Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.cer
File:                     0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.cer (raw, json)
Hash identifier:          uBT6vToXNJBw+tylB/AvCLyCDgLP3RL1VOUPxSSJwKY=
Subject key identifier:   0B:14:1C:05:E0:CD:60:AB:E1:A3:CD:F3:C3:C6:4C:FB:94:D0:67:51
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       032C49756BF77EB3B973095BD349698E0CA5D15D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 19:21:02 +0000
Certificate not after:    Fri 06 Mar 2026 19:26:02 +0000
Subordinate resources:    AS: 270785
                          IP: 189.51.160.0/22
                          IP: 2804:7160::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:2c:49:75:6b:f7:7e:b3:b9:73:09:5b:d3:49:69:8e:0c:a5:d1:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 19:21:02 2025 GMT
            Not After : Mar  6 19:26:02 2026 GMT
        Subject: CN=0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:19:68:3a:6b:fa:08:43:cf:35:af:17:24:8c:
                    73:6b:f9:42:74:77:f6:e2:8b:80:68:fd:a7:90:40:
                    a4:45:83:44:55:bd:90:e2:b0:99:75:eb:0b:58:3f:
                    4e:e0:e6:ac:fb:ff:a2:1f:02:58:f1:71:70:a4:fc:
                    3c:73:29:81:39:6e:1f:c4:48:a0:93:ca:cc:42:c8:
                    f0:cd:2c:a5:00:8a:d9:5f:2f:b0:e7:92:dc:b9:7f:
                    48:b5:b8:51:be:d5:46:32:e7:1a:e7:04:f9:cb:a3:
                    b6:8f:69:df:29:a3:ad:39:a9:4a:de:3a:2a:7d:04:
                    c2:00:15:cd:4b:0a:38:b0:29:dd:9b:d0:26:33:ec:
                    5a:9f:88:ac:06:2f:3b:1d:5c:5e:6f:33:39:a2:99:
                    b2:79:80:68:4b:96:5f:c0:f7:f7:ec:07:9c:e6:36:
                    a8:7d:93:a8:5a:6a:ad:57:30:27:82:87:8c:51:4a:
                    9d:f8:de:3a:25:3f:5a:dc:c3:ab:09:e3:60:48:87:
                    08:95:dd:a4:48:b0:63:2a:e4:ef:7d:a5:99:ab:34:
                    01:b5:a7:31:cc:84:d9:fe:9f:94:10:e3:5e:d4:15:
                    28:87:38:8d:85:ef:ea:6e:2e:2c:31:21:71:43:ef:
                    a3:38:49:8b:4b:a4:55:5c:82:1d:d3:7e:e7:9d:65:
                    02:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:14:1C:05:E0:CD:60:AB:E1:A3:CD:F3:C3:C6:4C:FB:94:D0:67:51
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6UZysAyTjx2NJrkHbunyrSpdEkCM69Efmns52PN6QHvC/1/0B141C05E0CD60ABE1A3CDF3C3C64CFB94D06751.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.160.0/22
                IPv6:
                  2804:7160::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270785

    Signature Algorithm: sha256WithRSAEncryption
         2d:08:c7:5c:2d:72:8f:32:07:64:0d:3b:b5:44:01:e0:49:13:
         e8:08:bc:15:69:ed:58:77:d9:f9:26:88:ea:55:3f:2b:37:99:
         bf:77:8b:cb:f9:cc:30:01:91:28:f3:60:88:78:a7:63:24:9c:
         fe:33:d6:cf:6e:f0:f1:07:d6:32:1e:10:6b:97:e2:f8:07:6e:
         4e:82:02:fe:2f:7c:4b:3f:2b:37:a4:c2:52:6b:56:ae:f8:33:
         e0:92:49:79:b2:ce:cd:b9:68:95:c3:ad:83:ab:38:ee:a7:bf:
         d0:12:bd:8c:3f:32:10:5c:20:db:67:ba:9c:1e:06:9c:78:29:
         9d:d7:dd:32:6f:01:91:c1:6f:ad:ba:03:50:bd:3d:37:ba:a5:
         f9:98:da:a4:34:d8:60:ca:73:c7:ee:37:49:b7:64:aa:c9:de:
         84:3b:fb:4f:d2:1a:25:ed:ee:e2:00:2f:b9:75:c3:cc:24:3e:
         00:4e:b8:45:44:37:28:e8:1a:11:c9:31:22:db:0e:bb:bf:97:
         e5:91:91:41:e4:b9:74:65:01:41:bf:76:1a:de:f1:83:69:61:
         71:b3:02:60:69:60:70:8f:c5:0a:8b:50:8f:79:53:7c:51:d3:
         74:a8:ec:f6:91:6c:15:c6:4b:ba:43:cb:00:c6:42:58:35:9e:
         2a:1b:17:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:29:27 2025 by rpki-client