Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.cer
File:                     3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.cer (raw, json)
Hash identifier:          0qtZygubMrPVmdxMsVV8nXuqw4GcpqyztHvkowZuXAE=
Subject key identifier:   3E:86:FE:3F:F2:EA:13:AF:B3:B8:C6:71:1D:D8:F4:73:1D:C4:88:4C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       43818715D83D7319B656747280EE5BDECD1402A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 Jan 2025 18:47:50 +0000
Certificate not after:    Mon 05 Jan 2026 18:52:50 +0000
Subordinate resources:    AS: 267059
                          IP: 45.228.108.0/22
                          IP: 2804:4784::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:81:87:15:d8:3d:73:19:b6:56:74:72:80:ee:5b:de:cd:14:02:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  6 18:47:50 2025 GMT
            Not After : Jan  5 18:52:50 2026 GMT
        Subject: CN=3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ae:65:61:ee:1d:0b:9d:04:47:d1:c6:d2:c6:
                    fd:1a:f8:a7:c2:c8:bb:fc:79:8c:41:04:eb:0a:0e:
                    dc:86:48:d7:6a:06:99:c0:84:62:06:57:d1:21:88:
                    8c:72:6a:6e:fd:e2:63:85:d4:34:8a:f8:0d:71:3f:
                    ac:fb:47:5f:57:30:13:ec:73:49:4f:84:7d:a5:30:
                    fd:c6:b4:e7:65:1a:20:37:cb:a7:d8:7b:96:68:3c:
                    6d:91:47:49:65:75:99:76:c1:77:8c:e4:26:2f:de:
                    90:d5:d4:7c:a8:9b:b2:9f:d3:4b:cf:55:1d:04:1d:
                    95:d4:d5:d0:bd:97:ea:76:f1:89:3e:1b:88:61:ab:
                    78:4f:e2:2b:73:f6:4a:3d:76:71:59:9e:64:a4:85:
                    50:bd:0d:39:30:e1:72:31:10:67:13:df:8c:4b:8d:
                    34:e4:ff:ca:88:25:87:c0:61:e7:75:1b:c9:d6:c6:
                    dc:d0:36:da:52:e9:55:a0:11:b8:fb:3d:6f:e3:37:
                    4c:59:2d:fe:7c:33:7d:44:95:0a:ab:49:31:df:99:
                    38:a4:ee:e6:a8:b7:90:52:4b:c5:19:c0:e4:b3:70:
                    23:74:fc:3e:f3:fa:92:3f:af:3b:07:dd:35:2e:a8:
                    8b:d8:2b:b1:4d:69:6a:77:7f:c8:f3:41:1c:27:f1:
                    fb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:86:FE:3F:F2:EA:13:AF:B3:B8:C6:71:1D:D8:F4:73:1D:C4:88:4C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.108.0/22
                IPv6:
                  2804:4784::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267059

    Signature Algorithm: sha256WithRSAEncryption
         bd:b0:5e:26:fa:28:c9:6a:e6:1f:9b:a0:f5:07:ce:e9:5a:87:
         29:33:c8:a4:33:de:0c:46:0f:80:d3:96:1d:b5:4f:0d:70:a6:
         69:81:e8:fe:4f:c2:ab:46:7d:ae:b4:5d:77:70:ea:b0:13:bf:
         6b:0b:49:5f:ef:a8:8b:aa:e9:75:32:cd:f5:08:96:6f:aa:3e:
         a7:92:ce:33:2b:bd:82:cb:37:e0:76:41:25:f6:2d:1b:03:1f:
         ef:70:35:a9:ea:73:0f:c3:db:1b:2e:aa:47:25:fe:8f:56:63:
         62:a4:98:b4:c8:d8:b3:b0:d6:72:f7:a9:44:96:fb:6a:8d:b4:
         40:2c:e1:be:bc:82:9b:09:58:9f:5d:4c:56:7c:9e:8d:15:01:
         89:6b:c8:d8:bb:ed:0f:d4:66:87:30:3b:6e:cb:9c:48:9e:b9:
         f8:a0:fb:4f:69:43:2d:6c:f0:3b:b9:b6:c2:8a:7e:b0:39:b3:
         a1:5a:3b:8c:9a:20:6e:26:4b:99:03:41:36:b4:20:11:6b:a8:
         32:40:a8:7a:2f:6c:81:f6:8d:ad:1c:b3:36:9b:a2:4d:a7:99:
         50:70:16:a2:7e:20:bc:95:c0:4c:4d:4b:0c:52:3f:e6:1c:c1:
         57:48:a6:95:95:8f:84:25:a0:12:97:fe:6b:80:75:01:a9:c9:
         f0:f3:52:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:08:51 2025 by rpki-client