Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/17E4F0D3C469415DC7E16F41B958536392F1E579.cer
File:                     17E4F0D3C469415DC7E16F41B958536392F1E579.cer (raw, json)
Hash identifier:          LVCylgTm79YW99wDDSQaP0rK2flS91pZRAoRIDc2eak=
Subject key identifier:   17:E4:F0:D3:C4:69:41:5D:C7:E1:6F:41:B9:58:53:63:92:F1:E5:79
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       423302E82C4244FA5D13434D9CF050BC2AB12D2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/17E4F0D3C469415DC7E16F41B958536392F1E579.mft
caRepository:             rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Mar 2025 14:15:55 +0000
Certificate not after:    Tue 10 Mar 2026 14:20:55 +0000
Subordinate resources:    AS: 263950
                          IP: 138.255.0.0/22
                          IP: 2804:2840::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:33:02:e8:2c:42:44:fa:5d:13:43:4d:9c:f0:50:bc:2a:b1:2d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 11 14:15:55 2025 GMT
            Not After : Mar 10 14:20:55 2026 GMT
        Subject: CN=17E4F0D3C469415DC7E16F41B958536392F1E579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:68:81:91:54:ec:d1:3e:5f:f5:71:ca:29:10:
                    16:20:8a:45:a4:8f:a5:2f:f8:cb:d4:84:f0:35:e7:
                    38:a1:65:92:7b:1a:d7:7e:bd:cc:e5:5d:38:37:ee:
                    11:47:ab:95:47:08:d9:1f:0e:64:7f:dd:d2:42:8e:
                    4d:5b:75:a1:54:9c:19:e4:26:db:fd:db:ca:7a:2a:
                    7e:bd:a4:be:61:c4:03:56:c5:97:02:16:8d:8a:ea:
                    63:fa:54:2a:7a:a5:c3:b2:56:3e:c6:dd:93:2b:a3:
                    b2:62:dd:39:b2:b8:50:b3:c8:62:5f:19:a5:e7:ef:
                    1c:3b:98:16:fb:36:34:bc:75:07:20:7d:37:9c:b1:
                    ff:4b:a5:9e:d7:81:53:52:14:01:cc:ea:25:e6:2b:
                    bc:9d:6f:68:87:8f:c8:83:07:bf:da:82:b5:c8:7f:
                    e3:3b:ae:5d:8b:08:06:07:cb:fd:bd:83:13:48:94:
                    ec:f9:3b:5d:27:a6:26:5c:36:59:16:97:4b:88:6e:
                    36:6f:eb:d1:b1:c5:78:a9:2a:db:2e:10:83:bf:f4:
                    2c:b9:fc:7d:80:d3:8f:ac:65:ec:28:4f:d2:63:f4:
                    10:1b:fd:30:0d:a1:77:7f:26:c4:13:4e:1d:8a:6d:
                    2c:3c:25:36:86:8e:b9:89:49:64:c5:95:0c:d7:e8:
                    f6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                17:E4:F0:D3:C4:69:41:5D:C7:E1:6F:41:B9:58:53:63:92:F1:E5:79
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/17E4F0D3C469415DC7E16F41B958536392F1E579.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.0.0/22
                IPv6:
                  2804:2840::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263950

    Signature Algorithm: sha256WithRSAEncryption
         d3:7d:22:40:06:c3:fa:d8:17:8d:4e:d4:af:a1:43:91:07:ce:
         1e:ca:8c:44:a2:9b:c9:5c:29:ad:31:f7:0e:97:96:80:da:27:
         6b:9f:21:12:4c:12:3d:f6:ee:c0:fb:84:55:6b:2c:ef:5f:65:
         87:09:00:79:23:bb:dd:55:1a:15:f6:ad:05:6f:22:8c:0f:dc:
         6d:89:4e:4e:93:3f:49:95:5c:8c:28:35:88:12:5a:74:a6:af:
         f5:e9:79:4a:41:8c:cf:83:6e:e0:19:bd:65:4e:6f:e8:8c:86:
         6f:ba:dd:a3:25:35:61:3b:8f:26:ef:72:17:26:f5:46:9e:53:
         9d:e3:8f:09:06:ae:86:43:c0:7f:18:ce:2f:e2:d2:b8:08:e6:
         3a:61:17:93:bc:a2:39:19:f9:f8:00:3b:5f:f2:fa:a4:b6:28:
         4a:16:4d:fc:c0:49:61:7d:c3:5b:d2:b2:4f:7e:ee:0e:fa:4a:
         6b:99:37:da:1d:b4:a2:1d:3e:23:a9:dd:2c:5a:2a:10:4d:5a:
         e1:c0:ad:a0:79:52:d8:de:aa:fa:60:a8:b2:50:d4:dc:38:4a:
         51:85:4d:36:26:3b:03:37:24:e2:b7:aa:78:26:3a:35:80:8c:
         d2:87:07:0c:9a:d2:78:c4:02:57:40:da:99:9f:93:28:d9:6f:
         5a:e0:90:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:20:04 2025 by rpki-client