Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F365DB0174F24492BBABCEFE755F363C309D4654.cer
File:                     F365DB0174F24492BBABCEFE755F363C309D4654.cer (raw, json)
Hash identifier:          Kjn8tmeB/p9dL5xJQtDtVsyIMbQ8ltWgqWXdPxVOSec=
Subject key identifier:   F3:65:DB:01:74:F2:44:92:BB:AB:CE:FE:75:5F:36:3C:30:9D:46:54
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2B2C16A79B0B6AE919B54A5EE1FA11CD446B2B78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/F365DB0174F24492BBABCEFE755F363C309D4654.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Feb 2025 20:58:16 +0000
Certificate not after:    Thu 12 Feb 2026 21:03:16 +0000
Subordinate resources:    AS: 270684
                          IP: 45.228.12.0/22
                          IP: 200.187.104.0/22
                          IP: 2804:6fc8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:2c:16:a7:9b:0b:6a:e9:19:b5:4a:5e:e1:fa:11:cd:44:6b:2b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 13 20:58:16 2025 GMT
            Not After : Feb 12 21:03:16 2026 GMT
        Subject: CN=F365DB0174F24492BBABCEFE755F363C309D4654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:88:a0:8b:10:c3:c4:43:08:88:78:35:23:
                    01:d4:fe:48:0b:83:db:7f:b1:40:95:a3:fb:bd:fb:
                    3a:6c:41:22:d1:36:29:49:3c:9e:2e:b3:3d:14:91:
                    ed:fa:56:df:0c:c1:6f:ed:11:38:b1:e1:30:6f:f5:
                    f5:0e:b5:7e:52:b6:4d:30:73:44:b3:56:d0:8d:d6:
                    7c:49:dc:84:af:1b:43:e0:e0:78:21:1b:3c:7f:02:
                    0b:92:39:c9:3f:01:06:be:c9:c7:94:42:97:75:ad:
                    eb:01:0a:d7:e1:de:d3:d9:02:b9:e0:fe:9e:36:08:
                    63:d2:0c:f2:90:ac:91:38:b8:e9:b5:a0:c3:9a:84:
                    c6:68:51:b7:2b:56:67:e5:4f:b4:a1:03:79:8f:73:
                    4e:84:93:e5:f5:e0:33:b0:c6:d5:41:d2:2d:24:f4:
                    6c:53:cd:3b:ad:85:0f:01:ee:79:5a:3e:f3:e3:44:
                    ab:75:02:ea:cd:88:ed:a2:3b:ea:96:92:1a:e0:9b:
                    7e:49:1e:19:39:39:4b:de:31:dc:c6:98:c4:2b:b3:
                    be:2b:cd:f6:23:35:7d:1c:f4:4c:76:ac:2f:e3:65:
                    b1:b9:f3:3c:bd:05:1d:19:e4:b5:dc:2c:12:e7:3a:
                    66:f9:f8:62:e4:cc:09:5c:d3:07:cd:4d:e5:a2:03:
                    49:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F3:65:DB:01:74:F2:44:92:BB:AB:CE:FE:75:5F:36:3C:30:9D:46:54
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/F365DB0174F24492BBABCEFE755F363C309D4654.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.12.0/22
                  200.187.104.0/22
                IPv6:
                  2804:6fc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270684

    Signature Algorithm: sha256WithRSAEncryption
         45:f5:9a:da:18:61:b4:45:6c:33:da:36:23:60:f2:cc:47:4f:
         02:a2:ac:48:e8:53:37:8b:20:60:fd:64:ab:66:27:e7:d9:ab:
         7e:5d:cf:85:d5:4e:c2:b6:93:00:e1:13:18:b6:67:d5:bf:62:
         2c:c6:76:2e:fe:70:b2:f7:ec:0a:64:37:86:d8:1b:b6:1c:74:
         65:37:31:7d:4d:2a:36:3b:37:09:36:84:28:9d:2f:19:81:5f:
         6b:d9:bc:91:ef:e6:6c:f9:29:7e:34:d1:ce:38:6e:cc:a6:a0:
         e1:21:b1:59:a8:fb:f9:a0:51:11:7b:45:1f:96:bb:2b:fd:a3:
         55:48:b5:49:34:e6:0b:2c:ac:ff:6c:0b:97:ee:be:62:74:b2:
         15:16:21:68:a2:ed:64:da:5b:f3:d6:17:bb:b4:bf:ae:6c:0b:
         50:dd:5b:f6:55:eb:ad:c1:67:ef:a6:f3:0e:7d:bf:19:43:9f:
         b8:3b:d9:0a:06:93:83:ae:3f:3f:76:e5:fd:3c:a8:17:00:a1:
         8b:f6:fb:e9:9e:a3:e7:70:3f:1e:ac:01:79:13:9c:53:4e:f7:
         9b:97:db:0e:ee:62:c4:3f:00:9c:00:a8:59:ab:0a:8b:d3:44:
         bc:91:a4:e1:ec:07:6a:f8:19:6a:e8:59:e5:1e:40:b9:11:c9:
         f3:73:d0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:44 2025 by rpki-client