Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.cer
File:                     1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.cer (raw, json)
Hash identifier:          k3PULuuiG9GX7ottaU/AFUnJwvA5H7gMzS+aLdJWl1U=
Subject key identifier:   1C:C1:EE:9A:E9:7E:45:FC:6B:92:8D:D7:2B:A1:6A:D8:B8:92:AD:C6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       55BFB9AA55D674C69685F0ACCE06C9E9A1A1E88E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 06:39:32 +0000
Certificate not after:    Thu 05 Mar 2026 06:44:32 +0000
Subordinate resources:    AS: 267594
                          IP: 45.70.188.0/22
                          IP: 2804:43d8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bf:b9:aa:55:d6:74:c6:96:85:f0:ac:ce:06:c9:e9:a1:a1:e8:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 06:39:32 2025 GMT
            Not After : Mar  5 06:44:32 2026 GMT
        Subject: CN=1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d8:31:b7:78:e9:1e:d0:6c:1d:4c:b0:0b:76:
                    bc:5c:6b:cb:4c:8b:36:bf:35:c4:9d:d1:40:da:e1:
                    a1:18:b2:e7:64:a0:1a:4c:22:6c:60:14:18:19:d0:
                    11:d7:2d:bf:10:ce:75:f8:76:5c:73:a1:0f:c9:83:
                    50:2e:42:23:39:42:5f:89:87:fc:cd:45:70:4b:05:
                    8d:cd:8e:ed:a7:bd:3b:68:cd:b8:37:d1:e5:96:a9:
                    49:25:b1:56:59:cb:a3:7d:34:53:c8:9f:bc:7d:8f:
                    87:dd:3d:a0:a5:5b:ed:16:2b:5d:2f:55:cc:65:49:
                    e0:1b:d9:bf:b2:24:63:8d:4f:12:b4:51:2f:b9:95:
                    a1:20:0e:b0:d1:b2:c5:61:1b:aa:ec:87:3c:97:ad:
                    87:d4:64:46:26:7e:d0:00:9b:08:a3:db:cf:24:59:
                    6b:5b:be:e3:aa:dd:b6:64:32:b3:9e:30:6f:8b:13:
                    ed:c1:4b:7f:ce:26:ae:30:4c:ae:e8:72:bb:6b:6b:
                    8e:45:e6:81:b9:7a:01:f9:ec:c0:33:3f:53:be:1c:
                    cb:8f:32:c7:eb:20:b8:a8:bc:80:1e:f0:c7:ed:2a:
                    98:2f:f5:d0:e0:9f:9f:d0:22:c1:04:a5:7b:a0:b8:
                    5d:db:b3:8f:d0:61:0e:4b:94:c0:8d:af:91:8f:35:
                    7a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:C1:EE:9A:E9:7E:45:FC:6B:92:8D:D7:2B:A1:6A:D8:B8:92:AD:C6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/1/1CC1EE9AE97E45FC6B928DD72BA16AD8B892ADC6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.188.0/22
                IPv6:
                  2804:43d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267594

    Signature Algorithm: sha256WithRSAEncryption
         71:a7:ed:c7:aa:5a:88:c7:fb:e9:46:be:82:1d:93:13:e8:68:
         6e:f3:26:0d:50:30:93:c2:aa:69:f8:a2:b5:b1:3c:af:e3:af:
         06:27:b5:a9:1b:0f:ea:b4:be:6c:4a:47:d9:58:01:69:12:2a:
         b6:05:83:af:69:c6:6b:11:2c:27:0c:48:4a:3c:c1:65:9a:0e:
         f8:4a:24:17:51:2f:a4:90:a7:2d:5f:df:20:b8:c6:0e:88:fd:
         c3:2c:bc:37:13:45:b7:f4:81:2c:b3:8c:62:f0:2e:ac:6d:a8:
         da:1f:b9:3e:25:fd:cc:db:70:b7:3b:b0:5a:31:10:61:2f:18:
         27:68:e0:d4:3c:c6:11:c5:1c:8a:17:e9:ef:e7:2a:c3:35:ee:
         1d:81:0f:57:e8:15:18:1f:64:3c:59:46:ef:3d:77:32:fc:5d:
         b0:e2:54:75:eb:aa:2a:79:ea:d8:0c:2e:57:a1:a0:f7:be:5d:
         cb:0c:f9:68:0c:19:20:c3:d5:8c:3a:68:3d:f5:d4:23:67:52:
         a2:9c:c4:94:b4:16:4d:bc:ad:ae:7f:f6:aa:c2:76:95:9f:2f:
         ef:3f:24:dc:33:c1:b6:32:07:3e:7f:81:dd:1e:e0:d9:60:fa:
         26:81:5f:b9:d6:fe:6f:49:44:1f:79:6b:56:63:f9:b3:76:f2:
         35:85:59:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:07 2025 by rpki-client