Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer
File:                     EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.cer (raw, json)
Hash identifier:          7zO8JiWF5PD3ldwzqbrT1/41ApIas2EzZjvppwRhWWE=
Subject key identifier:   EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       76AC821026F423732A1132A1C845BE40BCB1E36F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 02:29:37 +0000
Certificate not after:    Thu 03 Apr 2025 02:34:37 +0000
Subordinate resources:    AS: 266635
                          IP: 128.201.156.0/22
                          IP: 2804:3f08::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ac:82:10:26:f4:23:73:2a:11:32:a1:c8:45:be:40:bc:b1:e3:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 02:29:37 2024 GMT
            Not After : Apr  3 02:34:37 2025 GMT
        Subject: CN=EA18A86A9BF3C8CF2C923D41C4489A004392ABFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:84:53:cc:93:6b:2a:6f:43:03:82:d4:8d:90:
                    aa:07:bf:94:f5:15:12:3f:68:fe:80:00:10:2d:7a:
                    7b:11:1d:55:ab:32:4a:05:61:d0:6f:5f:59:b3:67:
                    97:01:35:8a:d1:e7:e8:ed:13:7a:4f:3c:6b:27:b2:
                    a4:e9:62:fe:c9:a3:62:79:fe:4a:81:06:5d:f7:7b:
                    e6:31:d5:52:e1:70:11:a7:5a:7a:cf:59:57:25:ff:
                    d8:b7:8e:e7:da:e9:c5:ab:bf:68:f1:65:80:5b:e0:
                    cb:ca:50:c9:18:33:15:76:aa:f2:64:cd:f2:cd:bd:
                    46:a7:f1:84:1f:1c:b2:11:48:c1:15:6f:b6:6b:79:
                    0b:00:07:01:18:31:76:77:43:8b:01:4c:b9:5f:d5:
                    49:de:69:f3:61:f5:53:81:c7:21:84:ef:87:11:96:
                    b5:0e:75:ad:27:c4:81:55:2c:cc:54:35:e8:1d:3b:
                    51:2b:36:d0:d2:10:92:78:02:89:af:72:e9:db:ef:
                    0c:4b:74:e6:59:e4:b5:4b:f3:af:56:85:0b:ab:2c:
                    fc:f2:95:bb:25:37:c8:09:17:b2:c2:68:bc:ee:c5:
                    dc:7f:a5:8b:ec:48:8d:96:4c:aa:bf:22:ed:24:e6:
                    25:3a:f4:99:0e:6d:14:f8:d9:d5:e6:52:ea:fb:8d:
                    d1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:18:A8:6A:9B:F3:C8:CF:2C:92:3D:41:C4:48:9A:00:43:92:AB:FB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7bjjstDsds7QtCcrdgezTDBtf1ZcUUaDKN5b8MT1Q6TA/1/EA18A86A9BF3C8CF2C923D41C4489A004392ABFB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.156.0/22
                IPv6:
                  2804:3f08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266635

    Signature Algorithm: sha256WithRSAEncryption
         28:63:e5:16:11:9a:69:17:cc:06:65:b9:8b:89:0d:08:82:f3:
         e4:10:e1:15:91:71:ed:4d:fc:5e:40:e3:a3:14:cb:7b:ea:8b:
         60:38:61:b6:f9:66:c2:89:0f:8f:65:d0:99:34:df:7b:43:75:
         af:77:3c:00:89:cb:71:f0:0c:1f:d6:72:01:c8:44:c2:2b:45:
         96:72:9d:11:8d:4c:5b:2d:b6:1b:88:74:ad:50:9f:8b:7c:28:
         7b:7e:ae:b3:c6:36:ef:02:55:82:bd:f5:01:9d:7c:70:4d:09:
         31:2a:71:ec:ab:e4:f8:62:87:34:03:91:75:b7:f8:5e:ff:47:
         d6:58:d6:21:e5:ae:7b:9e:3b:8d:63:76:50:63:33:37:bb:cc:
         fb:1c:ee:a1:ad:ce:e1:05:5d:b0:04:38:cd:56:3b:2a:dc:54:
         47:f1:84:95:01:71:cc:a3:e2:b5:22:e2:b4:36:fe:42:a9:67:
         d7:b5:64:4c:34:69:c9:ff:af:54:b5:2d:51:c8:63:b2:a5:6f:
         d3:b5:ec:43:8b:9b:5e:36:e3:9a:9e:a3:c1:57:ea:90:43:84:
         b1:85:b3:43:79:74:d6:ae:c1:71:12:20:32:e4:76:3a:a9:50:
         84:a7:6a:73:16:c9:28:29:be:c7:d0:1e:c4:da:20:d1:f3:3e:
         1b:5c:7b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:23:09 2025 by rpki-client