Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/16060258A7AB877DDF0F74E8E5882F3BA94305CA.cer
File:                     16060258A7AB877DDF0F74E8E5882F3BA94305CA.cer (raw, json)
Hash identifier:          v/wuNz9/HWOXBo4fmaJIL9NlMpqVfLpIy6qJ6Ep2nn4=
Subject key identifier:   16:06:02:58:A7:AB:87:7D:DF:0F:74:E8:E5:88:2F:3B:A9:43:05:CA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       26EE28CC4C59A02475B3DF97893FBF6A39C0007A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8eLNTegL9WXzmWhqiPU9vNNVypr4mEatFiGGAzwcaoqx/0/16060258A7AB877DDF0F74E8E5882F3BA94305CA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8eLNTegL9WXzmWhqiPU9vNNVypr4mEatFiGGAzwcaoqx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 01 Feb 2025 13:20:55 +0000
Certificate not after:    Sat 31 Jan 2026 13:25:55 +0000
Subordinate resources:    AS: 269488
                          IP: 45.187.228.0/22
                          IP: 2804:6568::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ee:28:cc:4c:59:a0:24:75:b3:df:97:89:3f:bf:6a:39:c0:00:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  1 13:20:55 2025 GMT
            Not After : Jan 31 13:25:55 2026 GMT
        Subject: CN=16060258A7AB877DDF0F74E8E5882F3BA94305CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:68:d5:a8:e0:98:48:73:1f:91:da:bd:07:19:
                    40:54:b9:75:f8:84:e3:c8:9a:69:08:62:dc:ff:ef:
                    76:d3:f6:cf:88:97:ed:eb:fc:45:76:01:88:ea:51:
                    24:60:70:94:33:29:01:b9:27:f4:1d:d8:ad:cf:b6:
                    88:5e:ef:56:80:86:55:0e:3f:92:83:de:54:c2:c7:
                    b3:ed:cc:6d:86:19:04:a6:a6:0c:eb:45:99:a6:78:
                    e8:1f:01:5f:6c:cc:35:9d:e0:fd:21:59:40:9f:27:
                    4a:d4:c2:5a:d1:b2:54:0d:e7:f8:a2:e7:6b:41:09:
                    1b:5f:97:4c:87:56:4a:2d:29:37:e9:73:ad:02:be:
                    4a:d8:1b:5c:5c:10:b7:c9:8c:b8:4e:e5:0e:da:29:
                    af:72:5f:54:d5:32:8a:f7:8f:7a:eb:b6:75:71:61:
                    13:c7:5a:ff:f0:65:e1:f5:f6:31:28:f7:25:f2:d3:
                    e5:a9:04:b6:30:75:a8:27:3b:df:17:a4:97:82:2f:
                    fe:20:df:61:c3:c3:8e:63:d7:84:22:f5:ab:1c:f3:
                    fc:a0:27:9f:fa:74:9b:5e:3d:6c:38:86:b6:76:c1:
                    ad:c3:91:aa:e2:61:13:f5:e3:02:ce:1b:c1:ff:80:
                    43:eb:fb:f9:3b:c3:72:aa:c0:5d:ba:e8:b7:be:cb:
                    5c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:06:02:58:A7:AB:87:7D:DF:0F:74:E8:E5:88:2F:3B:A9:43:05:CA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8eLNTegL9WXzmWhqiPU9vNNVypr4mEatFiGGAzwcaoqx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8eLNTegL9WXzmWhqiPU9vNNVypr4mEatFiGGAzwcaoqx/0/16060258A7AB877DDF0F74E8E5882F3BA94305CA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.228.0/22
                IPv6:
                  2804:6568::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269488

    Signature Algorithm: sha256WithRSAEncryption
         a3:4a:22:4d:56:7e:52:bd:5f:c4:04:e8:0e:28:fd:99:55:8b:
         6d:7c:05:79:54:49:90:38:04:72:18:8f:f8:9b:69:85:52:c9:
         a4:bf:71:df:5d:0f:bb:f0:85:9f:0e:a7:82:82:cf:13:96:fb:
         6e:b1:0c:1a:a2:47:1b:99:60:ae:21:8e:7d:59:ab:d3:1b:9a:
         3f:33:38:ca:40:df:6b:aa:6e:69:be:65:68:01:cd:f7:d4:46:
         20:73:fc:d7:aa:7b:a2:53:78:2a:b9:2c:ed:64:83:f5:33:e9:
         5f:25:08:6b:fe:b0:ee:1f:1c:b8:c9:d4:e4:45:06:ed:17:e6:
         6c:3e:61:32:ea:76:38:36:1d:b8:77:77:9d:86:fb:ec:b4:6a:
         bb:2d:56:cb:c0:2b:e9:fe:a1:6e:7f:03:7b:35:fe:20:82:16:
         05:8a:f6:09:6d:79:95:ee:d2:31:5a:6f:ae:2e:5c:9b:a0:fd:
         61:95:a9:3e:dd:a8:ae:b7:c1:78:11:a6:c2:c4:7b:89:a2:66:
         19:c8:fa:1f:21:79:ca:f0:27:4f:43:4a:88:96:d1:22:86:1d:
         96:2c:de:7a:8a:63:50:82:21:db:13:0b:91:42:10:2c:af:04:
         77:05:df:e1:94:bb:3e:d8:b1:1e:4f:c7:b4:f9:80:ec:51:e0:
         31:8a:5f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:08 2025 by rpki-client