Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/195B0E672501530A4C74BA0517CBCD60842BBBC9.cer
File:                     195B0E672501530A4C74BA0517CBCD60842BBBC9.cer (raw, json)
Hash identifier:          8YpuiTg4EyzXN/Yb8jnxw4WKRgGwMx2NgeQ95Snh80Y=
Subject key identifier:   19:5B:0E:67:25:01:53:0A:4C:74:BA:05:17:CB:CD:60:84:2B:BB:C9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7923F2C56A8EB48F114BC54A5063AA3C9C741A82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/195B0E672501530A4C74BA0517CBCD60842BBBC9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Feb 2025 12:36:51 +0000
Certificate not after:    Tue 17 Feb 2026 12:41:51 +0000
Subordinate resources:    AS: 265378
                          AS: 271404
                          IP: 168.194.44.0/22
                          IP: 181.189.28.0/22
                          IP: 2804:3328::/32
                          IP: 2804:7afc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:23:f2:c5:6a:8e:b4:8f:11:4b:c5:4a:50:63:aa:3c:9c:74:1a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 18 12:36:51 2025 GMT
            Not After : Feb 17 12:41:51 2026 GMT
        Subject: CN=195B0E672501530A4C74BA0517CBCD60842BBBC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d5:a4:e9:79:0c:0b:3e:14:5f:ba:3f:03:18:
                    c6:3c:30:bd:55:a8:82:20:52:64:e6:04:9d:3f:06:
                    30:dd:68:2e:50:cb:b9:bd:ea:94:49:aa:c3:b3:c8:
                    a0:34:76:ba:10:71:88:4c:fe:86:94:5f:56:85:f0:
                    15:dc:ca:f5:04:84:30:39:5c:4d:30:29:9d:33:23:
                    2e:77:9d:f1:d2:33:b4:57:ca:24:19:c0:4f:44:94:
                    7c:d7:83:d1:20:3c:16:33:02:42:05:92:33:ec:05:
                    01:f7:d6:a5:00:d9:66:c7:13:f6:9f:90:a5:c6:da:
                    10:0f:7d:ff:70:f2:1a:33:fb:0b:af:b8:1d:bc:c6:
                    89:70:3f:e0:f7:7c:6b:58:18:44:af:97:75:1a:af:
                    34:60:17:02:75:f0:3a:72:dd:8b:b5:c2:79:96:6e:
                    35:fe:03:ff:5b:33:88:ae:a9:46:6f:42:bc:57:55:
                    7b:1a:61:92:d4:b5:10:5c:7b:cb:7f:c7:f0:86:4b:
                    39:31:09:e1:86:05:71:13:8a:79:e2:37:dc:1c:a2:
                    44:fa:63:fb:4f:09:5f:37:15:84:7c:63:5d:1c:8f:
                    1f:58:53:df:08:fa:86:cc:bf:1e:14:63:ec:96:ff:
                    44:38:3b:c6:b5:80:fe:40:14:f3:bc:43:94:f4:c4:
                    5c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:5B:0E:67:25:01:53:0A:4C:74:BA:05:17:CB:CD:60:84:2B:BB:C9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BiakSyNrt4VxcXfTgzfij2yWr5NNF5EjRiJpZsXjirfR/0/195B0E672501530A4C74BA0517CBCD60842BBBC9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.44.0/22
                  181.189.28.0/22
                IPv6:
                  2804:3328::/32
                  2804:7afc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265378
                  271404

    Signature Algorithm: sha256WithRSAEncryption
         a0:86:d0:54:48:56:0b:d1:66:0c:bc:12:38:10:de:87:f1:d4:
         e5:32:b4:a6:f3:6d:c1:83:fa:58:0f:bb:a6:13:48:64:c0:3b:
         d2:87:0a:44:34:49:0a:4b:c7:c8:39:dc:cb:7c:7a:58:4f:b7:
         85:33:d1:4c:a9:21:f7:e6:68:6c:d5:a6:58:d5:06:6e:b9:c4:
         b5:30:64:14:ed:f4:15:fe:a5:02:1a:8c:78:76:52:56:cb:dd:
         87:7b:88:65:b2:7d:99:71:b4:c7:fa:b0:96:1a:a5:b2:93:7e:
         fc:d8:07:5a:80:ac:78:07:ee:c9:f6:62:50:31:fd:4a:f8:72:
         52:de:c3:d3:28:3d:e3:45:69:5e:59:04:6e:19:61:c2:5a:4e:
         20:47:57:c0:bb:02:3c:a0:4d:86:d8:40:f4:d8:00:dc:33:39:
         d9:b3:aa:39:27:9c:a0:ed:0c:bc:f5:8b:4e:68:cb:ce:a7:ed:
         f2:f9:46:70:b1:e2:01:f6:91:cc:01:e7:8c:bb:e9:bb:ca:2b:
         ab:64:d9:89:2f:14:44:0d:3a:2b:94:9a:34:18:16:ff:2e:e0:
         2a:4f:75:0a:ad:b3:7c:25:9d:75:1e:e4:dc:66:58:6a:84:fc:
         b7:15:45:ab:bf:20:15:8e:c2:62:f7:99:fd:80:41:55:3d:c6:
         e6:a9:f1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:20:52 2025 by rpki-client