Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F5482F973699796F8049754A6DE965619F63B494.cer
File:                     F5482F973699796F8049754A6DE965619F63B494.cer (raw, json)
Hash identifier:          YHSHL3CDlZwBY0ErBYAxiiRiMWwf4ITI5zeDHZZhVPk=
Subject key identifier:   F5:48:2F:97:36:99:79:6F:80:49:75:4A:6D:E9:65:61:9F:63:B4:94
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       77DF1E5F03C63E33EF5ACB0BDA7A93B65002CB09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3ssLAe7H2ZFZDxQ1qjfizhNmhHgP9R4NqY4yxbDxBMMb/0/F5482F973699796F8049754A6DE965619F63B494.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3ssLAe7H2ZFZDxQ1qjfizhNmhHgP9R4NqY4yxbDxBMMb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Feb 2025 13:27:16 +0000
Certificate not after:    Fri 13 Feb 2026 13:32:16 +0000
Subordinate resources:    AS: 273799
                          IP: 2804:8c60::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:df:1e:5f:03:c6:3e:33:ef:5a:cb:0b:da:7a:93:b6:50:02:cb:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 14 13:27:16 2025 GMT
            Not After : Feb 13 13:32:16 2026 GMT
        Subject: CN=F5482F973699796F8049754A6DE965619F63B494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:68:d5:a8:2a:ff:18:d2:73:67:03:39:01:2e:
                    72:d2:a4:18:f4:c6:b8:b1:80:4b:e5:b5:6c:c5:fb:
                    b8:15:b1:1a:c3:49:1f:39:de:f9:d3:77:4a:a5:6d:
                    09:73:6f:2c:c0:c8:32:71:cf:f8:0e:d5:d2:07:56:
                    13:f6:8c:96:ff:6f:f2:7b:dc:46:ce:b6:66:16:24:
                    18:63:7e:cd:4d:70:cd:b7:d0:e7:c6:d8:b9:ab:f9:
                    d6:39:d3:bf:65:fb:5b:84:ea:85:a1:0a:ce:7d:78:
                    dc:fa:9c:11:50:f7:a4:2d:ec:fd:af:2f:7e:d3:93:
                    03:27:7e:fb:7f:cf:85:e0:eb:93:bc:44:9e:49:87:
                    24:b8:0f:c0:27:a6:60:00:50:ad:e4:2d:d3:99:b7:
                    6a:c5:cc:e6:34:97:78:09:ef:2e:01:e9:47:0d:ff:
                    47:ea:85:9e:d8:d9:1e:fc:0e:73:db:9f:93:3e:40:
                    ea:58:51:52:73:ad:57:dc:a4:00:a3:fa:c1:a8:48:
                    c4:0a:6b:00:c5:bb:09:fc:6c:49:92:15:37:66:c0:
                    90:ca:34:a1:2e:0c:01:3a:ca:99:e0:52:c7:e7:3d:
                    5d:e9:e1:ec:1e:8d:4f:3b:0d:d2:ba:76:da:af:86:
                    14:d6:40:c9:0e:70:49:d9:68:ad:1c:16:94:7a:c0:
                    4a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:48:2F:97:36:99:79:6F:80:49:75:4A:6D:E9:65:61:9F:63:B4:94
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3ssLAe7H2ZFZDxQ1qjfizhNmhHgP9R4NqY4yxbDxBMMb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3ssLAe7H2ZFZDxQ1qjfizhNmhHgP9R4NqY4yxbDxBMMb/0/F5482F973699796F8049754A6DE965619F63B494.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273799

    Signature Algorithm: sha256WithRSAEncryption
         53:e2:27:6c:f5:5c:db:c8:3d:3f:57:f0:02:11:8f:23:80:74:
         9d:62:ae:62:9f:21:ae:d5:20:a7:73:a9:89:b3:a8:4e:60:1e:
         da:58:6f:8f:8f:75:cc:f0:93:65:8e:2d:0e:65:24:31:be:6e:
         64:e7:97:15:5d:d1:f2:0f:ff:cc:0f:1c:8a:2f:b9:b1:19:50:
         dc:2e:07:38:63:81:b9:04:87:df:c8:87:76:a1:de:8e:b5:4a:
         a9:d1:d2:16:90:90:5c:d0:9e:90:d2:1d:b9:5a:48:e9:80:d0:
         9e:8e:ba:0f:43:88:d6:84:54:eb:0f:d5:a9:b3:ac:f1:93:5b:
         92:ec:62:7a:51:b3:db:c8:0f:db:68:1b:0f:9c:07:bd:56:a6:
         4a:07:d3:be:2d:43:6a:d3:01:d1:51:f4:fe:16:6a:90:c4:fe:
         21:73:18:94:35:03:86:da:bf:4a:2e:ed:a3:ef:8a:b7:d9:1e:
         05:17:fb:8c:a7:71:e7:3a:d9:fb:9f:78:fe:2e:dd:e4:35:89:
         a4:87:4b:15:60:ae:56:f0:86:26:60:42:92:5e:21:a2:66:0e:
         14:72:a7:ab:54:39:01:e0:8d:67:59:b9:09:1a:04:39:31:cc:
         2d:2c:a4:fd:56:8d:11:5c:86:82:54:73:c5:05:9b:7b:0a:e4:
         a6:95:e7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:53 2025 by rpki-client