Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0817DBC592F999355596EFF8ED1D632370D2A2D0.cer
File:                     0817DBC592F999355596EFF8ED1D632370D2A2D0.cer (raw, json)
Hash identifier:          C9iAiWRbIgtiplnld6AfnHGvepWnPzsr9nV58c2G2do=
Subject key identifier:   08:17:DB:C5:92:F9:99:35:55:96:EF:F8:ED:1D:63:23:70:D2:A2:D0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       06882C1A9EA9283458255FDD8C11017A8EADF84A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/0817DBC592F999355596EFF8ED1D632370D2A2D0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Mar 2025 13:58:23 +0000
Certificate not after:    Thu 19 Mar 2026 14:03:23 +0000
Subordinate resources:    AS: 267128
                          IP: 45.229.138.0/23
                          IP: 2804:488c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:88:2c:1a:9e:a9:28:34:58:25:5f:dd:8c:11:01:7a:8e:ad:f8:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 20 13:58:23 2025 GMT
            Not After : Mar 19 14:03:23 2026 GMT
        Subject: CN=0817DBC592F999355596EFF8ED1D632370D2A2D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bd:dc:bd:1f:b4:ef:08:7e:b2:cc:c2:bd:ce:
                    79:0e:59:57:b5:76:96:3b:72:9e:28:80:a4:da:dd:
                    eb:26:a5:48:96:b3:7c:82:b3:7e:99:e6:4d:a9:99:
                    fc:b1:e1:47:24:7e:9b:be:ee:6c:b9:48:80:98:4c:
                    80:96:05:de:f1:29:4b:8a:0b:3a:c5:d3:27:d5:9a:
                    95:b9:93:43:ce:53:c4:fb:02:8c:08:b8:1b:60:95:
                    ab:5e:a5:fe:41:b2:01:76:14:94:9c:04:64:ba:fe:
                    3b:e5:89:da:45:76:33:c2:1e:38:51:09:cb:b4:69:
                    cd:3b:34:db:16:13:84:89:53:2e:81:03:37:68:bc:
                    50:0f:c8:5a:c2:7d:f6:56:0d:b5:b0:59:35:79:46:
                    ae:bc:cd:64:03:c5:fc:a3:fe:b0:a0:ac:93:34:7f:
                    d3:bb:03:9f:e6:da:3a:c4:d3:1e:80:85:93:9e:47:
                    af:af:e5:77:e3:ae:de:ff:1c:93:21:7d:7a:7a:de:
                    1b:c9:82:0b:ce:b4:1c:17:ed:2a:88:1e:d5:c2:25:
                    83:a5:e0:e8:ee:75:ca:68:c1:36:82:d8:7b:b1:63:
                    97:d8:e8:b2:af:39:ce:52:12:b0:52:9a:e4:b1:88:
                    d5:63:e4:c9:1f:df:62:5d:82:5d:71:1e:00:74:f5:
                    66:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:17:DB:C5:92:F9:99:35:55:96:EF:F8:ED:1D:63:23:70:D2:A2:D0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CzFmgYK2ZVtsWh4wNYP5dJKvoXBxzD9NrnNvxH2oTZfk/0/0817DBC592F999355596EFF8ED1D632370D2A2D0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.138.0/23
                IPv6:
                  2804:488c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267128

    Signature Algorithm: sha256WithRSAEncryption
         c2:7a:c7:1a:cd:f2:3e:d5:ca:0d:41:d9:cd:5a:e1:a4:5b:4d:
         04:fb:26:0f:5a:37:24:86:b9:98:18:2a:b1:dc:c0:7b:b1:6a:
         a1:21:37:0f:c6:f6:a8:e5:10:5e:e8:05:35:8a:a0:87:8c:ec:
         1c:df:46:22:61:07:ab:72:79:df:4b:41:aa:9e:08:da:90:9f:
         aa:a9:a7:f1:41:b5:d5:7f:b8:85:7c:c9:be:f5:4b:03:e8:12:
         a5:e0:0e:ad:3d:9f:5c:89:5e:47:68:fe:1a:50:c8:78:8c:2a:
         b7:7f:74:c3:ec:ba:05:6d:44:83:5a:03:45:75:ae:30:bf:e0:
         e1:48:9f:67:aa:5f:9c:8a:26:bd:d1:db:0d:36:dc:4c:44:14:
         52:0f:45:fc:70:12:92:da:81:0b:ea:ab:f6:34:e6:0f:5e:8c:
         14:a1:2a:b2:2c:44:ff:1a:46:bc:61:2e:f6:bb:f7:1b:97:d3:
         94:82:50:a5:a1:29:ca:35:8d:82:ba:3c:16:d7:eb:1a:55:ab:
         b0:5f:c6:08:36:72:d4:09:83:ae:ed:b8:fa:a0:ee:7b:c1:97:
         86:2a:87:b6:5e:05:f3:38:2b:28:39:04:4d:ca:57:93:ad:aa:
         53:16:7b:2d:e3:5b:69:cd:34:87:2b:d4:57:c4:fe:c5:91:7e:
         f5:c4:f5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:51:45 2025 by rpki-client