Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.cer
File:                     032EBC04B31CCA7416FFF2267C50AACE979BC999.cer (raw, json)
Hash identifier:          JJ+2gAZrOF7dnPpGfBLla4yHiODRQpA8ZBVpgy6UyL8=
Subject key identifier:   03:2E:BC:04:B3:1C:CA:74:16:FF:F2:26:7C:50:AA:CE:97:9B:C9:99
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4E9DE882988BE8590CCF3F237C3073AEE367642E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 07:21:56 +0000
Certificate not after:    Thu 05 Mar 2026 07:26:56 +0000
Subordinate resources:    AS: 266154
                          IP: 192.140.8.0/22
                          IP: 2804:3b84::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:9d:e8:82:98:8b:e8:59:0c:cf:3f:23:7c:30:73:ae:e3:67:64:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 07:21:56 2025 GMT
            Not After : Mar  5 07:26:56 2026 GMT
        Subject: CN=032EBC04B31CCA7416FFF2267C50AACE979BC999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fe:a7:c9:8e:89:80:30:36:d1:b1:e1:7a:7f:
                    50:1e:19:e7:55:d4:26:8f:d2:9f:dd:25:4e:20:91:
                    fd:ee:6c:56:6f:8d:9f:0c:56:4f:18:d4:81:74:12:
                    ad:b8:9a:12:72:ff:65:8a:af:71:7c:1a:ba:41:3f:
                    a3:24:05:da:ac:8d:93:00:ba:fa:b8:3e:44:0d:d3:
                    c8:e4:11:0c:45:eb:19:a3:40:48:80:f5:16:a4:63:
                    6c:15:37:67:83:28:c7:cb:58:e3:14:6a:5f:3e:67:
                    5c:37:96:ed:05:cf:c1:b8:21:0b:12:2d:c7:bd:be:
                    15:0c:1c:e9:a2:6e:94:b0:35:c2:97:8c:a4:b5:0b:
                    e4:56:b7:41:01:e6:cc:74:e0:15:51:ab:41:e8:85:
                    cd:ec:31:05:2c:c9:74:fa:62:0a:ad:f3:d1:98:09:
                    ee:d4:88:c7:b0:35:c7:81:2f:5a:da:ac:83:60:fd:
                    f2:bd:4c:6d:cc:11:6a:b1:34:bd:b1:ec:2b:47:29:
                    02:3a:ab:74:1b:a8:5d:d4:8c:ab:98:6f:24:4e:3b:
                    fd:d4:8a:e5:74:88:ef:bb:f0:73:40:d1:c7:0f:b8:
                    cb:90:36:49:c9:96:84:df:7c:77:40:d9:f5:2d:c7:
                    42:81:cc:80:44:14:b0:0c:68:36:79:e9:ff:76:a5:
                    b7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:2E:BC:04:B3:1C:CA:74:16:FF:F2:26:7C:50:AA:CE:97:9B:C9:99
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.8.0/22
                IPv6:
                  2804:3b84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266154

    Signature Algorithm: sha256WithRSAEncryption
         d3:56:d3:de:7a:1d:92:05:20:5d:1f:c2:0f:a6:a2:ef:41:13:
         43:7f:7e:c4:4a:c0:a9:10:9b:3c:95:13:ce:d4:89:cb:7d:e9:
         ba:24:75:45:5e:6b:e9:d3:17:c2:64:31:9d:a4:c5:0a:0f:9c:
         21:f8:ba:9b:85:78:cc:75:9a:96:f7:0d:b9:3b:7d:40:59:bd:
         ad:1f:33:10:00:b2:78:db:e8:81:f5:f9:01:7c:51:16:3e:23:
         27:b0:55:e8:b0:58:6f:c5:2f:23:d1:45:b0:d2:f9:85:86:05:
         a9:86:47:e0:b6:66:c7:71:59:3f:b6:d8:62:12:58:f9:87:00:
         c6:80:d0:20:42:6c:ea:c4:12:cc:f3:46:09:33:0c:80:37:a8:
         27:f6:6d:85:6a:0a:c8:d5:f9:2f:24:1a:20:f9:c0:1d:9a:fa:
         1e:89:16:41:91:f7:09:8a:32:ca:43:48:21:b9:0f:ee:d4:97:
         bc:7f:89:70:4b:75:e6:b5:c5:dd:2b:ef:00:41:32:25:f5:92:
         41:ef:42:5e:f7:e7:98:1b:40:66:3c:3a:a5:5f:76:8c:b0:2f:
         20:ac:f1:b6:6c:f7:e7:9e:f7:1a:cb:1d:da:f7:0f:25:ca:eb:
         69:54:ee:a9:82:71:ac:00:8e:4b:2f:75:11:03:f0:21:79:d8:
         7b:a6:6e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:40:45 2025 by rpki-client