Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1410B18CCA337433B73CA0533F1F503FDBB64BA7.cer
File:                     1410B18CCA337433B73CA0533F1F503FDBB64BA7.cer (raw, json)
Hash identifier:          eDssaHu1AGsXYkAcyjYQO+pO8tHEKkSybbORmOopGc8=
Subject key identifier:   14:10:B1:8C:CA:33:74:33:B7:3C:A0:53:3F:1F:50:3F:DB:B6:4B:A7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       19B7B19F49FD00BEDD6546D2323E049020177717
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/1410B18CCA337433B73CA0533F1F503FDBB64BA7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Mar 2025 13:32:35 +0000
Certificate not after:    Mon 16 Mar 2026 13:37:35 +0000
Subordinate resources:    AS: 267992
                          IP: 45.167.68.0/22
                          IP: 2804:5658::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b7:b1:9f:49:fd:00:be:dd:65:46:d2:32:3e:04:90:20:17:77:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 17 13:32:35 2025 GMT
            Not After : Mar 16 13:37:35 2026 GMT
        Subject: CN=1410B18CCA337433B73CA0533F1F503FDBB64BA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:cd:39:25:4c:9e:fc:d5:6c:a8:ef:2d:2e:44:
                    7b:34:78:77:02:dd:64:23:15:97:36:46:eb:ff:84:
                    43:1b:bc:9c:7e:94:a0:74:72:76:1d:6b:40:c5:a4:
                    02:0b:10:36:2b:ac:37:d2:a2:fc:ba:52:42:65:8d:
                    ae:20:52:c4:73:26:cb:70:2a:04:3d:90:8e:21:b9:
                    90:5a:40:44:7f:85:c9:68:af:c3:3c:df:2d:b4:10:
                    64:b9:82:37:01:3f:c6:ea:54:c7:97:4c:a9:1f:c8:
                    65:b6:ca:66:5e:d4:11:d0:55:c5:55:43:43:5b:6a:
                    93:dd:68:82:ec:79:bb:93:a7:a5:81:83:a3:d1:ae:
                    bb:85:fe:e5:d3:f4:1a:9b:6d:c3:9d:85:30:21:4b:
                    12:66:d9:20:77:3a:a4:ae:5c:bd:f3:df:7a:79:d2:
                    51:ab:7c:c2:8c:38:8d:56:a9:0a:1f:92:5f:a2:af:
                    f8:9f:fd:8a:91:b2:91:cd:b9:49:1f:c1:6f:48:ea:
                    85:a5:93:e0:53:13:c5:54:51:95:e4:98:8d:ec:41:
                    83:ce:d4:49:e3:8f:7b:78:ba:35:61:d3:dc:cb:63:
                    6f:11:29:b9:e7:6c:fb:d8:ff:ee:5a:23:8f:bc:8d:
                    49:39:c9:93:e3:e1:31:2b:78:67:3d:90:c9:2f:d4:
                    a9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:10:B1:8C:CA:33:74:33:B7:3C:A0:53:3F:1F:50:3F:DB:B6:4B:A7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/1410B18CCA337433B73CA0533F1F503FDBB64BA7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.68.0/22
                IPv6:
                  2804:5658::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267992

    Signature Algorithm: sha256WithRSAEncryption
         1b:aa:65:d1:76:21:9d:c6:9d:4d:ab:c2:72:ac:0d:9f:a2:9e:
         6f:e9:1f:69:a0:63:a9:bf:27:5a:68:b9:87:0f:ae:88:c2:80:
         48:81:a9:59:3c:87:ae:59:31:f5:6e:eb:2f:1b:98:6f:e9:9e:
         f1:1e:38:a1:f8:e6:23:a0:12:d1:ba:c1:5c:61:a9:c9:ef:5e:
         b4:9d:9c:b5:0a:55:c4:dd:5c:29:e3:22:42:f1:51:ef:9e:61:
         62:df:9a:ed:15:37:0a:80:a9:a0:f8:f7:4c:b6:d4:32:8b:6d:
         fe:37:b0:44:e3:a1:e4:50:e4:19:7a:0a:b5:7d:29:98:6a:ea:
         b1:e4:83:8b:e8:81:0f:46:f9:d4:84:a7:7e:b8:14:82:1f:ea:
         4f:cb:15:92:cc:1d:52:a7:c0:e6:9a:64:6a:7b:9b:cb:02:81:
         a5:7c:5c:ca:a9:00:66:41:aa:37:24:96:70:e0:6f:36:0b:9a:
         35:59:2d:8b:bf:36:a4:d0:99:46:60:eb:c2:20:4d:57:a4:a7:
         49:54:56:f9:86:87:b9:d3:39:3c:81:fb:55:bc:48:79:16:01:
         0f:7e:50:df:87:9e:cf:a1:f2:87:81:37:c0:90:47:cf:40:33:
         bb:0f:0f:02:eb:11:a7:2e:20:db:2b:15:36:8f:de:87:d7:78:
         2a:a7:a5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:26 2025 by rpki-client