Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer
File:                     00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer (raw, json)
Hash identifier:          UPKysYq/y111pQDGZcum6ZokKYm7EvZXQmtS4uHB8HU=
Subject key identifier:   00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5A1382A2B6C94F76F6DECD2B90A9136FDF80D536
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 23:32:59 +0000
Certificate not after:    Thu 05 Mar 2026 23:37:59 +0000
Subordinate resources:    AS: 269137
                          IP: 45.180.144.0/22
                          IP: 2804:5ff8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:13:82:a2:b6:c9:4f:76:f6:de:cd:2b:90:a9:13:6f:df:80:d5:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 23:32:59 2025 GMT
            Not After : Mar  5 23:37:59 2026 GMT
        Subject: CN=00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e1:35:93:64:fb:f8:6c:27:e5:0e:e8:13:28:
                    27:e8:75:3e:ba:ad:da:78:4e:a7:71:50:f9:3b:37:
                    e8:b3:fd:1b:77:50:96:99:c5:86:09:dd:f0:42:dc:
                    c8:fe:98:d8:84:9b:3b:05:c5:2a:5b:0b:7d:22:05:
                    25:2f:55:fa:33:83:b8:d9:7c:62:d5:b3:be:b1:83:
                    6b:59:ae:3f:7e:c8:c9:72:42:4d:d7:0a:e1:df:36:
                    d1:b6:74:2d:b9:02:0e:68:19:0f:d7:38:78:b3:e8:
                    1f:33:c2:24:8a:4b:c4:0d:23:56:74:2c:de:85:37:
                    4e:cb:f5:df:1c:2a:3f:36:ae:cb:d6:c8:b0:a3:b6:
                    79:bb:d1:41:4a:49:0c:30:7b:02:2d:f5:7c:4b:d7:
                    f8:11:34:44:8f:6e:35:b6:38:de:aa:47:a2:73:41:
                    2e:f3:7e:d3:89:e3:78:d9:a7:e2:ae:13:25:5e:43:
                    73:56:15:99:c1:67:22:72:df:5f:16:db:29:ff:b8:
                    51:fb:b7:4a:70:f8:d1:09:6e:7f:52:2f:07:39:ef:
                    82:59:64:14:4f:ab:65:52:7c:d7:57:94:95:6d:05:
                    ac:e5:07:d7:07:d4:71:ca:bb:8d:b4:63:2e:9b:14:
                    09:14:8c:14:29:85:18:6e:cb:2f:ec:ab:1d:f4:d3:
                    73:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.144.0/22
                IPv6:
                  2804:5ff8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269137

    Signature Algorithm: sha256WithRSAEncryption
         4e:ae:a9:24:90:86:53:c4:b7:40:23:fa:ba:47:58:88:2a:47:
         cd:69:94:be:ac:12:81:cc:98:ee:8d:23:22:63:d6:72:7f:90:
         c4:54:30:aa:93:42:5a:03:53:f2:10:59:d4:48:aa:52:c7:69:
         e6:e5:78:6a:0b:e5:65:ed:5e:24:4f:d6:7b:7c:ba:5a:ab:f0:
         93:b1:9d:0d:e3:84:2c:11:82:3f:b5:f0:8d:05:34:1e:a6:3f:
         ed:50:d0:bb:8a:a0:32:70:6e:8d:4e:70:3d:5b:d0:87:d1:1d:
         3b:85:3d:58:2f:c6:8d:9f:60:3d:2f:c6:75:0e:06:c3:0a:48:
         8c:b7:57:52:7f:71:a3:d9:19:4a:ec:bd:c2:57:27:57:44:5b:
         47:7c:2e:b2:c9:d4:f5:3b:6a:87:00:22:95:65:8a:a1:0f:c5:
         e3:46:36:e8:99:9e:89:30:79:19:91:ec:6e:aa:62:ff:20:7e:
         8a:0f:1a:f0:53:ee:61:9f:66:15:27:64:68:e3:79:35:a5:36:
         04:ba:88:02:a9:ba:c3:78:d4:07:e9:28:5e:14:a8:88:ee:6a:
         f7:e7:17:c9:62:f4:3c:75:0c:a3:32:98:97:66:89:98:5d:d5:
         bb:22:f6:33:d0:10:a7:04:f5:bf:ab:af:3d:58:84:4c:ea:1c:
         98:59:96:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:17 2025 by rpki-client