Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/151447ACA4E09209C53F7216E3E910244FF0C5A5.cer
File:                     151447ACA4E09209C53F7216E3E910244FF0C5A5.cer (raw, json)
Hash identifier:          Fq3R4dlUNv4YjHO00xFjTpWcVz2fpgvLkaTzj9pJATw=
Subject key identifier:   15:14:47:AC:A4:E0:92:09:C5:3F:72:16:E3:E9:10:24:4F:F0:C5:A5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5C4AF3383650495341A189720674D54F102AAB2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/151447ACA4E09209C53F7216E3E910244FF0C5A5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Nov 2024 19:18:21 +0000
Certificate not after:    Thu 06 Nov 2025 19:23:21 +0000
Subordinate resources:    AS: 269004
                          IP: 45.178.28.0/22
                          IP: 2804:5df8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:4a:f3:38:36:50:49:53:41:a1:89:72:06:74:d5:4f:10:2a:ab:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov  7 19:18:21 2024 GMT
            Not After : Nov  6 19:23:21 2025 GMT
        Subject: CN=151447ACA4E09209C53F7216E3E910244FF0C5A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a1:b4:9e:bc:d4:0b:b5:c3:61:88:0f:47:89:
                    95:be:72:b6:10:09:39:d8:96:49:6f:0b:72:f5:3c:
                    bc:52:35:67:25:b0:2b:2c:a8:90:69:ba:4c:be:80:
                    fb:c4:4c:99:bc:57:67:ae:79:f0:d4:84:e1:ac:f2:
                    a9:b7:e0:03:08:ca:9d:49:b7:b1:58:b5:70:65:d2:
                    f8:c7:ec:91:da:5a:b0:fd:37:26:3d:f3:33:7c:d9:
                    5d:ef:23:d1:ba:28:41:a0:9f:2f:f9:6d:e4:63:55:
                    7a:a0:1d:1a:29:4f:3d:d6:7b:95:87:9a:08:75:94:
                    20:35:2d:7f:26:e6:b8:e5:1e:69:ed:bc:72:ff:f3:
                    f0:f9:4a:df:16:45:e5:e6:1c:b2:c8:7d:c4:6e:62:
                    a3:d5:19:c3:42:68:5b:a9:d5:67:0f:2f:b3:d1:78:
                    74:fe:ca:45:9c:9d:59:f6:97:31:0a:9a:74:64:1d:
                    4f:df:34:fc:fc:91:57:7d:fe:43:42:e3:9a:8e:28:
                    54:2a:fd:03:99:3b:40:2f:51:fd:77:a6:35:49:64:
                    c3:22:7f:39:30:09:11:70:ea:00:7c:90:82:ee:4e:
                    d9:1c:61:c1:ae:1f:3d:ff:9d:43:45:05:20:e9:23:
                    a2:07:52:0f:df:c2:9c:ef:e0:e6:b2:d1:76:f0:82:
                    2c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:14:47:AC:A4:E0:92:09:C5:3F:72:16:E3:E9:10:24:4F:F0:C5:A5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HnUfNr6kx3NW7GEzSrTKAXAf3jCAXjLaMoetCEXMGyEQ/0/151447ACA4E09209C53F7216E3E910244FF0C5A5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.28.0/22
                IPv6:
                  2804:5df8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269004

    Signature Algorithm: sha256WithRSAEncryption
         94:d5:44:7b:ef:57:66:09:2d:fb:cc:12:45:e4:b2:ba:7d:7a:
         4b:c8:ff:bc:f6:2f:c1:00:45:a7:93:5e:f9:28:cf:e1:fd:bb:
         38:6f:c2:4c:78:27:ba:5d:f6:87:65:6e:8f:de:1b:1d:b2:ae:
         6b:fe:01:1f:1b:48:84:2f:35:5e:f9:21:82:1c:fb:64:74:32:
         25:ae:4c:61:f4:0a:c4:43:6f:e1:e8:3a:18:59:10:a6:2e:21:
         ae:b7:23:73:c1:d7:ae:21:d6:78:2c:a1:12:6d:fa:92:5f:1c:
         e0:a8:47:12:d7:f7:cb:f8:9c:86:1a:5e:7b:1a:88:e7:ab:67:
         d5:6d:67:9d:66:74:83:13:d8:8b:a0:d5:2e:45:50:b7:d9:fb:
         01:f9:38:6f:22:91:32:f2:e8:d1:a6:a0:bc:fc:df:bd:a3:02:
         cd:bd:8d:e9:12:02:69:37:7f:65:43:7c:31:74:bd:91:f3:52:
         e5:99:83:01:d6:46:3d:ac:db:20:1a:29:6b:32:c9:68:61:17:
         3c:b6:91:36:f7:4f:77:7d:5f:41:02:9a:a0:e8:82:4f:3f:4f:
         82:81:95:d1:ee:22:73:8d:06:35:a0:05:39:a9:db:f1:da:33:
         68:a7:e8:31:b2:71:f7:fd:83:8f:b5:f9:89:60:5a:be:75:54:
         17:a2:35:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:17 2025 by rpki-client