Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1844D4ED4AC2671A7742257A35431ED55286D36F.cer
File:                     1844D4ED4AC2671A7742257A35431ED55286D36F.cer (raw, json)
Hash identifier:          ahUiKQNy7kD8lRwP7dkrcpZGuNCCG+c3BEWSbDvqfeU=
Subject key identifier:   18:44:D4:ED:4A:C2:67:1A:77:42:25:7A:35:43:1E:D5:52:86:D3:6F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       46CDAED8F1EDD3460AD84C0123BC603495EE76EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/2/1844D4ED4AC2671A7742257A35431ED55286D36F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 10:37:34 +0000
Certificate not after:    Fri 06 Mar 2026 10:42:34 +0000
Subordinate resources:    AS: 266484
                          IP: 170.83.168.0/22
                          IP: 2804:3888::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:cd:ae:d8:f1:ed:d3:46:0a:d8:4c:01:23:bc:60:34:95:ee:76:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 10:37:34 2025 GMT
            Not After : Mar  6 10:42:34 2026 GMT
        Subject: CN=1844D4ED4AC2671A7742257A35431ED55286D36F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:64:d6:81:e1:9d:23:be:62:c3:b4:54:23:af:
                    e8:de:84:b8:01:fa:be:e8:c6:37:a8:7a:96:e0:6d:
                    73:7e:18:c1:fc:be:7f:36:68:13:29:4f:6d:05:b0:
                    fe:0b:d2:a7:fe:db:78:45:42:5c:da:85:39:ce:2a:
                    0c:3a:a3:f8:40:92:df:e0:6a:b9:20:09:89:e4:5e:
                    c6:77:78:c8:ef:ae:77:65:a1:9a:83:99:7c:12:eb:
                    46:52:d0:d8:11:3c:fa:64:b0:74:8c:66:e1:4b:a2:
                    be:52:a4:0e:22:e1:7d:18:9f:92:4b:48:d6:e8:01:
                    bc:53:ef:a7:3e:21:5b:90:93:9e:d5:8b:37:8c:f1:
                    ef:2c:09:4c:1f:1c:1f:1d:56:5b:ec:8c:cc:eb:a0:
                    4b:c0:fd:93:22:f5:97:be:67:27:55:a0:e2:76:48:
                    82:e9:ed:f9:89:c4:e0:8c:c6:0d:9e:ec:7c:cd:34:
                    43:b7:f4:14:01:79:d6:4b:4a:80:79:65:ea:0c:a5:
                    e5:1e:b0:2b:f7:c2:84:7b:b2:75:01:e4:32:ac:dc:
                    cf:a7:7b:43:40:5d:f3:7e:e9:a0:4d:bf:de:6e:d8:
                    52:8b:fe:70:10:7f:d9:b3:3d:00:f7:b2:08:96:14:
                    d9:0c:38:8c:3f:d9:c2:71:20:be:0c:4e:5a:50:d0:
                    ac:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:44:D4:ED:4A:C2:67:1A:77:42:25:7A:35:43:1E:D5:52:86:D3:6F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9SPuevDRqkn9bvQviMcDGXwxRyK7KBCNoavhEfogZVt5/2/1844D4ED4AC2671A7742257A35431ED55286D36F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.168.0/22
                IPv6:
                  2804:3888::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266484

    Signature Algorithm: sha256WithRSAEncryption
         47:16:b5:57:3b:d6:a0:dc:39:3e:1e:59:62:38:73:a9:51:3d:
         8a:83:94:4a:7c:15:77:fd:9d:30:07:e6:3e:f0:87:9b:c6:91:
         df:b7:a8:15:06:59:ff:9f:63:c4:e6:7c:73:f5:2d:a6:05:a8:
         0b:1f:f2:d3:81:c4:01:d7:b3:3f:a6:08:8c:0c:08:cf:d7:c4:
         48:25:2a:7e:fe:68:5f:87:80:8a:bf:51:f4:b7:46:d1:eb:38:
         ef:ba:ac:78:a9:42:8e:2e:91:90:27:22:ea:5c:de:e0:a1:86:
         28:30:6b:50:1c:e3:41:8a:48:fc:ae:de:d6:da:2c:b1:0f:27:
         89:27:26:df:77:0c:c9:60:1f:70:29:b6:72:48:e4:00:7f:37:
         96:cf:a6:af:ba:a1:73:8f:01:b4:94:51:36:28:2f:5e:65:cb:
         0d:93:1b:f6:1e:72:31:97:c5:b8:30:02:f9:c3:55:6c:70:6e:
         a3:77:bd:04:7c:ed:bd:24:3f:df:cf:32:09:6f:41:7b:03:d8:
         ba:bb:74:98:ef:34:d2:41:49:e1:03:d5:4c:9e:48:8b:6f:f6:
         ee:c7:06:b3:fb:e6:09:90:b1:01:c1:a9:d3:bf:26:b3:59:f4:
         5a:2f:70:1f:0e:f8:7e:00:63:eb:f8:2b:e3:0b:97:31:a9:2f:
         2e:8f:ea:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:43 2025 by rpki-client