Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.cer
File:                     F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.cer (raw, json)
Hash identifier:          BYJUNG/zGm6wFqRaTCmVdGUzqPAgGBHYI7qXHJTCXUs=
Subject key identifier:   F3:D7:BC:2A:62:A3:A3:55:A4:38:BA:6B:F4:3C:6E:99:3B:37:CE:D1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       030982BD43E1E1B5ED1BC9CDFA5938AD94D4F60C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 06:20:52 +0000
Certificate not after:    Fri 06 Mar 2026 06:25:52 +0000
Subordinate resources:    AS: 264117
                          IP: 138.97.28.0/22
                          IP: 143.255.4.0/22
                          IP: 177.66.76.0/22
                          IP: 2804:22b4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:09:82:bd:43:e1:e1:b5:ed:1b:c9:cd:fa:59:38:ad:94:d4:f6:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 06:20:52 2025 GMT
            Not After : Mar  6 06:25:52 2026 GMT
        Subject: CN=F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ba:32:24:49:96:dc:36:90:af:24:f7:23:45:
                    81:fb:77:16:20:1f:a8:9b:0f:84:67:9c:e7:77:0b:
                    5c:51:22:3a:f6:a2:49:f8:6f:3a:67:e0:40:f4:17:
                    25:01:bb:19:db:cd:50:c5:d2:75:71:39:6b:54:6c:
                    9f:42:b8:bd:2c:12:1a:0c:06:b6:9d:b0:ff:c6:4d:
                    28:fb:de:4b:31:3e:8f:a7:42:5c:22:d1:3e:06:23:
                    f4:7e:ac:23:b9:50:ce:0d:e7:6b:c9:18:fe:c1:b7:
                    83:84:d0:86:34:22:8b:c3:ca:55:ce:f2:00:fc:da:
                    15:1c:e6:90:38:43:3b:db:59:d3:9e:a7:1f:f4:78:
                    23:6a:bc:e5:03:56:00:90:2c:fb:eb:2c:a2:8c:1b:
                    7c:81:63:de:d4:c8:93:2e:2e:be:61:99:bf:93:b0:
                    a0:bf:9f:b9:87:fe:39:a3:c1:2b:ec:37:fd:b1:ea:
                    1b:c0:77:62:04:aa:c4:93:c5:bf:3e:e2:96:05:5a:
                    31:72:8a:2d:fc:41:e3:13:bf:99:62:6c:cb:0f:9a:
                    cc:c7:7a:08:94:b6:df:8c:80:01:dc:24:6b:b9:90:
                    33:6d:04:34:76:28:36:60:67:15:46:e3:ec:a7:57:
                    44:a3:65:2b:ba:e2:67:c5:3e:14:29:08:f3:d0:00:
                    23:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F3:D7:BC:2A:62:A3:A3:55:A4:38:BA:6B:F4:3C:6E:99:3B:37:CE:D1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.28.0/22
                  143.255.4.0/22
                  177.66.76.0/22
                IPv6:
                  2804:22b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264117

    Signature Algorithm: sha256WithRSAEncryption
         9b:7b:00:06:be:ba:07:04:9d:22:50:13:14:e2:b5:cc:8a:ca:
         50:e6:62:70:2b:2a:a5:b7:0d:f4:44:ed:b1:a0:55:58:9c:59:
         e8:e9:1b:27:fa:85:e8:8f:b8:36:87:22:4a:f9:9d:a0:83:f5:
         aa:7d:27:03:0b:51:3f:4f:73:86:87:48:d8:1d:9a:08:e0:bc:
         da:3a:28:04:17:19:78:db:4b:b0:8b:fe:34:96:c9:12:5a:9c:
         b4:71:29:b6:25:cf:2c:f8:05:20:0f:a1:07:85:4e:46:6b:42:
         1c:98:ee:ff:0b:e2:2d:a1:b1:c1:8c:c2:fc:94:31:cc:eb:3e:
         42:18:a1:66:e3:23:7e:80:f9:75:63:38:8b:7f:59:74:c6:ae:
         25:00:8c:c9:2f:56:59:23:66:a7:c5:2c:a0:f2:42:e0:53:83:
         bc:40:42:a9:d4:ae:5e:8c:01:3a:5b:56:99:ae:4a:39:aa:b3:
         3b:c6:6f:47:c2:92:87:1b:05:e9:72:a2:11:13:48:36:1d:85:
         dd:5c:96:d6:b3:dc:46:df:8c:3d:00:0a:87:76:7c:9b:02:a8:
         96:bb:38:71:59:c7:55:37:61:0e:d4:b9:9b:4e:07:95:de:78:
         9f:23:fc:fc:5f:db:7d:e7:b0:03:88:ed:71:d0:da:e0:90:dc:
         50:7f:77:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:38:31 2025 by rpki-client