Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
File:                     FF36173E097169BA044538B64258000B42FABD8C.cer (raw, json)
Hash identifier:          OXfY8GoiAD3YDaG4Icr4V/L/KtYHsTmfmvX/xwaAo/c=
Subject key identifier:   FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       65583A98F167AB0BF3E2895283A8DD29A72B056A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Feb 2025 19:00:31 +0000
Certificate not after:    Fri 13 Feb 2026 19:05:31 +0000
Subordinate resources:    AS: 52580
                          IP: 45.178.216.0/22
                          IP: 179.191.160.0/19
                          IP: 186.195.64.0/20
                          IP: 2804:cf8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:58:3a:98:f1:67:ab:0b:f3:e2:89:52:83:a8:dd:29:a7:2b:05:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 14 19:00:31 2025 GMT
            Not After : Feb 13 19:05:31 2026 GMT
        Subject: CN=FF36173E097169BA044538B64258000B42FABD8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dc:73:da:4d:5e:11:20:08:be:dd:97:9d:cb:
                    6f:ab:d0:16:a0:fc:fd:3c:90:0c:a0:f0:9b:e3:fd:
                    36:73:f8:6e:a4:6a:fd:df:28:e6:65:63:be:6e:ce:
                    93:0c:8d:ee:5e:6d:d0:3c:92:51:ff:25:af:26:11:
                    0d:36:fb:ca:69:be:2f:fe:d3:14:36:bb:2e:1f:a2:
                    1c:77:a9:9c:41:3e:5a:a4:58:ee:1d:2d:6a:71:9d:
                    35:b9:03:68:a3:ca:5a:b4:e2:11:25:d7:ef:b2:20:
                    48:38:4f:a2:23:62:36:a3:5f:10:08:3e:4c:5f:e1:
                    9c:d5:52:3e:f3:0c:9b:15:73:8c:1e:fa:5a:c3:67:
                    4a:07:24:c3:04:fe:e9:f6:62:97:8e:cc:80:3e:18:
                    5c:a5:b6:27:86:d0:b6:70:fc:ee:67:c5:e6:d6:94:
                    33:dc:46:53:fe:be:db:5f:76:4d:3e:cb:36:25:ae:
                    3b:d4:e6:d0:82:64:e1:e6:0b:9a:c7:d8:f4:31:41:
                    9e:e9:4d:bf:2e:31:fe:98:cf:31:7f:58:f2:ec:0f:
                    2b:19:18:22:b9:ac:53:2e:20:a4:8b:f3:ce:97:9b:
                    b2:34:00:03:80:4a:e7:ab:5c:2a:c5:11:b7:d0:27:
                    bc:a8:42:dd:5d:f3:fd:d0:06:d7:2f:dc:52:8b:fb:
                    63:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.216.0/22
                  179.191.160.0/19
                  186.195.64.0/20
                IPv6:
                  2804:cf8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52580

    Signature Algorithm: sha256WithRSAEncryption
         66:c8:a8:48:00:8e:fe:05:7f:1a:dc:31:af:b4:c4:ef:61:b3:
         80:44:cb:72:32:01:18:ef:9b:90:5d:d8:b0:33:c2:53:4d:61:
         0c:a1:72:10:22:9e:aa:d5:b5:ba:37:95:70:0b:e6:03:f5:03:
         ad:be:27:63:f3:01:4d:ee:f3:37:b7:bf:ec:cb:60:ea:81:08:
         4e:23:7c:57:5b:b5:5d:76:0f:7c:0a:fc:15:4b:5e:61:56:32:
         2d:00:c0:ea:e1:93:e8:79:71:3a:41:3b:cc:a6:4b:a6:95:08:
         6e:7d:1a:16:dd:52:e1:20:d3:df:37:c7:0e:c5:d6:cc:f1:dd:
         9f:67:40:1f:bf:30:b8:b6:c9:c2:19:fb:a2:9b:9b:83:5c:40:
         95:40:3b:54:62:89:4c:ea:d0:c9:28:2f:c8:5c:e3:41:c6:b0:
         fd:b9:87:24:9a:35:49:79:8b:9c:e0:fe:34:1c:df:5d:55:14:
         4d:64:21:ee:75:d7:83:9d:42:74:c4:a2:49:b3:1b:df:30:73:
         da:12:07:5c:d7:e1:cc:c8:f6:59:36:ca:61:e7:f1:25:46:39:
         c5:22:16:f1:73:67:ec:b2:3e:c6:2e:c2:21:4f:40:49:37:a2:
         85:35:da:ee:85:60:20:df:22:8e:32:a2:e5:8b:88:ba:14:06:
         2a:1b:bd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:19 2025 by rpki-client