Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/11DBA150DA3969CE822352214139847D219FDEF0.cer
File:                     11DBA150DA3969CE822352214139847D219FDEF0.cer (raw, json)
Hash identifier:          gaVBmhoYuFAeSPja/0RaHXqqyVlLaRXxbTjAY0CTlj4=
Subject key identifier:   11:DB:A1:50:DA:39:69:CE:82:23:52:21:41:39:84:7D:21:9F:DE:F0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3D07C4DCFCC1094C1754743F0AC501B31D4CF1D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8qbKeUrg1vXQWCHumXP6qccngiw8mAnyCDFEH6VC5oGm/0/11DBA150DA3969CE822352214139847D219FDEF0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8qbKeUrg1vXQWCHumXP6qccngiw8mAnyCDFEH6VC5oGm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Feb 2025 18:28:52 +0000
Certificate not after:    Mon 02 Feb 2026 18:33:52 +0000
Subordinate resources:    AS: 269037
                          IP: 45.178.112.0/22
                          IP: 2804:5e80::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:07:c4:dc:fc:c1:09:4c:17:54:74:3f:0a:c5:01:b3:1d:4c:f1:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  3 18:28:52 2025 GMT
            Not After : Feb  2 18:33:52 2026 GMT
        Subject: CN=11DBA150DA3969CE822352214139847D219FDEF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:86:85:50:3e:ae:78:f0:a5:bd:8a:c5:0e:12:
                    6f:50:21:88:12:50:ae:68:0e:2c:5a:58:42:4b:6c:
                    19:d4:8f:f5:81:5c:85:6f:fd:e7:c5:87:6c:77:f2:
                    35:12:ca:5a:2b:31:8c:cb:94:a2:35:73:9f:72:47:
                    3f:e1:b3:6c:05:d8:46:b0:28:9e:be:ef:9d:09:3e:
                    6e:fa:0e:7f:95:f8:cb:81:ad:fa:b2:88:5d:dd:eb:
                    03:4d:7f:57:58:29:a2:16:47:e7:f3:61:3c:e6:2d:
                    6c:d5:54:11:0f:4f:0e:24:82:84:b3:15:88:89:70:
                    8c:fe:95:aa:09:f9:a4:40:83:5a:2e:e4:45:98:41:
                    e4:e0:ab:75:f7:39:55:44:7a:60:37:02:36:a8:41:
                    fe:a0:e3:ae:65:8d:21:74:b2:e4:2d:86:5b:c5:f3:
                    ca:dc:39:d5:2c:98:73:57:cc:f9:f4:58:a1:43:6c:
                    32:e6:de:64:d8:6a:ca:02:b0:e5:8e:a7:13:80:da:
                    4a:6f:76:51:9b:50:38:80:4d:57:3f:bc:fc:7e:1b:
                    7e:d0:e1:9f:ee:29:e3:fb:fe:55:33:27:03:3a:d3:
                    16:b0:7c:ad:61:ae:49:1c:f9:99:c4:ac:bd:ff:74:
                    2f:7c:d6:a5:88:f4:8a:98:5a:65:87:cf:65:82:c7:
                    ec:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:DB:A1:50:DA:39:69:CE:82:23:52:21:41:39:84:7D:21:9F:DE:F0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8qbKeUrg1vXQWCHumXP6qccngiw8mAnyCDFEH6VC5oGm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8qbKeUrg1vXQWCHumXP6qccngiw8mAnyCDFEH6VC5oGm/0/11DBA150DA3969CE822352214139847D219FDEF0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.112.0/22
                IPv6:
                  2804:5e80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269037

    Signature Algorithm: sha256WithRSAEncryption
         bf:81:9f:46:87:9d:9d:e2:3a:3f:74:c7:95:6e:15:92:e7:09:
         e5:66:c4:10:46:68:c6:9c:80:31:7b:70:3b:a7:da:bd:20:74:
         75:d2:67:6b:c4:cb:b8:94:d3:8e:e9:00:1d:38:61:cf:f5:35:
         e7:61:73:7f:34:5d:97:69:f0:be:f9:21:16:aa:47:bc:fa:57:
         80:a2:7c:94:95:b6:71:6c:11:e0:17:50:c4:2a:46:e1:69:c5:
         9a:ba:8c:8d:fa:ca:5a:d4:43:56:62:2f:2c:bc:22:c1:2b:8c:
         23:6c:a6:05:d9:0f:60:3e:d7:79:a6:7c:e6:2d:5e:f4:6a:70:
         6e:f1:06:ef:37:e0:12:14:10:a8:15:e8:19:2d:f0:03:f4:2b:
         b9:ba:d8:9b:c5:74:e1:93:5b:a9:4a:bd:35:10:ca:e2:d5:12:
         1b:c9:8c:38:4b:21:68:2c:46:bc:20:30:54:cc:49:a7:59:83:
         06:6d:a1:65:0b:68:9e:40:81:29:8d:6f:09:b1:24:9c:85:9a:
         1b:fb:02:fa:f2:32:17:58:8f:df:f9:9a:55:7b:29:90:fb:08:
         65:13:16:5b:b6:12:01:ff:53:58:b2:57:35:b5:f0:1b:3c:a3:
         02:55:ea:de:17:f4:17:d5:ee:d9:d1:95:6e:7d:12:e7:fb:17:
         55:3b:99:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:33:30 2025 by rpki-client