Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.cer
File:                     FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.cer (raw, json)
Hash identifier:          61MCN1F8KR8646XgnaCTeZruHrkD5aeXCs4pZutO4xU=
Subject key identifier:   FD:09:3A:D3:0F:DD:C7:28:0A:72:C5:D5:E1:61:4E:D3:4E:E8:CD:97
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4532EE293049372C8225EF84F95C820741A58273
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 14:50:34 +0000
Certificate not after:    Thu 03 Apr 2025 14:55:34 +0000
Subordinate resources:    AS: 273728
                          IP: 2804:8b5c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:32:ee:29:30:49:37:2c:82:25:ef:84:f9:5c:82:07:41:a5:82:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 14:50:34 2024 GMT
            Not After : Apr  3 14:55:34 2025 GMT
        Subject: CN=FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:81:88:1c:c1:21:cf:77:a8:06:f2:41:ab:3c:
                    99:a4:1e:8e:be:7e:98:59:8f:85:b3:33:49:f8:ec:
                    7f:e7:e3:fd:80:ee:46:82:f5:e5:e9:5f:b6:e0:88:
                    46:92:ca:1b:7c:38:97:0d:1e:01:cc:6b:59:18:77:
                    17:dd:b7:77:d9:c8:0e:10:1e:97:1b:a8:e8:f7:e7:
                    e4:ac:ab:d8:f9:2f:da:dd:37:33:28:bb:ce:e0:73:
                    a6:71:e2:f3:aa:88:fb:75:40:fd:e8:f6:7f:2e:ad:
                    81:91:b0:5c:f3:42:60:fb:b6:e0:2f:45:aa:61:27:
                    ce:ef:d0:28:68:3c:8f:64:f3:da:3f:36:e1:b5:2a:
                    0e:d5:aa:7b:a3:72:6f:b4:66:c1:58:6b:4f:32:24:
                    12:da:10:40:f4:cb:8e:80:6f:cf:32:5d:c2:6b:8f:
                    ec:f0:92:75:ff:29:a6:4a:cc:24:23:aa:ba:b7:2e:
                    78:ad:58:de:4b:16:12:6c:b4:37:84:86:63:58:6a:
                    4c:14:0c:17:25:ce:76:c2:9c:c9:b1:cf:c0:8c:28:
                    7c:d8:78:f1:de:7f:d9:eb:f6:85:77:71:e8:b9:1d:
                    0a:6b:ac:3b:36:1b:2c:b4:a2:e7:ed:b5:85:c2:ec:
                    3c:4a:8d:71:e8:50:9a:28:c4:a7:58:2b:3e:98:41:
                    73:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:09:3A:D3:0F:DD:C7:28:0A:72:C5:D5:E1:61:4E:D3:4E:E8:CD:97
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/2/FD093AD30FDDC7280A72C5D5E1614ED34EE8CD97.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273728

    Signature Algorithm: sha256WithRSAEncryption
         a6:41:46:b9:6d:54:7b:b5:54:7c:b0:00:6a:96:4a:99:2d:8d:
         bf:09:83:a2:aa:8e:6a:4c:4e:03:97:b0:da:3a:a1:ec:52:24:
         6d:2f:90:dd:b8:c1:ce:4a:44:7d:5e:76:ac:f5:b7:24:f6:9b:
         54:e2:1f:2a:a0:cc:62:41:70:0d:8e:57:46:64:fd:c7:10:84:
         f8:c7:97:9f:09:fe:5e:ec:5c:c0:31:ba:58:36:5f:aa:59:45:
         95:c9:b5:00:fc:6b:ff:a2:63:b6:f1:1a:d0:be:c3:ca:3f:10:
         cf:31:39:b5:e2:b6:9a:73:c1:75:3a:4a:85:1e:71:8d:8f:d1:
         ce:c6:50:6a:f1:f4:2b:ed:74:77:bb:5e:9f:f3:75:b5:4a:b2:
         98:e2:9b:f4:a4:d3:ba:50:3b:45:d6:4f:75:af:32:78:29:04:
         c6:ac:6e:26:58:2a:4c:2b:4b:4e:86:53:ce:58:50:ea:15:4a:
         a4:a5:51:99:e0:35:e8:8e:12:f4:ae:8b:64:eb:32:e9:ad:14:
         8a:bc:f6:12:ad:8e:76:d1:4e:f7:f5:84:ae:4d:51:bc:cb:15:
         15:5b:74:44:bf:25:2d:7d:4e:88:95:91:1a:fa:b5:5a:e8:7f:
         46:1f:6d:c8:87:90:a7:c9:87:99:07:04:83:94:86:c3:c6:eb:
         87:d7:bb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:18 2025 by rpki-client