Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/10EC5E4CC1905B32F23845726B4A13773CC62985.cer
File:                     10EC5E4CC1905B32F23845726B4A13773CC62985.cer (raw, json)
Hash identifier:          Nt4tocoUg+M/rVuF88JkgypsvSMrElbuwC2LZl6kMMg=
Subject key identifier:   10:EC:5E:4C:C1:90:5B:32:F2:38:45:72:6B:4A:13:77:3C:C6:29:85
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3A03B9D0B65AB30200CCCAD1D4A953BEABEC6F36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HrSoMiPXSYVsf1apVgWsbT5WupiYiZWDCiFwC1UF6THU/0/10EC5E4CC1905B32F23845726B4A13773CC62985.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HrSoMiPXSYVsf1apVgWsbT5WupiYiZWDCiFwC1UF6THU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Feb 2025 13:12:19 +0000
Certificate not after:    Wed 25 Feb 2026 13:17:19 +0000
Subordinate resources:    AS: 271384
                          IP: 179.49.92.0/22
                          IP: 2804:7aa8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:03:b9:d0:b6:5a:b3:02:00:cc:ca:d1:d4:a9:53:be:ab:ec:6f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 26 13:12:19 2025 GMT
            Not After : Feb 25 13:17:19 2026 GMT
        Subject: CN=10EC5E4CC1905B32F23845726B4A13773CC62985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:51:d4:c2:58:21:2e:51:a2:b8:c8:6a:fb:78:
                    14:44:89:e8:de:31:2a:79:ae:d3:61:88:64:e0:bd:
                    b4:4b:84:16:3b:9a:5c:41:f8:4d:85:a7:65:6c:c0:
                    5a:47:10:e7:5b:89:05:47:fa:21:ac:3e:bd:c5:fa:
                    81:fd:db:0a:c3:9a:d8:b9:ec:fa:91:96:95:f1:d8:
                    50:b7:27:31:9c:25:0a:30:43:84:d0:87:94:b2:0c:
                    2e:91:cb:c7:5b:1f:a4:e2:4c:9e:bf:58:0b:94:13:
                    f1:9e:f6:de:4d:5d:4a:6b:00:ae:a6:37:00:67:d2:
                    2a:cf:f5:df:94:cb:af:4d:72:df:3f:01:5c:c7:9c:
                    ae:61:5d:aa:65:89:b2:ef:3e:dd:8e:59:47:ce:3c:
                    cc:a0:ff:8d:44:81:94:6b:5e:44:8f:82:49:94:3f:
                    c3:9b:fc:68:d0:2c:e9:7f:45:74:c4:d5:cb:64:be:
                    dc:a9:b0:35:55:03:7f:12:2f:1b:ac:8c:6b:57:93:
                    1b:f7:88:02:11:c9:32:d9:c3:3f:27:76:28:74:25:
                    03:08:05:ee:ad:55:75:a8:ca:cb:fd:db:35:18:8c:
                    82:bf:a7:40:fd:ae:c9:05:b4:33:70:78:9a:28:72:
                    e0:59:df:7d:ac:27:b4:0a:cb:0a:36:b7:83:8f:ac:
                    30:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:EC:5E:4C:C1:90:5B:32:F2:38:45:72:6B:4A:13:77:3C:C6:29:85
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HrSoMiPXSYVsf1apVgWsbT5WupiYiZWDCiFwC1UF6THU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HrSoMiPXSYVsf1apVgWsbT5WupiYiZWDCiFwC1UF6THU/0/10EC5E4CC1905B32F23845726B4A13773CC62985.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.92.0/22
                IPv6:
                  2804:7aa8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271384

    Signature Algorithm: sha256WithRSAEncryption
         6e:31:32:db:3c:9c:b9:69:11:9e:f5:8c:53:8c:50:d9:6b:9b:
         aa:98:09:fd:83:8f:82:8a:9b:90:57:ab:e4:32:d7:0c:d1:cb:
         cf:fc:4c:33:ff:d8:29:8d:47:9a:75:11:70:fb:ed:93:5a:fc:
         eb:90:88:c3:1e:cf:c0:e9:d5:cc:fc:e6:85:77:09:0d:62:cc:
         24:1e:33:54:e1:8c:3f:a1:d7:fe:a7:f7:e1:a6:fc:e5:3e:33:
         22:29:cc:73:fa:f5:50:cb:d0:cf:28:5e:65:8b:a2:53:f1:4b:
         33:23:21:e6:7c:04:86:21:d0:d3:89:f1:7b:fd:55:1c:d3:81:
         d2:f1:b2:9d:f2:2e:4a:91:68:a6:dd:93:d7:df:21:e5:ae:b3:
         00:63:32:97:ae:b5:c4:d1:3b:b1:ba:68:17:e4:2e:b5:4f:96:
         9c:3c:12:a1:67:75:4a:02:8e:6f:32:77:c4:70:3c:9a:54:89:
         da:3a:2b:63:88:5b:02:1c:9c:fd:55:88:3b:af:de:89:91:cc:
         e0:05:b0:07:2a:ab:eb:11:35:88:ea:e5:dd:11:f1:b6:97:9f:
         38:bc:e4:b4:6a:74:5b:ff:ea:c3:0d:e8:79:d9:4c:af:f1:0c:
         6d:25:fc:64:26:78:16:9b:4e:a7:1f:94:e0:bf:11:8d:94:1f:
         f7:ae:0d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:20:07 2025 by rpki-client