Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/01848C66A25335A0075484FBC32617363F3B8550.cer
File:                     01848C66A25335A0075484FBC32617363F3B8550.cer (raw, json)
Hash identifier:          kvvo+GaVRnJrISkKfDJPPveYhctkf78ZgMJpOf2JxFY=
Subject key identifier:   01:84:8C:66:A2:53:35:A0:07:54:84:FB:C3:26:17:36:3F:3B:85:50
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6FD70EAA8C6D4C500918C366CE1C888D067B0B26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/01848C66A25335A0075484FBC32617363F3B8550.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Mar 2025 08:11:33 +0000
Certificate not after:    Tue 24 Mar 2026 08:16:33 +0000
Subordinate resources:    AS: 264461
                          IP: 132.255.28.0/22
                          IP: 201.182.32.0/22
                          IP: 2804:2008::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d7:0e:aa:8c:6d:4c:50:09:18:c3:66:ce:1c:88:8d:06:7b:0b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 25 08:11:33 2025 GMT
            Not After : Mar 24 08:16:33 2026 GMT
        Subject: CN=01848C66A25335A0075484FBC32617363F3B8550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0d:eb:0d:73:fb:7e:70:17:15:31:43:c4:12:
                    35:6f:2a:f7:24:f5:94:9e:5f:e0:9d:e5:3e:82:f1:
                    d6:8a:85:4f:85:87:d1:71:55:31:66:42:77:7c:9c:
                    c7:87:63:1c:3b:84:bf:5b:22:a1:17:e5:25:2c:c6:
                    53:2e:72:68:9e:04:69:f7:e4:49:1e:c6:e5:ca:40:
                    78:73:c5:91:da:94:de:45:e6:6d:68:a9:18:2b:1c:
                    69:08:14:b8:a3:7a:5e:39:59:9b:8c:2e:ca:7d:92:
                    2b:21:42:5b:b0:4c:94:21:8f:39:2d:1c:2c:63:1f:
                    0f:8b:8e:78:1a:73:9b:ac:c4:18:ad:9f:4d:af:b2:
                    78:9c:24:ff:28:a5:7c:7a:10:8a:ee:88:2a:73:37:
                    85:c0:97:87:53:be:bb:7f:cd:0e:95:b0:70:cc:29:
                    31:3d:63:76:d7:7f:72:b4:cd:44:74:99:d7:b7:5c:
                    48:78:22:16:08:77:60:d3:b7:38:31:e0:f0:ec:10:
                    cc:47:24:bf:3a:24:50:a6:f3:09:b5:61:3d:08:81:
                    ae:bc:5a:0f:fb:97:88:c4:7e:98:ac:7a:0a:01:aa:
                    12:ce:3a:34:0d:f4:db:8f:2b:fd:d4:27:fe:e6:ec:
                    be:c4:be:b3:cd:78:c5:06:13:a2:9a:c9:2f:1c:5f:
                    1b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:84:8C:66:A2:53:35:A0:07:54:84:FB:C3:26:17:36:3F:3B:85:50
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BoeCeVBc47aUf8weQACUk2ZoNnaXPcqXJkSiTj6Bfxwk/0/01848C66A25335A0075484FBC32617363F3B8550.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.28.0/22
                  201.182.32.0/22
                IPv6:
                  2804:2008::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264461

    Signature Algorithm: sha256WithRSAEncryption
         2f:ef:21:5d:cb:84:04:68:83:14:da:f4:ab:01:6a:a5:8e:31:
         40:b7:a6:78:12:4d:53:9e:e3:cb:ea:cd:5f:e1:1c:cf:0d:8b:
         3a:2c:ca:ac:55:52:e1:b5:a1:7d:7c:3c:5e:29:eb:87:5f:ad:
         08:3b:6b:33:00:8b:39:36:45:5b:5a:4c:a0:fc:fb:b4:b7:f8:
         ca:9d:e6:5b:4f:77:69:0b:0c:fb:23:35:e9:01:34:0e:eb:e3:
         13:66:e4:4a:5f:e8:ae:1a:b3:98:c0:30:99:9e:d3:d1:48:f3:
         fa:33:5d:ea:3f:bf:77:c5:8c:f8:40:f9:3c:0e:a6:6c:ef:ba:
         d5:68:5d:6b:51:ff:f6:57:b0:f4:cf:75:25:31:1f:6e:63:fa:
         3b:f9:32:2d:d1:0d:da:3b:e8:20:da:db:de:fd:9f:99:6e:6c:
         da:ac:03:05:0e:00:48:f4:bc:57:0e:99:f4:2f:96:de:97:1d:
         25:14:3d:24:6f:b1:d6:8a:81:67:a6:a0:f4:6b:c2:cf:47:e1:
         0b:d9:db:50:8b:41:c2:9d:ae:e3:35:d8:78:83:98:33:38:13:
         54:32:30:3c:9e:8d:6d:46:2f:79:09:76:e3:57:20:f3:c7:26:
         67:b3:7e:d0:a4:2d:31:8c:f8:7e:f3:fd:47:52:00:3e:64:49:
         78:68:95:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:15:49 2025 by rpki-client