Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/08E27FA181C10E30D23F9259B9BC195FB3FBABD2.cer
File:                     08E27FA181C10E30D23F9259B9BC195FB3FBABD2.cer (raw, json)
Hash identifier:          fZeEIvafMWNtSJgSPCn42YEcztWkS+VmRMg9cn0uJL8=
Subject key identifier:   08:E2:7F:A1:81:C1:0E:30:D2:3F:92:59:B9:BC:19:5F:B3:FB:AB:D2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       54CA628C752529C0B3645F1B92925212697A33D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/1/08E27FA181C10E30D23F9259B9BC195FB3FBABD2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 01 Oct 2024 20:33:54 +0000
Certificate not after:    Tue 30 Sep 2025 20:38:54 +0000
Subordinate resources:    AS: 265246
                          IP: 167.250.128.0/22
                          IP: 2804:2cd4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ca:62:8c:75:25:29:c0:b3:64:5f:1b:92:92:52:12:69:7a:33:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct  1 20:33:54 2024 GMT
            Not After : Sep 30 20:38:54 2025 GMT
        Subject: CN=08E27FA181C10E30D23F9259B9BC195FB3FBABD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e8:c6:9f:23:40:dc:be:50:40:09:df:10:a9:
                    c6:61:06:60:a6:4b:01:7b:bc:9d:62:ad:8f:cd:b0:
                    72:96:05:bb:a4:1a:35:a3:91:11:08:2d:17:4b:a2:
                    fa:36:51:96:c3:00:94:03:06:e3:18:a5:67:f4:68:
                    d3:9e:43:44:51:6e:cd:c7:af:32:30:63:e7:1d:2a:
                    3d:36:4e:ee:3f:e1:fa:4c:b6:4a:e0:bd:88:82:19:
                    06:b0:3a:e2:ac:0d:32:0b:b5:ee:93:99:60:0a:ef:
                    f9:97:47:4a:53:cd:2b:2d:62:3c:16:14:c2:6a:db:
                    4e:85:81:48:07:39:6a:08:94:47:12:91:3f:95:b9:
                    1c:6a:3b:a0:b9:33:8b:ff:f1:16:dd:e0:a9:e3:12:
                    dc:23:43:2e:c0:63:3b:b3:04:e7:19:c5:1d:c5:67:
                    71:37:2d:58:16:c4:42:ac:80:2e:0e:09:9d:1b:bc:
                    32:0e:b9:eb:10:0e:27:f3:e5:13:2d:c9:e7:3c:00:
                    d4:70:2d:e1:09:61:42:bb:9d:b7:31:90:e9:63:10:
                    23:c3:75:ab:9b:cd:08:17:43:c1:06:f9:cc:5d:36:
                    78:c7:ff:17:6a:29:13:0f:02:9a:4a:de:70:24:dc:
                    3b:a0:e7:8f:9e:9b:01:cb:ae:e4:3a:1c:aa:08:ff:
                    2e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:E2:7F:A1:81:C1:0E:30:D2:3F:92:59:B9:BC:19:5F:B3:FB:AB:D2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GXqUS2Enz3FCh9T3fJTL6VdovUqXdWzPq2wHL3YdriPT/1/08E27FA181C10E30D23F9259B9BC195FB3FBABD2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.128.0/22
                IPv6:
                  2804:2cd4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265246

    Signature Algorithm: sha256WithRSAEncryption
         a7:86:19:65:d3:1c:0a:88:af:1d:94:d3:fa:99:60:9d:b1:4c:
         37:a9:93:c8:ff:6b:2e:9f:42:31:eb:04:2a:d2:c1:30:26:6a:
         0b:3f:a2:c3:67:1f:41:8b:cb:3c:6c:55:8a:c2:38:7f:17:7a:
         0f:df:d5:0e:c2:52:a1:d8:96:c2:a3:08:5d:2b:7b:9b:dd:dc:
         f7:e4:b2:c5:ab:9b:de:60:9d:85:02:64:07:23:0c:0e:de:c5:
         6a:ba:01:8c:be:01:70:33:39:1c:f7:1a:e8:7b:d9:8c:81:8d:
         00:2a:4d:b2:7b:bf:64:df:49:c0:db:5f:ad:df:ad:4f:29:b7:
         6e:6d:35:89:60:38:99:82:2a:c7:81:55:26:9e:6c:bf:0a:56:
         4d:81:c4:fd:e2:e7:79:0f:bd:3a:0f:16:b9:6f:ad:03:43:02:
         91:04:a1:df:59:c4:54:ab:c8:69:32:e0:72:ee:d2:09:b6:96:
         f5:fa:14:7d:9c:65:c7:f4:64:63:2b:2e:9f:af:45:3d:f5:1b:
         32:d3:3f:b9:88:79:e7:ad:1a:7b:f1:cb:91:80:7b:18:70:1c:
         9f:3e:4f:f9:e9:5e:78:18:f9:30:a7:3d:52:3c:a5:8f:99:5d:
         a1:31:d3:a9:af:fc:96:d9:b4:34:88:6e:70:48:84:e1:5b:a8:
         df:d2:c8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:39 2025 by rpki-client