:          y/BtMRpXMc4aABm0PdLN0ZlkSTn+7W1xvSstHRSBp3g=
Subject key identifier:   E3:20:B3:45:4E:EB:8E:41:FD:31:C7:73:CF:83:B3:C7:CE:EA:33:52
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5712BA43710928DAEB7364877FCED832DAE16077
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Mar 2025 01:54:54 +0000
Certificate not after:    Tue 24 Mar 2026 01:59:54 +0000
Subordinate resources:    AS: 270796
                          IP: 189.36.252.0/22
                          IP: 2804:718c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:12:ba:43:71:09:28:da:eb:73:64:87:7f:ce:d8:32:da:e1:60:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 25 01:54:54 2025 GMT
            Not After : Mar 24 01:59:54 2026 GMT
        Subject: CN=E320B3454EEB8E41FD31C773CF83B3C7CEEA3352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2e:b6:55:25:83:c0:91:12:f4:cb:53:20:eb:
                    75:af:36:0c:9b:3a:c4:78:09:20:42:57:f8:61:39:
                    93:c1:6d:ab:a3:69:ed:af:5c:35:20:ef:e1:5f:fe:
                    98:1f:76:08:1b:d7:66:98:9a:05:35:2a:1b:f3:92:
                    94:14:ea:42:ef:70:1e:a5:85:12:44:2a:65:26:99:
                    bf:bf:43:6c:06:0c:43:da:8f:53:02:bc:69:bd:ed:
                    a3:91:90:ab:11:b9:0c:05:fe:02:72:5f:c2:9d:d2:
                    cd:15:6a:9d:67:0e:5b:d7:79:09:ee:00:62:92:50:
                    20:89:6f:de:34:52:d2:0e:0c:c8:01:ad:2a:a3:1e:
                    bc:c9:7a:e6:4d:cb:7c:3f:01:02:02:08:f1:71:6f:
                    b5:f2:66:71:4a:d4:33:89:06:9b:2c:b0:4b:88:a2:
                    84:4f:58:91:24:09:5f:83:16:72:8e:9d:c5:d4:8b:
                    74:13:5e:a5:fd:2a:43:e2:a1:1c:c1:25:e4:37:bc:
                    65:0e:63:63:be:60:7a:3f:34:c5:55:7c:25:1e:66:
                    8e:b3:8f:47:69:90:b9:87:6b:b2:a8:5b:bb:84:9e:
                    1b:5e:19:e1:ad:26:29:cf:44:ec:90:c9:4a:50:81:
                    6d:4d:86:d4:bd:98:eb:92:ae:f1:35:c0:8e:14:b2:
                    1e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E3:20:B3:45:4E:EB:8E:41:FD:31:C7:73:CF:83:B3:C7:CE:EA:33:52
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5H2v7mN5g7KBLH8Rve5ZGmBmHg7MvRAqmpat8zKjpZcH/1/E320B3454EEB8E41FD31C773CF83B3C7CEEA3352.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.252.0/22
                IPv6:
                  2804:718c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270796

    Signature Algorithm: sha256WithRSAEncryption
         50:bf:bd:58:48:ce:8e:5f:8e:13:e6:f0:de:95:29:95:0f:7c:
         3c:61:fe:95:63:6d:69:ce:bd:85:62:0a:bf:0e:3f:2a:33:66:
         46:51:9e:59:20:02:a0:66:a7:14:06:b8:90:40:6e:c4:1c:86:
         f1:29:a6:d7:db:56:6d:e2:08:77:33:dc:15:b2:21:34:e8:d1:
         68:00:d4:67:a4:fd:06:c6:4c:04:0a:9e:61:40:6f:02:d6:bd:
         3b:87:30:f6:11:28:6d:3d:55:f2:cb:99:7b:c0:ad:25:fc:fe:
         d7:eb:a7:95:1a:4a:f0:70:5d:40:3d:29:c0:d9:13:21:26:11:
         dc:6a:53:0f:16:f0:e0:b4:99:fa:26:25:d8:c2:a0:38:98:0f:
         8f:9b:c6:92:c1:f0:44:f9:69:9d:d9:60:bf:d1:87:43:bd:36:
         c6:02:a1:00:4d:5c:26:bf:b1:ef:80:74:c8:ef:55:51:b8:7f:
         e7:40:4b:b5:a9:66:91:a7:d0:e0:d8:1b:68:d9:a4:f7:d9:48:
         54:5b:3b:36:9d:bc:0a:a2:da:05:62:82:33:89:2c:4b:dd:47:
         3b:09:ad:b2:d1:ce:d7:bc:57:7e:63:5f:97:e0:3f:c0:d2:6e:
         5f:18:c7:4a:a7:ec:be:27:a8:47:a1:e4:b7:68:4d:3a:44:b1:
         4a:b9:7d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:34:09 2025 by rpki-client