Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0425149335FB7E13D46DACA1FDC0972764238964.cer
File:                     0425149335FB7E13D46DACA1FDC0972764238964.cer (raw, json)
Hash identifier:          y2Xba9NVbn83k+WorIn5CaLV99CF7gIRlvHiIWF5fro=
Subject key identifier:   04:25:14:93:35:FB:7E:13:D4:6D:AC:A1:FD:C0:97:27:64:23:89:64
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0C14FC9C92191A451BD8C152D2D24452AC4EC748
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BA9GMWzTEnBCzZWYS9rEzD4MhB8bx79nCB6JQ29wSRU7/0/0425149335FB7E13D46DACA1FDC0972764238964.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BA9GMWzTEnBCzZWYS9rEzD4MhB8bx79nCB6JQ29wSRU7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 18 Dec 2024 17:36:49 +0000
Certificate not after:    Wed 17 Dec 2025 17:41:49 +0000
Subordinate resources:    AS: 272207
                          IP: 2804:8398::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:14:fc:9c:92:19:1a:45:1b:d8:c1:52:d2:d2:44:52:ac:4e:c7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 18 17:36:49 2024 GMT
            Not After : Dec 17 17:41:49 2025 GMT
        Subject: CN=0425149335FB7E13D46DACA1FDC0972764238964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:0f:40:c0:fb:84:75:01:f1:6e:ec:be:86:
                    11:79:d1:b2:00:f8:98:35:9e:dc:46:4c:23:14:b5:
                    9c:64:ca:8f:a9:18:97:70:2d:44:ec:86:35:bf:40:
                    25:a0:90:91:74:69:80:53:dc:70:a4:ed:3d:d8:0b:
                    e0:7d:fc:7d:2b:c5:ec:86:87:2f:4f:2d:78:a5:55:
                    43:dd:7d:05:91:1b:b6:8c:5f:45:e7:32:f6:3a:77:
                    65:82:25:c6:de:c8:e3:08:1d:e2:74:d3:f1:d6:97:
                    17:a8:f7:ef:4e:fe:ac:3e:85:6d:49:4d:c3:9e:19:
                    a8:d7:25:e9:dc:a2:00:b6:30:a9:c1:bc:a3:08:37:
                    c3:0b:5a:6c:ce:a0:3c:33:0c:07:fd:d4:1a:b8:60:
                    94:20:48:7a:28:7b:c7:73:f6:0d:e6:02:2c:65:dd:
                    62:d6:f3:eb:b9:5e:93:e3:25:47:3e:8c:2d:64:44:
                    19:2f:71:97:83:8a:c9:20:4a:86:6a:1a:fa:8b:0f:
                    f2:f7:ca:1d:cc:31:25:b1:ca:ef:46:1a:e6:8e:12:
                    26:97:e5:b1:0f:84:72:53:f0:2b:98:97:37:10:be:
                    81:84:26:09:d9:4e:c5:aa:5d:60:7d:5c:7a:dc:cd:
                    8b:4d:02:c6:61:c6:3a:c2:1f:60:2f:ba:75:8d:5a:
                    d8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:25:14:93:35:FB:7E:13:D4:6D:AC:A1:FD:C0:97:27:64:23:89:64
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BA9GMWzTEnBCzZWYS9rEzD4MhB8bx79nCB6JQ29wSRU7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BA9GMWzTEnBCzZWYS9rEzD4MhB8bx79nCB6JQ29wSRU7/0/0425149335FB7E13D46DACA1FDC0972764238964.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8398::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272207

    Signature Algorithm: sha256WithRSAEncryption
         18:82:9c:57:fb:a0:6d:00:27:3d:f1:ea:9b:fc:d7:df:e8:21:
         a7:dc:50:ad:bf:bf:0c:4c:38:20:53:d4:c6:8b:31:35:77:4b:
         9c:7a:19:d4:f2:b3:ee:30:78:6f:51:ef:8a:9d:d2:ee:43:4c:
         fa:a0:09:08:40:9b:14:7e:b1:3a:ff:65:c7:44:08:30:b1:c8:
         82:99:fd:81:44:3f:72:71:dc:f9:4f:53:65:68:d8:83:1f:bb:
         ef:68:b6:9b:ca:f7:71:56:54:36:37:20:73:4b:72:76:13:1b:
         ce:a2:8f:b2:c5:6b:14:46:d3:de:17:0f:77:47:87:9f:0d:80:
         a0:45:a2:1e:fe:8e:57:db:c9:eb:be:79:b4:ef:53:c7:9d:74:
         01:5e:46:1c:64:e2:cd:99:90:3b:bd:dc:76:e0:3d:73:e0:4c:
         6d:d5:71:31:1e:41:d7:6c:a6:6d:34:33:7b:66:16:01:02:55:
         e5:f8:2b:96:77:d9:7e:71:62:c9:7d:c7:99:64:15:e0:51:05:
         cb:31:ac:bc:7f:fc:d1:62:56:8f:e3:ec:31:80:fd:ae:0f:73:
         5b:4b:9d:ea:31:fe:49:5f:ca:8c:d0:fa:f6:44:98:ee:59:2d:
         5a:86:1c:cf:fc:8e:55:ec:52:61:57:d4:f8:b2:ce:b8:0c:1e:
         b0:29:dd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:04:09 2025 by rpki-client