Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.cer
File:                     FB296CB95D657097D81AFC78BE6A40AC2591E349.cer (raw, json)
Hash identifier:          OA0LP8ielp1xJ9epDTD4m+2kFlt8OIMM6Cuguu6wftg=
Subject key identifier:   FB:29:6C:B9:5D:65:70:97:D8:1A:FC:78:BE:6A:40:AC:25:91:E3:49
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       670285ED87A8E9864076D47C6945D0107BD1902A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:23 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:23 +0000
Subordinate resources:    AS: 265234
                          IP: 45.172.68.0/22
                          IP: 168.0.96.0/22
                          IP: 2804:2cac::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:02:85:ed:87:a8:e9:86:40:76:d4:7c:69:45:d0:10:7b:d1:90:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:23 2025 GMT
            Not After : Mar  4 18:40:23 2026 GMT
        Subject: CN=FB296CB95D657097D81AFC78BE6A40AC2591E349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:97:9a:92:ea:f0:f4:c9:10:d6:be:69:97:56:
                    da:5a:23:fd:00:77:15:f0:a7:05:79:c3:fc:e5:e9:
                    6f:db:d1:f0:88:71:be:17:c4:1e:49:74:2b:9c:74:
                    0f:46:85:74:4d:23:00:09:33:3e:24:77:72:4b:76:
                    70:7d:37:63:5a:89:11:87:29:c5:f1:a1:4a:a6:e3:
                    9e:98:cf:e3:49:5c:1c:a9:94:6e:32:e4:bc:a9:07:
                    92:61:f5:b1:6e:11:a6:62:44:90:2e:74:59:9a:5a:
                    21:44:77:c8:00:ad:c4:fe:a0:83:3d:73:6b:a1:9c:
                    15:0f:2d:8f:31:7a:e9:f0:36:5e:ed:18:26:fa:a8:
                    89:62:81:ea:aa:59:ac:2d:9c:2c:3c:f4:5c:2d:d1:
                    ec:00:3c:06:7d:83:7a:25:64:8f:7a:0b:73:5d:52:
                    46:5b:db:f0:69:1f:ac:ce:67:d7:95:0a:d9:6d:3b:
                    73:a2:21:5a:fa:2d:61:95:23:e6:fe:15:1b:a7:96:
                    b6:b6:f0:9e:8f:9a:5f:84:84:10:ad:c0:c3:5b:18:
                    9e:f4:9f:e1:c8:3a:a1:31:77:ec:55:1b:18:f1:9f:
                    cb:e6:e3:5a:1b:bf:6c:fc:0f:ed:3f:c9:8a:f2:c7:
                    0d:cc:2c:6e:5e:7e:50:1a:1b:de:51:49:0b:2e:99:
                    f8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:29:6C:B9:5D:65:70:97:D8:1A:FC:78:BE:6A:40:AC:25:91:E3:49
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E91h1WFwbNX4ZDetYfSy3kztp5EFneioaYFAxz5pfhzv/1/FB296CB95D657097D81AFC78BE6A40AC2591E349.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.68.0/22
                  168.0.96.0/22
                IPv6:
                  2804:2cac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265234

    Signature Algorithm: sha256WithRSAEncryption
         35:8b:6e:ec:ac:08:d0:ee:0b:94:73:d9:d3:7c:0e:ae:48:00:
         ca:d2:2b:3c:56:51:89:f1:a0:07:88:06:e3:96:32:2c:42:fc:
         11:8d:b7:e2:9c:a8:60:95:50:c7:be:59:fa:6f:59:9c:39:ad:
         79:36:91:c1:fc:4f:13:d4:7f:01:5f:24:84:21:7b:d4:4f:5e:
         4b:2f:a4:97:d4:d7:26:11:fe:ca:fb:db:be:9c:96:dc:7d:30:
         3d:ac:e8:66:69:cc:32:64:81:3d:6a:77:86:a9:48:5e:82:00:
         f6:2a:f3:a5:4f:65:f1:3d:f6:a9:46:e2:10:a8:c5:03:df:7d:
         99:8c:ae:aa:78:c7:d7:fd:25:36:e9:49:8d:e2:c2:36:8a:39:
         5c:c4:30:3a:b9:fa:14:1d:75:aa:45:9b:3c:d3:4f:3d:2a:e0:
         2c:84:28:8b:83:33:c2:1c:57:7a:2b:f4:57:32:ce:ec:21:6a:
         2d:a6:06:54:1d:e3:86:74:97:76:04:ad:6f:b6:77:62:9a:52:
         33:d3:14:b9:67:ea:61:e5:50:1e:45:14:51:98:12:2b:22:6d:
         99:57:82:01:3a:1a:a3:21:15:2e:91:c9:5c:b6:28:5e:db:4c:
         bd:41:c2:10:3d:b2:54:76:a2:4e:ac:e4:4e:9a:d9:33:ee:2a:
         db:48:50:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:23:06 2025 by rpki-client