Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E3C11484C8B4CD3F766170F9E324672A733D9604.cer
File:                     E3C11484C8B4CD3F766170F9E324672A733D9604.cer (raw, json)
Hash identifier:          3BLtvv5wkoHQr8Dnw+f4/CGdNj3kLh/v+J0kCviIE6w=
Subject key identifier:   E3:C1:14:84:C8:B4:CD:3F:76:61:70:F9:E3:24:67:2A:73:3D:96:04
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1D1746FC9250581CCD9753A98F2A4F5F7DAE2D5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 18:20:24 +0000
Certificate not after:    Thu 05 Mar 2026 18:25:24 +0000
Subordinate resources:    AS: 264128
                          IP: 138.97.52.0/22
                          IP: 170.78.240.0/22
                          IP: 2804:22e0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:17:46:fc:92:50:58:1c:cd:97:53:a9:8f:2a:4f:5f:7d:ae:2d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 18:20:24 2025 GMT
            Not After : Mar  5 18:25:24 2026 GMT
        Subject: CN=E3C11484C8B4CD3F766170F9E324672A733D9604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7f:8b:c1:e4:cc:38:80:04:01:d3:f2:62:e8:
                    ad:92:2a:d1:8d:8f:a3:bc:a4:08:3e:9f:10:ff:63:
                    88:fd:28:e8:18:5d:af:2c:8b:a0:a3:6a:ad:5b:5e:
                    a2:d1:87:df:3f:29:26:e7:51:8f:4d:ad:27:cc:5a:
                    68:4f:12:dd:25:a0:7c:db:81:d0:02:b2:04:cb:74:
                    de:2d:32:d7:7c:fa:3b:db:54:f4:4d:89:84:d5:7d:
                    11:44:90:d9:f4:28:69:1a:c6:57:0a:b5:9e:d1:74:
                    55:4a:1f:71:1c:cb:b8:9f:6c:c3:96:d7:ba:2d:16:
                    a2:aa:10:12:8b:51:0b:34:a0:e9:af:87:2e:fb:6e:
                    5a:cd:a8:32:34:71:0b:36:4b:d4:aa:f2:e7:0c:50:
                    15:96:e3:48:9a:f6:99:3d:2b:79:4c:26:e5:56:3a:
                    78:e3:fa:fb:7e:1c:cf:8f:6f:4f:25:09:ad:65:f8:
                    37:42:15:0c:2e:cd:6d:c3:47:ff:56:2d:10:c0:27:
                    e2:93:68:b9:a0:a4:ce:30:6a:2b:88:61:84:12:ce:
                    72:59:17:18:b3:33:28:17:b5:1c:e7:f0:4e:7d:df:
                    0c:22:a7:01:49:9a:8c:0d:e9:1f:50:4f:63:63:34:
                    1a:70:5c:2f:43:1f:01:54:c2:5a:86:04:bb:8d:51:
                    61:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E3:C1:14:84:C8:B4:CD:3F:76:61:70:F9:E3:24:67:2A:73:3D:96:04
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4GomRRFcTgQVxLfSshajQLn1tKbnVq7y27zcEyRHeXEH/1/E3C11484C8B4CD3F766170F9E324672A733D9604.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.52.0/22
                  170.78.240.0/22
                IPv6:
                  2804:22e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264128

    Signature Algorithm: sha256WithRSAEncryption
         01:f2:b0:1a:25:10:bc:ce:07:19:42:3a:e5:6b:29:db:08:fb:
         df:93:e6:ed:7a:ef:05:f0:f2:38:9b:72:6e:b0:b6:fa:cb:85:
         aa:72:4a:90:62:8c:bc:39:98:e2:a3:b0:1b:b8:c6:8c:77:51:
         e1:ce:f2:16:ff:1e:9e:eb:0d:cf:2a:18:f0:45:4f:be:55:71:
         41:3b:88:38:a2:64:7d:99:8e:a5:be:72:b4:49:5f:a5:32:ed:
         26:e6:33:9f:31:3a:fe:e0:46:47:2d:5f:73:5e:67:f3:21:66:
         c7:85:7a:60:6a:72:18:c6:84:43:30:ed:b0:4c:96:4e:6e:30:
         a9:bc:5d:c8:e7:e2:86:4e:6d:50:3a:bc:84:77:d7:0c:cd:c0:
         39:51:74:cf:dd:5b:82:39:cf:89:c1:6f:a9:0e:c5:36:a1:69:
         d5:38:76:25:70:f0:38:27:41:c9:2d:38:cd:0a:c3:c5:11:60:
         5c:66:61:56:95:52:1e:8f:a4:1e:7d:b3:bb:8a:94:14:ab:71:
         08:a1:fc:3a:7e:3f:63:a8:7d:ee:23:30:70:10:41:8d:4f:e5:
         f0:c0:0d:70:51:bd:f2:34:4b:a7:eb:76:4f:ba:81:b7:53:bb:
         2e:ec:37:42:1e:68:b4:b0:9b:ba:9e:be:07:da:33:7f:b3:6c:
         32:a4:43:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:27:37 2025 by rpki-client