Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/978C99F109F4BDA1A39540870319AF5A1798DF00.cer
File:                     978C99F109F4BDA1A39540870319AF5A1798DF00.cer (raw, json)
Hash identifier:          tSynwgeXReAqBHx1blFkReP3ElrsO4GdSA1JpfHZsSc=
Subject key identifier:   97:8C:99:F1:09:F4:BD:A1:A3:95:40:87:03:19:AF:5A:17:98:DF:00
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3F26E3ADF48A9CB0B13762054E6336866CFAA24A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/93uqARYdh5sFDibDC6WGdGao4uh4mAdjSyCNXSTopZ5V/1/978C99F109F4BDA1A39540870319AF5A1798DF00.mft
caRepository:             rsync://rpki-repo.registro.br/repo/93uqARYdh5sFDibDC6WGdGao4uh4mAdjSyCNXSTopZ5V/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 03:07:05 +0000
Certificate not after:    Fri 04 Apr 2025 03:12:05 +0000
Subordinate resources:    AS: 265914
                          IP: 131.196.164.0/22
                          IP: 2804:3fc8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:26:e3:ad:f4:8a:9c:b0:b1:37:62:05:4e:63:36:86:6c:fa:a2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  5 03:07:05 2024 GMT
            Not After : Apr  4 03:12:05 2025 GMT
        Subject: CN=978C99F109F4BDA1A39540870319AF5A1798DF00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:38:3d:76:45:86:b1:b9:07:a2:5e:20:d1:ef:
                    8d:c7:2e:96:02:a6:f9:c1:a1:0f:5f:0d:21:91:0a:
                    f9:7a:bf:0b:4b:e5:99:e6:a1:cf:2f:92:c1:c4:4e:
                    a2:42:ec:49:dc:31:da:f1:b0:7b:59:f3:d2:1e:32:
                    e1:c3:19:ff:3c:e8:fa:f3:11:71:f1:f4:3a:9b:d9:
                    4c:3c:3d:1c:47:af:e4:f6:df:0b:d8:80:36:74:bb:
                    24:e2:91:28:b8:21:25:50:73:18:6a:b1:0f:2d:c7:
                    6b:55:0b:ac:f2:af:38:78:ab:64:34:39:35:a5:72:
                    dc:2e:84:d6:4e:09:52:41:9c:e2:56:2c:a6:8b:e4:
                    40:5f:a6:53:d1:e9:3b:45:05:46:25:36:e8:49:a7:
                    d3:ca:84:26:58:08:7a:9e:c9:73:cd:99:29:71:e6:
                    88:97:a9:76:8a:75:af:b7:81:43:37:c8:03:12:e8:
                    b2:6e:0f:7b:48:11:38:c1:d8:ef:86:b9:58:70:60:
                    c7:08:27:33:d3:49:0c:70:31:4a:97:e3:75:4f:5e:
                    19:9a:f8:88:04:42:8a:e0:4d:78:4c:28:98:98:d5:
                    00:b9:bd:e9:9d:6b:ca:2b:98:c0:f8:8c:b5:fe:c4:
                    87:50:34:4e:f9:46:a4:d5:70:ca:50:9e:9d:38:c4:
                    d3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:8C:99:F1:09:F4:BD:A1:A3:95:40:87:03:19:AF:5A:17:98:DF:00
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/93uqARYdh5sFDibDC6WGdGao4uh4mAdjSyCNXSTopZ5V/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/93uqARYdh5sFDibDC6WGdGao4uh4mAdjSyCNXSTopZ5V/1/978C99F109F4BDA1A39540870319AF5A1798DF00.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.164.0/22
                IPv6:
                  2804:3fc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265914

    Signature Algorithm: sha256WithRSAEncryption
         ae:c1:01:cd:a6:8b:21:0b:25:71:07:73:7d:2a:32:66:9f:8b:
         17:f9:84:74:cc:46:41:53:b1:fd:3a:b5:a5:47:bc:96:d7:25:
         cd:54:16:cd:61:9d:b6:61:15:50:02:8d:24:15:92:a2:5a:4d:
         a2:e9:2a:01:ef:b0:86:59:7b:2e:79:1e:06:b8:c8:45:d2:d9:
         0c:2c:b0:b0:46:44:9e:fa:4f:0f:b0:92:c3:2c:d0:b8:c7:5d:
         43:97:2e:4e:91:67:09:83:0b:c3:05:df:b4:2c:7f:ee:2d:07:
         8b:1a:ff:f0:c9:39:cb:2a:cb:ef:8a:f3:30:e1:d4:a8:b4:b9:
         39:5e:9c:3b:5b:ab:4b:5b:9b:f2:d8:41:03:27:e1:10:8b:22:
         a8:68:13:c8:9b:0a:64:07:6a:30:2e:eb:36:af:3e:80:b4:1d:
         86:86:51:a2:a2:55:4e:38:a5:67:6a:4a:d2:38:46:b9:86:6c:
         d4:dd:37:e6:7c:dc:27:19:1b:1d:e9:ba:6e:c1:62:ee:ce:46:
         13:ff:f3:0f:e0:fa:5c:e5:7b:ce:2c:05:ea:52:69:88:cd:25:
         3c:bf:58:66:3a:c9:e8:38:d3:81:1a:7d:c2:7e:e6:03:df:ef:
         0d:a1:8f:be:56:e5:cc:14:c4:86:3f:91:ec:1e:54:e6:8a:ca:
         7f:b2:be:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:25:27 2025 by rpki-client