Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.cer
File:                     0CEEA1DDF076523B39CF76E704244FA173114D8F.cer (raw, json)
Hash identifier:          qOCG/+s75SmMPpnIQjll7ew+1YTGpJq3NCa9s8W4SN4=
Subject key identifier:   0C:EE:A1:DD:F0:76:52:3B:39:CF:76:E7:04:24:4F:A1:73:11:4D:8F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       16DB6EB3B865F0674124FDAA705C348E33EA7F1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 15:35:35 +0000
Certificate not after:    Fri 06 Mar 2026 15:40:35 +0000
Subordinate resources:    AS: 268418
                          IP: 45.160.120.0/22
                          IP: 2804:50e8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:db:6e:b3:b8:65:f0:67:41:24:fd:aa:70:5c:34:8e:33:ea:7f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 15:35:35 2025 GMT
            Not After : Mar  6 15:40:35 2026 GMT
        Subject: CN=0CEEA1DDF076523B39CF76E704244FA173114D8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1d:eb:6d:54:0a:cd:93:c7:80:65:c7:3a:56:
                    c9:0b:e0:1d:39:82:b3:f9:82:23:8a:74:2f:1d:3f:
                    c3:d8:57:b5:e5:54:ae:18:7c:23:1e:1e:7a:4e:78:
                    a4:7b:2d:3c:ce:93:ef:41:59:df:60:38:65:d9:1b:
                    d6:75:cd:a0:5a:f6:88:68:49:29:15:5d:d6:42:f9:
                    e2:2c:1f:f3:e7:c1:3f:dc:37:86:03:1b:5f:de:ed:
                    31:fd:9b:30:ac:c9:a2:13:23:69:3b:5c:6c:63:64:
                    c8:8d:82:17:33:e3:79:e9:a8:be:ea:12:68:ea:fc:
                    b0:b8:f7:c3:b2:ab:6b:f1:2b:7b:de:c7:12:a9:42:
                    d2:9e:3c:1d:97:5d:c7:08:95:1c:6e:49:fe:b4:00:
                    21:bd:08:d2:ca:44:b1:30:1c:a7:e7:44:2b:c8:02:
                    30:f0:0d:64:5d:5c:fb:c8:f8:72:14:fe:2b:12:00:
                    4b:f4:3e:7d:2e:68:f0:43:43:c2:a6:86:53:88:5c:
                    10:c5:26:a0:2f:c3:33:1d:9e:ca:42:24:89:8e:1b:
                    a5:20:8c:69:33:58:52:08:07:2a:a8:31:60:91:80:
                    58:bd:76:cb:37:73:9b:4f:42:77:09:72:2a:6c:67:
                    27:ac:be:bc:bc:ba:b7:9b:14:18:3a:0d:63:b4:af:
                    63:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:EE:A1:DD:F0:76:52:3B:39:CF:76:E7:04:24:4F:A1:73:11:4D:8F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E3uuAtiF3iZrkSKHmeYcywcBZhqUMycG9vpxsqCjyMNz/1/0CEEA1DDF076523B39CF76E704244FA173114D8F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.120.0/22
                IPv6:
                  2804:50e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268418

    Signature Algorithm: sha256WithRSAEncryption
         da:9e:8a:a7:17:f2:df:27:91:94:00:ef:3a:4a:2e:8d:f9:fc:
         6a:67:12:b5:8e:31:55:92:1a:16:6d:03:ca:84:cb:ff:16:e2:
         57:d2:24:64:12:e9:ff:4e:6b:8e:7b:3a:7b:3c:92:cc:e9:d8:
         c8:48:e9:cd:10:0d:2d:3a:7a:42:35:33:5e:e4:32:38:0a:c5:
         c1:22:e6:cf:9a:b4:09:29:13:10:a0:78:bf:80:a6:31:2b:08:
         4c:36:d6:9d:25:f6:4a:80:af:e4:a1:52:5c:b2:2b:3d:24:6b:
         75:55:38:7b:d4:af:1b:f3:0b:79:10:96:05:1b:bd:8c:15:e4:
         47:4f:fd:47:a1:66:58:7a:81:0b:47:f5:af:88:cb:55:e6:bb:
         15:ed:bc:39:36:56:41:0a:8e:b5:19:12:96:ad:8d:fd:51:56:
         a1:0b:d3:6c:72:8d:95:41:e8:c1:43:49:d3:80:2e:d0:9d:8a:
         a4:29:f2:a1:6d:a2:65:7c:9d:4b:c2:62:dd:b5:44:1f:cf:05:
         db:a1:21:9d:ca:3f:0c:f0:d1:af:3e:79:6c:d1:42:4f:28:d4:
         05:c8:ec:85:bc:1a:b0:f3:14:fc:97:c4:7a:b7:e4:f1:c6:9b:
         dd:a7:09:71:3b:e5:2f:16:97:a8:4d:3b:c1:7d:07:17:18:3f:
         04:43:9e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:36:39 2025 by rpki-client