Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.cer
File:                     EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.cer (raw, json)
Hash identifier:          k+8yxspSrN682a8GvJWzp1IVRZdme53WhEFkfjU8708=
Subject key identifier:   EB:CA:DF:4D:05:92:A8:CD:01:31:D2:F6:8C:FD:77:41:56:6B:7F:E4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       43EFB1081557DEE5CBE97D53FF60D322F4E17575
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 05:40:41 +0000
Certificate not after:    Fri 06 Mar 2026 05:45:41 +0000
Subordinate resources:    AS: 266176
                          IP: 190.196.244.0/22
                          IP: 2804:3bdc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ef:b1:08:15:57:de:e5:cb:e9:7d:53:ff:60:d3:22:f4:e1:75:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 05:40:41 2025 GMT
            Not After : Mar  6 05:45:41 2026 GMT
        Subject: CN=EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:05:2f:5f:9a:db:6e:52:1e:2c:7b:1b:16:d2:
                    7b:7f:3e:6e:6a:23:44:89:eb:c7:33:68:24:cd:e3:
                    4d:cc:71:ca:2b:09:23:7a:2d:21:db:8e:5d:cb:ec:
                    13:6b:2d:e3:e6:cc:c6:6b:0c:41:0b:38:06:08:1f:
                    c5:7a:a6:47:05:85:fb:b0:e3:49:e6:69:d0:a7:c6:
                    6f:6f:8a:be:02:1d:71:0a:a4:53:8d:e8:fa:d9:69:
                    84:e9:03:6f:86:df:d5:da:93:a4:f5:9b:70:2f:dc:
                    93:88:e1:8c:e6:26:92:29:f6:d2:cb:3a:63:4b:49:
                    ff:59:ce:03:78:4d:09:73:9d:61:4e:84:8c:49:b5:
                    b3:1f:21:56:b9:cb:e3:2a:f5:d8:8b:10:5c:60:5f:
                    d8:e5:94:65:54:06:ee:d6:4b:0d:d3:e1:2b:ae:d2:
                    7e:25:59:d8:df:9e:32:87:6b:67:4f:2e:f1:01:b8:
                    27:65:29:a9:83:a3:e5:d8:a5:65:b7:b7:48:dd:ca:
                    aa:a5:df:b4:9c:b0:32:55:47:11:d3:9d:77:ee:77:
                    76:3f:10:a3:15:d7:a3:3e:dc:63:6e:3b:e6:d9:3d:
                    72:d9:29:2b:a5:99:47:68:1f:f3:47:16:87:73:98:
                    b7:39:f4:fb:c0:30:d8:02:7c:92:b4:6a:5d:bc:14:
                    61:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:CA:DF:4D:05:92:A8:CD:01:31:D2:F6:8C:FD:77:41:56:6B:7F:E4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6dct7GP6rurTczyFT97rSgqH99TN2nvcqhyqtLvETP4E/1/EBCADF4D0592A8CD0131D2F68CFD7741566B7FE4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.244.0/22
                IPv6:
                  2804:3bdc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266176

    Signature Algorithm: sha256WithRSAEncryption
         67:55:f6:40:a9:9d:cb:33:dd:4c:ca:bc:b6:53:6e:ac:2e:02:
         c5:35:39:dd:8e:02:41:f0:83:57:3a:9f:78:11:60:c8:95:da:
         31:0d:a2:4b:6b:29:47:bf:4e:54:e2:8c:98:bd:b4:2a:bf:ed:
         35:54:ea:6f:6f:5f:8f:99:0a:9d:02:af:2d:87:32:a5:43:34:
         7e:37:23:52:b5:6e:7b:d0:1c:c3:ec:da:8b:b1:a4:84:a3:f4:
         46:f1:e7:fc:bb:3a:f7:71:9a:c9:21:e4:5d:bb:df:e8:1c:43:
         da:3f:15:b6:6a:cf:b6:24:bb:f4:f7:fd:a0:b1:2b:78:22:1f:
         de:5d:a4:36:f5:37:fd:04:d6:90:f2:a0:23:4e:88:ee:ea:d8:
         ac:8a:8a:7e:e7:5b:55:50:4d:0a:07:6d:80:f7:de:9f:53:59:
         26:ee:d7:8d:81:f2:ab:78:3c:36:ba:6b:23:03:c2:8a:56:58:
         08:a4:44:a8:31:15:34:e7:3c:a5:ea:4e:e8:42:09:83:62:f2:
         b8:f7:29:0d:f2:c1:39:ea:cf:5b:0c:20:e3:6d:81:bb:7f:98:
         27:29:a2:6c:e0:de:67:6f:29:08:2e:8f:19:9d:60:f9:0a:85:
         a6:8b:4e:3a:90:56:d6:8a:62:ee:60:39:91:54:98:0a:d2:aa:
         83:96:bd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:17 2025 by rpki-client