Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.cer
File:                     1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.cer (raw, json)
Hash identifier:          o9XRV/IgwS8hF39BRFl5N1oVT3mU6q4h6FQBJ35OpHw=
Subject key identifier:   1B:5F:B0:5E:56:AF:1D:22:5D:A4:F5:3C:CF:F3:A9:43:66:D9:36:15
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7ECD35701FAFE512BA17AF445F90C22FAA359C01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Jan 2025 11:41:26 +0000
Certificate not after:    Fri 16 Jan 2026 11:46:26 +0000
Subordinate resources:    AS: 266457
                          IP: 170.82.200.0/22
                          IP: 2804:381c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:cd:35:70:1f:af:e5:12:ba:17:af:44:5f:90:c2:2f:aa:35:9c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 17 11:41:26 2025 GMT
            Not After : Jan 16 11:46:26 2026 GMT
        Subject: CN=1B5FB05E56AF1D225DA4F53CCFF3A94366D93615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:5e:33:08:d1:29:6d:5d:6d:64:e8:60:ad:
                    cf:c1:da:eb:66:cf:8a:3a:0a:57:50:48:84:53:b6:
                    96:af:42:32:2e:da:8e:df:90:50:8e:17:59:bc:f4:
                    d5:b7:23:7a:1c:d4:6b:d4:3f:0a:be:c5:1e:06:4c:
                    29:fc:99:50:75:66:98:0a:d7:f5:89:5e:39:44:25:
                    d1:5c:2f:4c:42:c4:81:cd:f4:fd:f3:2b:be:21:26:
                    83:4f:7f:73:1f:a5:64:7f:07:2f:9e:c1:65:3d:c2:
                    60:7b:46:a1:a0:bc:41:cb:40:b1:82:db:0e:ee:71:
                    8e:75:df:b7:57:ae:71:68:6a:a2:4c:29:5a:4b:c3:
                    36:1c:c7:3d:60:49:4e:03:04:78:68:d6:6b:e0:e4:
                    d2:37:c0:b6:11:c0:05:1b:23:39:47:7a:9f:eb:62:
                    b0:1b:4a:b2:41:46:5e:cb:8b:21:0f:32:3d:47:4c:
                    ae:d0:f2:3a:23:a7:d0:aa:f4:4b:3f:cf:40:17:33:
                    41:84:80:63:66:a5:34:d1:67:6a:2b:ab:ed:05:57:
                    af:8e:bb:a0:16:c4:7c:f6:a4:81:d3:2d:6c:5d:58:
                    06:f7:ac:5a:72:33:4d:30:3b:78:ce:a6:e5:e5:9a:
                    66:a6:75:f4:d3:fb:12:46:41:66:dc:a5:a6:97:13:
                    97:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:5F:B0:5E:56:AF:1D:22:5D:A4:F5:3C:CF:F3:A9:43:66:D9:36:15
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A7hXZ1nf6E4G7r9xxPnDe5iRELrEzJHgyNLRwWPxMSV9/0/1B5FB05E56AF1D225DA4F53CCFF3A94366D93615.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.200.0/22
                IPv6:
                  2804:381c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266457

    Signature Algorithm: sha256WithRSAEncryption
         25:36:1c:cd:3a:1f:8a:24:f9:68:7c:b9:7a:44:c2:fb:b0:e4:
         6b:5b:d1:14:50:2e:fb:1c:fc:91:4a:03:87:21:69:62:ea:d9:
         4f:1b:f0:ac:8c:87:e3:80:f6:1c:5a:9d:b6:00:4e:8f:be:d1:
         45:83:c6:43:21:34:e8:6a:b9:00:17:a3:88:c8:f9:82:17:29:
         9d:e1:a8:e0:87:90:ee:20:ad:de:99:ac:2a:a1:0b:d2:6d:6c:
         ef:b8:77:67:a5:00:50:a3:19:a3:c1:6b:21:36:e2:ef:5c:fb:
         41:9a:02:3d:9f:fc:5f:fc:ca:db:e2:a4:58:0d:c2:43:4f:d1:
         90:36:d0:4e:fa:94:fa:57:fb:dd:64:aa:33:ff:97:72:02:07:
         a1:70:1b:f2:d1:ab:a2:24:9a:60:62:43:fa:3a:d2:47:f1:21:
         2b:5d:3a:2a:b4:42:2e:07:a8:f8:30:f2:eb:cb:cb:e3:9a:cb:
         de:b9:76:e1:b9:68:90:5d:30:fd:9e:7c:29:e8:05:4b:b8:b8:
         5f:f0:70:79:68:8e:78:06:91:54:bb:4c:9b:e2:ce:46:54:dd:
         14:df:63:90:86:01:5d:00:fc:5b:17:1b:3b:80:03:f6:4e:dd:
         97:76:a5:7d:d0:39:b1:c2:b4:c6:ee:57:7f:75:6a:6d:53:6e:
         48:42:5b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:14 2025 by rpki-client