Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer
File:                     16F81DF06319D01EB676C8B7D68D31AD3664B3B9.cer (raw, json)
Hash identifier:          xyS+n+3nhf1KbYmDOrdrVXK4kejFXDz9zIeIbj2bBH0=
Subject key identifier:   16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       974163638164975949CF60E5F7E6A73491E8F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 07:43:34 +0000
Certificate not after:    Fri 06 Mar 2026 07:48:34 +0000
Subordinate resources:    AS: 270359
                          IP: 190.89.76.0/22
                          IP: 2804:6acc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            97:41:63:63:81:64:97:59:49:cf:60:e5:f7:e6:a7:34:91:e8:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 07:43:34 2025 GMT
            Not After : Mar  6 07:48:34 2026 GMT
        Subject: CN=16F81DF06319D01EB676C8B7D68D31AD3664B3B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2a:a1:67:b7:7a:7b:dc:95:4c:f4:cf:38:8e:
                    85:73:fb:0d:c9:62:06:16:ca:9b:d0:98:33:75:62:
                    6a:21:b1:21:92:6e:85:f0:cc:38:0d:54:d6:cd:25:
                    db:06:1d:79:c9:a2:1b:43:44:82:1a:84:87:ca:a3:
                    2b:51:1e:7f:12:85:84:57:9b:07:78:cb:58:17:9b:
                    7a:87:40:d4:84:a6:c7:7d:8a:f2:21:08:55:08:98:
                    cd:2d:b6:1d:93:d1:74:15:e1:d4:43:b7:08:a3:4c:
                    61:fe:44:e2:9d:1f:12:32:3d:54:7b:15:32:91:b8:
                    42:4d:d4:c3:0c:e2:1b:41:98:ea:1b:dd:13:ec:db:
                    1a:92:df:f7:49:43:bb:03:28:97:e6:2c:c1:f3:e6:
                    6c:2f:80:e1:dc:22:95:2e:a4:d8:1c:79:d8:2c:5a:
                    04:19:65:c0:3f:95:1a:d6:3b:d2:5c:c3:2b:1c:9e:
                    79:40:c2:cf:28:06:9b:73:32:3a:28:39:67:02:f4:
                    41:3e:b9:f9:a5:64:96:96:df:8e:81:3d:24:e0:6b:
                    a5:04:9e:9f:5c:93:ac:fb:99:c1:b3:fb:36:db:f7:
                    39:6c:ff:b2:10:c2:0c:40:d4:5a:8e:85:2c:02:41:
                    ed:19:30:31:c5:72:bd:fb:a6:39:05:8f:e9:58:1b:
                    54:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:F8:1D:F0:63:19:D0:1E:B6:76:C8:B7:D6:8D:31:AD:36:64:B3:B9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5kRMj74TSwTDw6GKdLpnH27zszNMscVsZczDwvYqb1Rm/2/16F81DF06319D01EB676C8B7D68D31AD3664B3B9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.76.0/22
                IPv6:
                  2804:6acc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270359

    Signature Algorithm: sha256WithRSAEncryption
         a2:cc:23:b3:9b:c6:32:3b:4c:3e:fe:db:13:99:0c:4d:f6:bb:
         51:4c:36:8f:ec:db:8c:92:32:5e:4a:71:d8:53:38:0c:df:04:
         78:52:23:e2:26:89:64:e9:49:73:2d:b4:13:d0:c1:cc:9d:31:
         42:78:ba:5c:8b:f8:bd:24:21:3d:a4:9f:d1:f6:35:b0:97:6b:
         25:fb:44:7c:a9:b0:58:49:ce:e0:66:a6:a3:95:38:12:82:cf:
         c7:c9:e4:9c:bc:7f:a1:57:ca:8e:b5:aa:d3:04:1b:1d:f6:40:
         bb:37:04:87:97:f0:f9:76:f2:c2:5c:d5:13:20:c2:33:e4:81:
         af:75:f3:d1:d0:cd:68:80:ad:5f:28:2c:60:6f:96:24:f4:91:
         38:05:9f:3a:69:ed:46:5a:42:bc:1d:5c:d1:af:c6:d1:5a:62:
         cb:6d:e0:72:78:2e:98:08:6f:86:14:7f:bf:0a:91:c9:7c:53:
         81:84:18:c4:1a:5b:87:e1:53:f2:49:21:64:98:43:24:d1:38:
         63:97:d4:15:6a:39:75:a5:8b:2c:75:51:86:b5:b3:02:85:5e:
         9f:06:13:34:dd:a3:73:b5:47:ff:b5:b8:3b:28:6c:23:38:54:
         d1:ac:8e:21:19:1a:79:4d:67:e4:31:6e:ee:10:5f:09:b5:49:
         71:60:d1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:49 2025 by rpki-client