Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0D87E481DDE13C2B08241FF1415855CEAAAD5A90.cer
File:                     0D87E481DDE13C2B08241FF1415855CEAAAD5A90.cer (raw, json)
Hash identifier:          60ecR+GP1D0RdLSVZfmq92YxeNu2c/0jL12gYdQDIbo=
Subject key identifier:   0D:87:E4:81:DD:E1:3C:2B:08:24:1F:F1:41:58:55:CE:AA:AD:5A:90
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F42491DD0269B2CC78A3D77EFFFCC16E90C636F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2/0D87E481DDE13C2B08241FF1415855CEAAAD5A90.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 00:35:45 +0000
Certificate not after:    Fri 06 Mar 2026 00:40:45 +0000
Subordinate resources:    AS: 271592
                          IP: 190.9.120.0/22
                          IP: 2804:7df0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:42:49:1d:d0:26:9b:2c:c7:8a:3d:77:ef:ff:cc:16:e9:0c:63:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 00:35:45 2025 GMT
            Not After : Mar  6 00:40:45 2026 GMT
        Subject: CN=0D87E481DDE13C2B08241FF1415855CEAAAD5A90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:12:c9:74:85:ba:a0:bd:c7:f0:e3:db:cb:ca:
                    c4:8e:ed:dc:60:b6:d9:cf:1c:7c:ce:a6:e5:3c:79:
                    ad:9d:cb:36:3b:62:b1:13:5d:1d:cb:e6:e6:51:e4:
                    b1:12:95:55:e5:d6:9a:b2:cd:75:73:cf:c6:07:67:
                    69:db:a5:f1:be:1d:78:93:30:03:2a:54:7d:ad:47:
                    68:0b:0d:83:2f:f6:c6:0a:d3:62:d8:e7:2a:f6:02:
                    0b:30:2e:d1:91:6d:2c:63:52:a8:4b:0a:be:b4:6f:
                    9d:3b:e2:10:97:5b:a0:ae:9f:32:f9:ad:cf:96:bb:
                    84:a7:a6:87:2b:18:a5:1b:58:d9:22:47:9c:bf:63:
                    0d:31:3b:6b:af:e5:fd:f4:c4:dd:f3:c7:f9:68:28:
                    6c:90:57:e9:bb:52:84:95:ee:aa:a0:84:f2:fa:b3:
                    0e:37:23:75:39:36:ce:36:40:fa:e4:86:ff:ce:a7:
                    9f:3d:5a:40:36:f9:3e:2b:b6:7b:8d:ce:fb:8f:26:
                    5b:8d:e0:e0:96:74:0b:b8:c1:fb:98:d3:8d:c0:aa:
                    e3:d5:61:5a:04:9c:cf:d1:ce:4a:d4:e1:37:e6:d6:
                    2a:d8:bb:6f:d7:8c:11:f4:53:25:4c:7b:8d:cf:0d:
                    53:13:5d:d2:0e:53:8d:2f:9c:2d:5b:3c:bb:47:3d:
                    67:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:87:E4:81:DD:E1:3C:2B:08:24:1F:F1:41:58:55:CE:AA:AD:5A:90
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/2/0D87E481DDE13C2B08241FF1415855CEAAAD5A90.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.120.0/22
                IPv6:
                  2804:7df0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271592

    Signature Algorithm: sha256WithRSAEncryption
         57:45:c2:37:92:69:ec:7b:f3:3b:63:77:60:d8:8d:c2:0f:d9:
         77:a8:05:64:15:52:fe:13:08:59:43:43:98:34:a0:a9:ea:8a:
         ff:4f:b9:52:36:90:1d:3e:a5:2a:e8:22:ce:fc:1a:7e:e6:94:
         d7:c6:20:d7:1e:5c:92:26:fe:cd:a0:a9:74:7f:20:d4:6f:37:
         93:82:18:63:c3:11:b1:1b:69:e2:16:1f:9b:f5:93:d8:10:7e:
         6d:4e:00:2a:04:80:d3:b1:dd:bc:ea:92:ac:b3:53:9a:ce:33:
         23:2d:6d:39:8b:2d:91:6f:54:0d:28:26:07:53:29:07:d3:2d:
         89:c9:e7:8e:19:61:57:26:c1:36:8f:d9:02:c3:11:93:8a:cb:
         8e:de:be:f0:2c:19:52:43:60:51:47:94:42:9c:c5:b0:14:7e:
         b3:ab:20:46:ad:ce:83:86:ec:7f:b6:a8:f8:c8:96:5c:66:e3:
         60:db:1a:40:5d:c3:21:8e:9d:c4:dd:0e:57:d8:af:15:e3:bd:
         3c:bf:cd:b8:c0:14:5a:30:76:4c:43:18:09:64:37:c9:4c:66:
         ac:60:05:8b:6e:15:dc:3f:06:47:51:dc:e3:20:30:af:45:3d:
         76:95:8c:9e:8f:16:7d:76:5c:a5:cb:da:6a:54:35:63:23:78:
         2c:59:c0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:49:42 2025 by rpki-client