Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.cer
File:                     1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.cer (raw, json)
Hash identifier:          CMwrLeBSJykGewbs8+lEjR/VPKZnEOT6KGD7zUU8W3c=
Subject key identifier:   1B:28:49:50:95:49:89:8D:2F:C8:5F:41:A2:D1:FE:7B:3C:5F:8D:8F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4C927CF1868EFCD34CD2E192818933654B72F316
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 02:56:14 +0000
Certificate not after:    Fri 06 Mar 2026 03:01:14 +0000
Subordinate resources:    AS: 268109
                          IP: 45.168.128.0/22
                          IP: 2804:5824::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:92:7c:f1:86:8e:fc:d3:4c:d2:e1:92:81:89:33:65:4b:72:f3:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 02:56:14 2025 GMT
            Not After : Mar  6 03:01:14 2026 GMT
        Subject: CN=1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dc:5b:23:96:97:0e:5a:ba:26:7d:1b:29:82:
                    25:6f:67:e4:df:40:a9:ad:e9:ad:a4:16:3e:d0:85:
                    c7:e6:c0:f1:f7:74:92:e1:ae:20:19:ea:16:0e:d0:
                    19:89:a6:75:08:41:03:40:dc:8c:db:1a:65:ff:fe:
                    f3:f4:ca:60:c4:35:d4:ff:94:86:28:c7:4b:e2:8b:
                    46:f7:93:4e:46:b1:70:c0:2b:02:bf:f4:bf:79:79:
                    fb:4c:0c:57:11:d4:61:3d:a0:b6:b7:ee:c1:d8:e8:
                    49:e9:fd:0f:bc:47:53:70:d4:46:c7:e6:a2:a7:e6:
                    1c:f8:1b:cf:14:0b:a7:83:7c:6c:23:a1:5c:c2:96:
                    78:54:8f:ec:c4:9f:ce:96:a4:6d:44:5b:bf:19:c9:
                    2d:74:fe:3a:5e:ff:e2:49:de:83:5e:b8:14:4d:20:
                    b4:c7:7a:d4:e2:e7:4d:68:ec:5c:d0:0f:44:5a:24:
                    6e:4b:dc:f3:47:14:1b:64:de:a5:f8:6c:35:be:ec:
                    68:7b:29:c7:75:f0:6a:f8:80:07:55:01:3a:23:e7:
                    5d:01:36:a1:4b:3d:6e:cf:f2:39:1e:0b:15:c6:29:
                    6a:9a:d5:cf:71:7f:3a:96:63:30:61:99:3d:71:e7:
                    13:d3:9a:68:31:49:54:18:f9:12:42:76:a7:f4:87:
                    e2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:28:49:50:95:49:89:8D:2F:C8:5F:41:A2:D1:FE:7B:3C:5F:8D:8F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/2/1B2849509549898D2FC85F41A2D1FE7B3C5F8D8F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.128.0/22
                IPv6:
                  2804:5824::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268109

    Signature Algorithm: sha256WithRSAEncryption
         85:b5:53:e0:22:f9:40:0f:0c:43:01:ac:41:dd:ae:82:dd:20:
         ed:35:ba:e2:cf:30:80:d6:15:2d:61:03:1e:87:c1:a2:f2:10:
         8a:33:2d:02:8d:28:c5:10:a8:a5:8e:5d:9b:1f:a4:43:31:d6:
         84:e6:87:52:53:2d:e3:22:49:fc:cb:4a:c3:2d:b9:1b:f0:2a:
         2f:85:cf:49:66:bd:ab:0a:f3:a5:1e:55:0b:ac:ff:a5:fd:90:
         82:72:86:20:55:09:02:10:de:cb:ab:7b:08:aa:5b:46:6c:e5:
         7f:4f:c4:5d:b6:74:9d:d6:46:94:22:a3:c2:3c:e9:24:79:03:
         42:38:3e:f6:09:6f:78:36:df:d1:27:01:10:14:38:bd:29:3a:
         06:33:41:07:d9:9f:05:50:b0:99:8e:13:6d:36:42:29:bd:89:
         a3:93:f0:1e:ea:35:d3:7b:58:3d:a8:e3:03:9c:65:7b:d1:35:
         98:90:3a:9c:1c:c7:27:1b:9e:23:b7:c6:9f:3a:14:53:32:19:
         b3:01:14:85:30:c2:bd:8a:e2:ef:05:cc:8d:fa:5c:54:78:60:
         30:cf:b7:8c:8b:c4:23:d5:15:dd:08:6a:1b:65:70:21:01:e7:
         df:4c:88:b3:b0:57:fb:68:c6:bb:40:7f:b2:de:af:18:10:1b:
         bd:ba:86:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:40:50 2025 by rpki-client