Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
File:                     0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer (raw, json)
Hash identifier:          McGoXyNqXBj6kNK0pCJANxkpejAoHeD2u1aZlTdZsB0=
Subject key identifier:   0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       49F239FB49D5CD47AC4A9C6A67426A182B03E9FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 09:20:17 +0000
Certificate not after:    Thu 05 Mar 2026 09:25:17 +0000
Subordinate resources:    AS: 52852
                          IP: 177.86.120.0/22
                          IP: 2804:830::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f2:39:fb:49:d5:cd:47:ac:4a:9c:6a:67:42:6a:18:2b:03:e9:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 09:20:17 2025 GMT
            Not After : Mar  5 09:25:17 2026 GMT
        Subject: CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6d:60:11:e8:2f:d3:7c:9c:7f:6d:aa:39:b5:
                    d6:a6:d3:ba:55:67:b2:02:a0:9f:b2:c3:d5:ee:86:
                    d3:1a:9a:aa:c9:1e:45:5f:6a:99:1a:30:5d:33:e3:
                    39:95:41:8e:f8:64:f6:34:3b:8a:26:1e:68:8b:cc:
                    5a:2e:ec:11:0a:86:ef:50:b2:c8:b7:34:d7:b9:7e:
                    6a:05:2d:b3:c4:a0:be:2e:24:3c:ab:e0:de:eb:44:
                    f1:51:bd:48:32:38:a6:55:3a:95:ce:d5:c8:3c:55:
                    75:a3:38:25:a0:24:76:e4:03:7b:b1:40:76:93:06:
                    46:c4:d2:7d:ba:8a:fa:8c:dd:92:28:7b:63:d9:0a:
                    62:21:7a:49:0c:58:11:e6:4c:d4:16:bd:40:fd:ed:
                    c9:9d:7f:bd:55:c7:81:83:00:75:8e:ba:83:cc:46:
                    63:a4:70:a0:98:51:4b:bf:6c:b3:30:59:2c:d1:66:
                    39:0e:2b:ff:db:fb:23:46:88:81:db:88:02:d6:04:
                    8d:16:be:b8:99:ab:e4:dd:18:cc:b3:bd:12:8c:e9:
                    f9:67:b1:ec:27:c6:55:fd:9f:ad:8d:d8:c7:bb:c6:
                    14:7b:d4:d9:76:62:91:0b:78:5e:ed:6a:c9:de:21:
                    1e:9c:f0:94:c8:05:45:40:13:6a:b8:e2:f8:df:0b:
                    f9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.120.0/22
                IPv6:
                  2804:830::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52852

    Signature Algorithm: sha256WithRSAEncryption
         a6:dc:67:61:d3:c1:9d:59:5c:1c:99:f0:b1:7a:5b:8b:95:60:
         26:e9:83:a2:61:d9:69:73:54:fd:7a:e2:43:c5:dc:ec:92:8c:
         e1:68:af:1f:c8:ce:3c:43:1a:35:e9:d2:8b:11:28:0d:14:cf:
         bf:09:69:dc:e6:ef:9e:e6:a2:18:75:40:b4:c3:0b:fa:07:f6:
         dd:87:80:04:07:99:78:3b:e2:54:99:14:c6:e7:a5:52:25:0c:
         2a:ca:57:07:9c:a2:42:ed:cd:be:c5:44:64:4c:eb:87:25:0c:
         4e:25:fd:f1:d9:b4:80:5d:49:e1:39:86:d1:1a:69:39:03:f1:
         e2:07:fb:55:5b:4a:c9:d6:b5:c8:29:7f:dc:49:80:79:7a:db:
         b4:f6:ef:eb:21:1c:e5:31:69:0c:1e:1c:62:1e:85:4c:b6:49:
         4c:b7:01:4c:3d:a6:bd:17:16:1e:82:70:1f:eb:85:20:40:5b:
         0c:2a:a5:a3:ae:40:fb:8d:c2:ea:50:34:d5:46:af:18:e8:a2:
         10:bf:55:dd:66:ed:7f:50:98:b1:05:bf:10:89:a0:bb:11:70:
         a6:f1:b7:11:80:f1:9e:39:b4:38:cc:c2:22:62:7e:65:72:a5:
         69:c6:34:85:ca:fa:d4:af:d6:dd:60:76:74:b3:e2:57:2d:43:
         e4:9b:45:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:38:28 2025 by rpki-client