Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.cer
File:                     1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.cer (raw, json)
Hash identifier:          bMwPnQ4dP3p3RO6VLHmA1+dnG4VpeFzH84GYS9ww2xY=
Subject key identifier:   1E:C1:90:95:7A:BC:0E:C0:43:2E:F4:8C:9B:CB:45:C8:19:82:D3:E7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       13B225E9BB4BF505AC1AB84F807F8B45CB378599
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Feb 2025 19:16:05 +0000
Certificate not after:    Wed 04 Feb 2026 19:21:05 +0000
Subordinate resources:    AS: 264162
                          IP: 138.97.116.0/22
                          IP: 2804:2370::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b2:25:e9:bb:4b:f5:05:ac:1a:b8:4f:80:7f:8b:45:cb:37:85:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  5 19:16:05 2025 GMT
            Not After : Feb  4 19:21:05 2026 GMT
        Subject: CN=1EC190957ABC0EC0432EF48C9BCB45C81982D3E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d4:6f:29:8a:8e:b7:ca:e0:c0:36:cb:6a:5e:
                    99:99:ce:eb:9e:13:17:37:40:da:52:57:fd:0c:e4:
                    14:d1:8d:23:17:bf:a4:5c:3f:a4:c1:3c:c1:96:8f:
                    eb:2d:52:9c:56:a7:f1:b8:45:f1:4b:8c:8b:ed:73:
                    7d:9f:24:37:9b:18:6c:4e:4f:2e:67:1a:a5:77:ae:
                    f0:40:6e:85:6a:de:cb:bd:b1:e6:00:c8:33:0f:9e:
                    06:3f:79:27:c9:df:52:d0:e8:d1:53:f7:99:47:c2:
                    9a:21:3e:b1:48:c6:b4:5a:ef:d5:f3:cb:73:ad:f0:
                    e2:a1:55:41:82:ed:b0:03:0d:a3:75:70:63:c3:93:
                    de:32:48:c6:65:52:58:31:66:fd:7d:b2:0a:8f:27:
                    11:56:fe:73:9c:0a:fc:71:82:0e:af:96:d9:f5:00:
                    c5:db:00:76:75:82:46:26:7e:70:b8:3c:f8:df:55:
                    76:0c:af:2b:e4:27:4b:ad:f8:ab:7a:dc:55:83:6f:
                    fe:68:d2:59:bd:37:2e:47:c5:44:f6:90:15:9d:e1:
                    a8:43:fe:fc:3e:f3:97:c1:b4:de:29:37:d6:7c:ef:
                    0a:f9:75:82:a2:17:6d:7e:a2:60:19:ce:11:4b:f4:
                    3f:36:05:e5:9e:6f:66:07:00:b1:11:f7:b5:f7:35:
                    84:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:C1:90:95:7A:BC:0E:C0:43:2E:F4:8C:9B:CB:45:C8:19:82:D3:E7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/1EC190957ABC0EC0432EF48C9BCB45C81982D3E7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.116.0/22
                IPv6:
                  2804:2370::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264162

    Signature Algorithm: sha256WithRSAEncryption
         20:f5:46:be:44:f8:49:d2:b2:7d:1a:a7:bb:9f:f7:c1:77:4f:
         5e:ab:16:6e:d8:40:fe:b2:1b:6d:ae:7a:3f:87:34:d4:d9:24:
         4f:a3:0d:de:2d:5c:e8:9a:92:30:c1:32:43:bc:69:4b:ba:7d:
         5e:ac:b4:9b:ce:85:38:78:47:bd:2f:31:b4:e2:04:d3:6c:1b:
         78:b6:b6:bc:ad:68:79:93:b2:02:61:74:1c:c1:f5:ea:da:38:
         cc:3a:9f:45:fe:65:35:ec:44:f3:a1:10:db:71:6d:c3:25:7c:
         bd:0e:44:27:25:67:0b:25:6a:63:7a:7a:22:cc:b6:3a:55:15:
         c2:f8:24:28:72:af:59:58:db:a2:4a:77:37:38:88:de:8a:69:
         c3:50:29:29:8e:cb:c6:3a:08:6c:57:d1:51:43:e6:5c:70:b3:
         93:16:56:e4:6e:a0:58:5b:45:09:25:47:60:48:2d:fd:f1:70:
         8e:0f:03:55:8b:16:50:88:fd:63:da:4f:80:0f:fc:90:5b:07:
         21:56:ae:f7:32:ef:a3:3d:bd:48:b7:ab:cb:2a:ea:5d:9c:d6:
         f1:63:cb:1b:59:b9:66:a0:20:ce:e9:92:16:ae:87:84:a6:02:
         a4:08:a1:6e:53:83:c5:a2:d2:32:22:9f:84:71:c5:37:73:ea:
         79:c0:71:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:03:07 2025 by rpki-client