Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.cer
File:                     1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.cer (raw, json)
Hash identifier:          e46ejHSP+sXrhw5FkmFxZ6DAbd5Hgcjx1FapLXUdiKA=
Subject key identifier:   1B:17:47:FF:CB:5B:39:7A:C6:6D:00:BF:76:A4:03:AA:7D:0B:2D:DC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       674C4309C992C04B5F5ED8099AD4EAE7BAAF2410
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 22:11:51 +0000
Certificate not after:    Thu 05 Mar 2026 22:16:51 +0000
Subordinate resources:    AS: 268112
                          IP: 45.169.120.0/22
                          IP: 2804:5830::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:4c:43:09:c9:92:c0:4b:5f:5e:d8:09:9a:d4:ea:e7:ba:af:24:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 22:11:51 2025 GMT
            Not After : Mar  5 22:16:51 2026 GMT
        Subject: CN=1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a8:d6:3e:63:25:74:67:7c:93:ed:63:96:b0:
                    43:db:68:ed:df:c4:ce:f9:25:62:09:61:58:ab:71:
                    1d:d6:8a:97:34:7c:b5:a7:ab:ac:3a:5e:31:a1:6b:
                    28:d0:a6:8d:c4:9a:ab:19:64:61:ad:d0:3d:7c:38:
                    9e:75:2c:0c:19:a0:43:29:08:c3:d2:df:92:ec:bb:
                    21:03:66:dc:07:7c:f9:06:9a:f8:12:bd:f7:a1:ce:
                    7b:06:9e:5f:e6:43:55:50:67:e4:3a:42:e2:64:12:
                    d9:1c:a9:3a:8c:13:b1:fc:21:28:a3:8d:4e:06:38:
                    66:25:0e:2e:68:05:ec:1b:f2:1c:e9:f8:bd:62:2c:
                    15:78:82:ca:b0:0a:18:3b:14:6f:bb:54:c4:1b:bb:
                    f0:ba:75:5c:3b:27:ea:95:82:71:a1:84:96:4a:4f:
                    ef:40:5d:ad:e4:12:70:da:b7:82:62:af:76:e0:31:
                    9d:49:28:2a:0d:2d:4a:92:02:8f:8e:a0:19:92:47:
                    57:9e:1c:63:80:e9:c2:ef:ad:53:b3:25:79:6d:dd:
                    95:81:0a:94:ee:11:e3:96:44:b1:7e:a1:7c:0d:26:
                    25:c2:f5:c5:4a:2d:63:1b:c3:02:5b:08:f9:b2:3f:
                    17:26:3b:63:38:db:c7:af:01:95:6d:55:57:aa:00:
                    67:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:17:47:FF:CB:5B:39:7A:C6:6D:00:BF:76:A4:03:AA:7D:0B:2D:DC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7zPYBmAgXD9ojHGiVQP81u8z6ydX6a1zEHbZEuBbGpET/1/1B1747FFCB5B397AC66D00BF76A403AA7D0B2DDC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.120.0/22
                IPv6:
                  2804:5830::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268112

    Signature Algorithm: sha256WithRSAEncryption
         b3:aa:b3:e5:55:6c:56:e9:2f:61:98:79:13:25:7a:97:7a:36:
         b7:1f:c1:9c:4b:ed:c3:9f:74:1d:eb:e1:78:9a:ef:34:28:66:
         32:14:0a:c3:db:2a:42:0c:fe:c5:5a:da:e9:ca:c0:8c:32:b0:
         9f:af:5c:b3:2f:88:ea:a8:cc:0a:e2:4a:69:89:8f:84:8c:2f:
         17:76:6e:38:f4:28:ab:3d:c0:ab:ad:9d:d4:02:fa:a5:1f:7d:
         5b:0e:6b:10:b4:b3:5a:ee:01:f3:74:43:69:69:c5:cd:13:17:
         f4:59:69:ae:b8:c8:80:27:02:8d:bc:fe:3d:98:51:3c:ba:46:
         ad:68:67:06:2a:eb:a7:2d:b1:2c:ca:a8:f9:f3:85:f1:d2:af:
         9e:69:66:dd:4c:1e:ae:d4:3d:43:6c:78:b0:5c:74:09:57:4a:
         82:b0:81:ba:a2:47:ba:98:a4:21:7b:0b:d8:c0:81:59:c0:43:
         70:39:7e:aa:ef:3d:5e:43:1d:37:31:9a:86:21:78:93:50:bf:
         a0:b3:b3:df:a2:4b:4e:2a:92:04:f9:ec:f2:6d:2e:8a:3f:c3:
         76:98:a4:24:79:01:e6:34:df:81:dc:29:7c:da:61:a3:93:20:
         d6:ab:8f:01:21:0c:9f:fa:9f:e4:71:fa:44:49:51:d3:a2:96:
         ea:cf:a7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:16:27 2025 by rpki-client