Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E54F21ACD06F5B26659FC1A192F97F5439D48FCD.cer
File:                     E54F21ACD06F5B26659FC1A192F97F5439D48FCD.cer (raw, json)
Hash identifier:          VpMXJWT+PNFNk06Drry9ofuJk4p70AaNHJkIKCjnhbA=
Subject key identifier:   E5:4F:21:AC:D0:6F:5B:26:65:9F:C1:A1:92:F9:7F:54:39:D4:8F:CD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       16108122D4C7D810B4E89446AA857AA0C5F94D5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/E54F21ACD06F5B26659FC1A192F97F5439D48FCD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 19 Feb 2025 16:33:15 +0000
Certificate not after:    Wed 18 Feb 2026 16:38:15 +0000
Subordinate resources:    AS: 264983
                          IP: 170.0.236.0/22
                          IP: 2804:30f4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:10:81:22:d4:c7:d8:10:b4:e8:94:46:aa:85:7a:a0:c5:f9:4d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 19 16:33:15 2025 GMT
            Not After : Feb 18 16:38:15 2026 GMT
        Subject: CN=E54F21ACD06F5B26659FC1A192F97F5439D48FCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:93:f6:ba:a3:87:70:7e:8c:cb:8e:ba:d5:33:
                    3f:e5:e8:ba:25:53:00:4a:e7:93:7e:d0:1e:1d:64:
                    10:6a:0a:a7:7e:c8:47:26:a1:e4:a0:e9:69:ad:94:
                    f1:95:fc:b6:71:2b:58:93:8f:bd:da:5c:7c:b4:ef:
                    46:c3:58:78:c7:85:0a:c1:5b:7f:df:1f:fa:36:08:
                    82:26:38:f1:35:7c:fd:9e:22:2e:5b:db:f5:6d:09:
                    c2:b5:96:9d:68:63:9c:46:1d:f2:bb:d4:a3:e2:b1:
                    0e:39:a5:d9:85:9a:2a:7e:05:38:1b:37:9a:69:c0:
                    95:93:31:91:24:4a:5d:93:39:bc:89:34:cb:77:5a:
                    a2:15:38:d9:7b:f2:cb:75:24:d4:77:8f:2c:ba:6b:
                    6b:86:1f:42:ad:52:46:c5:95:fd:a8:3b:3f:ac:36:
                    39:23:3b:52:6d:3b:f5:82:1b:11:d8:8f:2c:49:af:
                    61:ca:52:be:e1:67:48:0c:27:3a:45:b1:7f:60:06:
                    4d:77:85:f9:fa:f1:a1:e3:98:5e:cb:66:a2:da:78:
                    b6:6a:4b:fd:9d:13:92:79:ae:11:e8:e6:5a:36:7b:
                    08:83:7c:2d:76:28:61:17:ef:09:cd:8a:e9:b4:78:
                    09:06:a3:09:1f:5f:17:b5:be:5d:5d:a4:22:ef:a1:
                    d9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E5:4F:21:AC:D0:6F:5B:26:65:9F:C1:A1:92:F9:7F:54:39:D4:8F:CD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8GseMLAAXtyeQHYWNvLBCgtRJUFyosWc4TnWxTFBHtrL/0/E54F21ACD06F5B26659FC1A192F97F5439D48FCD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.236.0/22
                IPv6:
                  2804:30f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264983

    Signature Algorithm: sha256WithRSAEncryption
         b1:9f:a7:ba:7b:6e:a1:e7:9c:07:9f:19:4f:01:c4:84:26:9e:
         a6:6a:15:1e:aa:d1:fe:e4:94:c9:8d:f6:07:36:c5:27:e0:d8:
         bd:8b:28:41:41:a0:a0:e1:05:40:89:b9:30:3b:a5:3f:38:97:
         f2:38:12:16:a6:b9:e8:f7:e9:ae:19:cb:3c:24:ea:54:47:68:
         ca:5b:39:16:a9:8e:de:bd:6f:04:0a:36:88:76:34:a9:95:51:
         e2:c4:a6:e9:13:6e:50:d5:b2:b1:d6:3a:96:0a:9d:50:19:f1:
         32:8e:5e:77:cb:5b:fc:46:89:f5:6f:91:7f:50:aa:f7:0a:24:
         60:c1:57:ed:45:d4:fd:88:05:87:3d:d4:5b:77:81:97:1b:1d:
         97:7e:16:aa:da:cb:36:78:12:dd:2e:ed:d3:c4:5e:7a:ce:cb:
         07:bd:d9:27:0c:96:8a:04:02:b1:79:63:77:ab:d7:e0:b6:e6:
         0a:c3:5b:1e:e8:e9:e4:28:83:bf:ec:e5:d0:0f:f4:aa:4a:62:
         4a:49:90:76:e3:9f:64:22:f4:54:e9:dc:59:e3:ab:26:85:ac:
         44:dd:68:27:f3:bb:86:78:2e:27:f5:5e:50:04:0f:db:03:45:
         f4:4d:f0:d1:9f:ef:af:05:12:e9:cd:f9:15:61:53:9d:f1:a3:
         26:3c:9e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:07 2025 by rpki-client