Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF.cer
File:                     19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF.cer (raw, json)
Hash identifier:          NChAzC+m8n7cawdnNlUUxceg4A3S5u2rOS5MPWa/v8Q=
Subject key identifier:   19:B3:6D:8A:4C:D1:CC:FD:D6:E2:CC:4D:FC:B2:5E:56:07:6E:11:CF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3B112B52AF2844C083EBFD52C29020A3F34477FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6pZLitfNN4JYcawpV3etEDeg7WeNVvNt4T5iWeb7oQW/0/19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6pZLitfNN4JYcawpV3etEDeg7WeNVvNt4T5iWeb7oQW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Mar 2025 12:30:57 +0000
Certificate not after:    Wed 11 Mar 2026 12:35:57 +0000
Subordinate resources:    AS: 270322
                          AS: 273312
                          IP: 45.224.0.0/23
                          IP: 207.191.160.0/22
                          IP: 2804:6a40::/32
                          IP: 2804:8ca0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:11:2b:52:af:28:44:c0:83:eb:fd:52:c2:90:20:a3:f3:44:77:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 12 12:30:57 2025 GMT
            Not After : Mar 11 12:35:57 2026 GMT
        Subject: CN=19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e7:57:52:3b:8b:ec:bf:18:39:da:15:d7:a3:
                    80:66:b4:73:3f:b2:f8:63:bc:2b:65:c3:be:4f:89:
                    08:ca:22:ea:e8:74:a0:6a:15:81:d8:06:c1:6f:ce:
                    7c:12:b1:18:98:2c:67:9b:c7:72:03:61:d0:c4:22:
                    61:47:e8:bb:a9:2c:46:08:85:72:22:61:8b:3c:ab:
                    63:50:9b:c8:53:1c:67:8c:3a:6f:21:4e:1e:b0:62:
                    4e:0c:04:82:88:4f:0a:66:46:ee:4d:8d:a7:58:91:
                    64:0d:bd:f4:fa:8d:f1:21:4d:50:49:4e:1a:b7:c1:
                    a3:98:83:f7:52:91:3a:aa:b5:5b:9a:bb:93:6c:3f:
                    7d:b6:d3:98:b8:b5:1f:a1:53:b7:21:ca:ee:63:45:
                    0d:cd:96:1d:c8:22:cb:51:cd:13:5e:80:8b:0e:56:
                    57:f7:e5:2c:62:8f:4c:e5:9a:df:a4:eb:63:67:7b:
                    d0:49:5d:76:2c:cd:c9:54:f7:b4:b2:5b:d3:7f:f3:
                    f7:5b:10:5f:d2:ef:dd:a7:d3:e2:4b:17:8e:b6:79:
                    b8:59:1c:12:67:cf:5d:18:a9:ec:86:7e:47:b6:93:
                    8c:a8:a7:78:18:36:d4:2d:56:85:78:23:1f:c5:1d:
                    d9:3d:8a:82:90:74:3e:e4:5e:48:0f:48:3e:d3:81:
                    61:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:B3:6D:8A:4C:D1:CC:FD:D6:E2:CC:4D:FC:B2:5E:56:07:6E:11:CF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6pZLitfNN4JYcawpV3etEDeg7WeNVvNt4T5iWeb7oQW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6pZLitfNN4JYcawpV3etEDeg7WeNVvNt4T5iWeb7oQW/0/19B36D8A4CD1CCFDD6E2CC4DFCB25E56076E11CF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.0.0/23
                  207.191.160.0/22
                IPv6:
                  2804:6a40::/32
                  2804:8ca0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270322
                  273312

    Signature Algorithm: sha256WithRSAEncryption
         4e:36:61:94:03:87:d4:05:20:dd:e8:18:8a:7c:74:10:38:c9:
         97:c9:b0:eb:14:fe:0c:39:ed:41:d3:92:88:95:87:44:0e:a9:
         f0:a8:1b:c2:8e:17:89:24:1d:d3:ec:a5:72:09:61:46:de:72:
         5a:49:8a:6d:3a:8b:67:d0:3a:2d:71:0e:ba:04:5c:18:08:3f:
         08:d2:1b:aa:3f:4a:6f:32:bb:fa:c0:70:56:8c:ea:52:3d:33:
         c3:13:78:73:f7:b5:f4:fd:01:c5:4b:20:9f:d5:3c:8b:39:5d:
         60:7a:d6:1a:10:86:ed:f8:26:66:61:f1:04:7e:f6:29:ab:28:
         47:57:7a:c3:49:2f:73:39:8e:02:ee:55:11:30:f3:e2:65:d9:
         1b:f3:6a:db:da:c4:7d:cc:96:9d:dc:01:1a:76:85:fd:92:02:
         ee:10:a3:2b:36:4c:5e:f6:3a:ec:12:65:c9:68:02:7a:aa:1a:
         10:d2:40:c2:ad:2f:ed:f9:a9:5c:70:25:03:d0:aa:14:e7:f1:
         46:9c:b6:8f:88:75:24:8b:37:12:50:b8:8e:3a:45:cd:bc:5c:
         65:12:57:e1:15:36:00:f1:33:20:a8:e0:45:17:c6:23:4d:aa:
         c5:5a:f0:fa:4b:46:df:36:de:7d:fc:16:7b:72:13:37:f1:76:
         4a:1b:15:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:41:31 2025 by rpki-client