Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer
File:                     049A7D9E6745910CF5F3435E31224EA7BBDE9280.cer (raw, json)
Hash identifier:          sTZr+cEGLhbs4rIhBcm/Hjqb2e/ULfJUycf50zaZmMk=
Subject key identifier:   04:9A:7D:9E:67:45:91:0C:F5:F3:43:5E:31:22:4E:A7:BB:DE:92:80
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6A2A3378EA512826E9FCEC897F107492654B8694
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 17:04:07 +0000
Certificate not after:    Thu 05 Mar 2026 17:09:07 +0000
Subordinate resources:    AS: 266226
                          IP: 216.98.216.0/22
                          IP: 2804:3ca4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:2a:33:78:ea:51:28:26:e9:fc:ec:89:7f:10:74:92:65:4b:86:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 17:04:07 2025 GMT
            Not After : Mar  5 17:09:07 2026 GMT
        Subject: CN=049A7D9E6745910CF5F3435E31224EA7BBDE9280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:10:ce:e3:3a:46:0f:77:47:04:1a:9b:c2:82:
                    35:85:76:f4:40:26:d0:e1:19:f0:a7:f7:40:78:0b:
                    04:17:8e:ea:ea:05:bd:c8:3a:52:31:07:87:a8:94:
                    c0:1f:35:60:db:bc:80:2e:9f:5a:a3:01:b8:e5:ef:
                    79:0e:e6:c6:6d:cf:a1:79:fb:fa:55:e0:31:c2:9e:
                    96:1a:22:0e:8d:73:ef:e1:7f:a6:8c:ca:5a:88:21:
                    e3:b7:bb:cc:c3:10:e5:ec:0e:81:8f:96:4e:c4:5f:
                    04:22:a8:5f:17:95:12:05:c2:dd:43:cb:d6:ab:00:
                    a9:40:cf:8a:c4:b5:e5:33:f1:8e:60:77:e5:f5:32:
                    75:55:7b:71:46:3d:bf:ed:c5:24:0c:23:c3:a6:a1:
                    8d:6f:01:69:80:ab:0f:fc:16:3e:06:70:3d:1b:55:
                    fe:c0:e0:cb:72:ed:46:76:3c:08:42:ab:64:b7:96:
                    fd:9f:c7:78:4a:5c:3c:c9:b3:41:b2:4a:8e:40:23:
                    e5:8e:4b:28:49:08:4a:42:3d:bb:48:53:44:48:f6:
                    96:30:fe:e5:eb:c1:63:48:36:93:5f:7f:94:12:21:
                    84:7c:41:78:ab:88:a2:dd:f1:9f:7c:53:dd:16:32:
                    96:14:ba:79:7e:fa:c4:17:32:16:70:da:eb:c9:13:
                    30:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:9A:7D:9E:67:45:91:0C:F5:F3:43:5E:31:22:4E:A7:BB:DE:92:80
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Bk8XiuAizGByjgB28VnEqNBniSsyn7cMcT15yCJ1ryh/1/049A7D9E6745910CF5F3435E31224EA7BBDE9280.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.98.216.0/22
                IPv6:
                  2804:3ca4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266226

    Signature Algorithm: sha256WithRSAEncryption
         23:1e:44:5e:e5:f2:5f:71:fc:a1:ac:11:c5:c3:0f:c4:89:59:
         9a:96:64:13:96:53:7a:cf:ba:d8:f4:ad:c0:a2:10:da:56:88:
         63:44:f6:ca:5f:8e:4c:37:45:47:37:f0:e6:fa:2b:a3:90:90:
         41:4d:2f:0e:94:56:47:29:6e:0e:9d:c7:78:43:a6:56:85:21:
         15:7d:bd:f0:8b:9f:62:e3:eb:52:c4:17:c2:ba:a3:ee:e9:ce:
         5c:10:53:6b:f2:ab:ec:73:81:ad:1c:c4:9e:bc:fc:e5:fb:03:
         9e:d1:07:ec:fd:be:ac:a9:34:0c:e3:72:4e:12:9e:7e:f6:92:
         84:e5:84:1c:09:a1:cd:de:5c:c5:0a:cc:23:85:43:06:62:8b:
         c4:d9:45:94:fa:a1:75:6d:5d:a0:67:30:8b:46:b0:1f:07:45:
         d4:97:2e:11:f4:6b:61:8c:83:6a:02:ae:fa:48:9c:13:e0:40:
         61:66:b1:53:07:e1:6f:1e:51:6e:d7:05:8a:38:14:8f:17:97:
         27:0b:9f:6c:aa:52:24:6d:8a:72:f3:5b:53:94:f4:dc:61:b2:
         59:8c:42:a8:c5:b8:e2:e7:04:81:71:1a:22:31:ff:1a:ee:ab:
         85:d4:09:50:92:ef:ed:a7:91:c0:ce:73:1c:07:e1:bd:7e:d9:
         a4:f2:66:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:26:25 2025 by rpki-client