Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1D3FD06C04B646AC6073A692F99CCB5C18448248.cer
File:                     1D3FD06C04B646AC6073A692F99CCB5C18448248.cer (raw, json)
Hash identifier:          YgGK6Htil/zIpsaLXPPoF+P/0mq9fgSuKdibpd2wkPE=
Subject key identifier:   1D:3F:D0:6C:04:B6:46:AC:60:73:A6:92:F9:9C:CB:5C:18:44:82:48
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       19BC498DE565F51B2A582AD1188BD035FCCDE781
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1D3FD06C04B646AC6073A692F99CCB5C18448248.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Nov 2024 07:15:28 +0000
Certificate not after:    Thu 27 Nov 2025 07:20:28 +0000
Subordinate resources:    AS: 269566
                          IP: 45.188.8.0/22
                          IP: 2804:6688::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:bc:49:8d:e5:65:f5:1b:2a:58:2a:d1:18:8b:d0:35:fc:cd:e7:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 28 07:15:28 2024 GMT
            Not After : Nov 27 07:20:28 2025 GMT
        Subject: CN=1D3FD06C04B646AC6073A692F99CCB5C18448248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a6:39:12:ae:ec:27:5c:89:64:55:f4:3e:92:
                    d7:88:73:60:e0:11:c8:ed:60:71:c6:06:7d:82:df:
                    d0:f0:b9:67:14:fc:77:08:5e:1b:c1:7c:fa:77:36:
                    8f:01:fe:da:d0:de:42:98:21:5c:64:54:16:0c:a6:
                    87:c8:87:7d:20:f0:16:85:36:84:90:ce:87:5b:99:
                    7e:6e:92:35:bc:29:9d:af:6f:96:c6:47:87:bd:e6:
                    fb:ba:54:43:ce:29:16:ad:ae:1f:c9:66:ae:61:a8:
                    18:f0:0a:df:88:06:bd:52:59:7a:37:eb:16:88:56:
                    17:3a:be:87:f4:63:78:d4:94:cd:f9:85:96:7a:02:
                    5c:03:3f:f6:fb:96:bf:66:82:f4:1f:e4:d4:e9:a4:
                    7a:3b:75:42:14:a6:93:ac:19:8c:d3:ec:c9:47:f8:
                    d2:e8:49:56:8a:07:e2:1a:72:b3:77:72:63:2f:e4:
                    00:00:86:45:36:a6:4e:ad:5b:dd:da:b8:a9:55:68:
                    dd:ec:54:57:17:2a:f3:20:3f:d5:49:7b:b8:00:57:
                    93:12:fc:7d:9f:24:e7:f2:2e:01:f3:62:e1:ac:98:
                    37:f7:b1:95:e0:ed:24:7c:8f:50:92:50:3a:65:6d:
                    4a:d9:82:66:4f:be:d1:2b:39:0f:0c:52:f8:4e:99:
                    51:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1D:3F:D0:6C:04:B6:46:AC:60:73:A6:92:F9:9C:CB:5C:18:44:82:48
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/1D3FD06C04B646AC6073A692F99CCB5C18448248.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.8.0/22
                IPv6:
                  2804:6688::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269566

    Signature Algorithm: sha256WithRSAEncryption
         9b:ac:f6:a0:20:99:8c:82:36:a5:81:a7:40:cd:38:49:b8:2a:
         b7:dd:70:72:c5:5b:2c:f8:f1:34:e6:30:43:76:6e:85:3c:3b:
         d0:41:89:79:f6:7d:66:f2:7b:b3:ca:8e:02:0c:a6:08:a0:ea:
         56:03:06:14:a1:d0:f6:83:7c:27:8f:14:2a:9f:9a:a0:79:8d:
         d7:8f:9e:6c:c7:41:47:fc:ac:e9:4e:62:23:b2:ef:be:d7:83:
         47:66:e5:49:c7:08:ae:f2:cc:64:52:66:61:e3:91:26:81:d1:
         d1:2b:03:1d:ba:13:3a:14:71:e8:40:87:53:1d:d8:e1:92:0b:
         07:3a:3a:0b:4f:fb:73:e4:98:c1:1f:88:d1:25:7f:8a:87:44:
         12:e1:1e:1f:a9:3d:39:77:c5:df:58:cf:87:47:19:b8:a2:fc:
         ca:e0:49:1a:e2:32:68:9f:a0:7d:f5:26:c0:fa:3c:e8:2c:04:
         ba:b1:cf:15:1b:80:70:9b:65:80:67:63:33:b2:9a:ec:ee:96:
         7d:d2:65:75:62:dd:11:84:b5:e5:70:df:68:e0:b8:e8:4d:96:
         fb:56:4d:04:5b:a6:7f:4b:ba:f7:06:cf:62:2f:32:af:48:60:
         58:71:95:06:92:5a:fb:67:12:51:fe:ff:47:31:63:ec:32:55:
         59:69:3d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:47 2025 by rpki-client