Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer
File:                     1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.cer (raw, json)
Hash identifier:          K5WFo4v2tDLunTmlnBrcMpEPmeD30CiTypSVPhI9x6w=
Subject key identifier:   1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0B0ED279B1FB608DC5A52214C7B28CD1837172BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Mar 2025 15:15:28 +0000
Certificate not after:    Mon 23 Mar 2026 15:20:28 +0000
Subordinate resources:    AS: 61923
                          IP: 200.7.112.0/20
                          IP: 2804:1834::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:0e:d2:79:b1:fb:60:8d:c5:a5:22:14:c7:b2:8c:d1:83:71:72:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 24 15:15:28 2025 GMT
            Not After : Mar 23 15:20:28 2026 GMT
        Subject: CN=1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e6:60:7b:6d:c2:fd:e8:da:30:03:0e:3a:3f:
                    5f:96:d5:b4:31:bf:cb:c9:9f:1a:1a:48:6e:e2:0f:
                    e3:fc:e2:ee:86:10:65:fe:fa:4c:7c:54:67:1d:6b:
                    7a:3a:00:f2:96:52:d5:64:3f:84:dc:d0:90:8f:da:
                    f4:67:ad:67:fa:d1:b7:01:26:c8:e0:e6:a9:48:bc:
                    a1:aa:b5:c7:16:14:24:e9:38:4a:f0:c6:20:85:02:
                    ba:30:10:eb:49:73:b7:95:10:ce:67:91:28:fb:89:
                    6f:b6:7b:10:12:96:fa:a9:5d:80:00:d6:b7:c8:69:
                    d2:0f:16:b7:21:69:bf:25:f9:b2:29:8b:a4:43:23:
                    9b:ba:90:c2:2f:b8:4b:61:01:a1:13:12:5b:33:f1:
                    a5:c2:66:3e:f9:ad:a0:66:40:8c:67:d4:af:f0:2f:
                    88:b9:38:46:17:c9:11:26:34:4d:2c:88:a5:c2:0f:
                    d7:72:7d:18:15:0a:f7:6b:cd:a3:4f:f2:83:f8:bf:
                    96:b4:38:94:34:29:30:78:5c:8c:58:06:7e:07:4d:
                    31:16:9c:0e:6c:30:27:3c:86:b1:c9:96:27:a5:ed:
                    da:a1:32:4c:00:2e:a9:08:51:1b:6f:6a:8f:cc:77:
                    47:ba:52:2d:7e:ad:80:b5:f3:c6:dd:87:d3:12:c8:
                    fe:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1F:5F:83:1E:98:83:AE:F8:B7:6D:A1:94:A1:E5:C1:DF:07:17:D3:E1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/57YxAvisDSaBiYdvYgzDFTAtx3dsRbjqZV7QbLX6ump1/0/1F5F831E9883AEF8B76DA194A1E5C1DF0717D3E1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.112.0/20
                IPv6:
                  2804:1834::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61923

    Signature Algorithm: sha256WithRSAEncryption
         5c:9d:93:04:3d:24:0c:44:ab:31:79:c7:41:54:9e:12:2f:81:
         0c:98:92:1a:a7:1c:af:ff:7f:c9:b4:0a:0b:fb:bd:57:81:c7:
         a6:e4:59:37:af:26:f2:ff:50:25:9e:7f:5c:69:5f:01:cd:c6:
         2f:61:ed:b5:fd:b0:61:ac:57:e5:b4:98:a7:d6:ae:16:80:31:
         06:a1:62:68:fa:b7:5d:89:d1:f5:a6:5b:91:51:91:b8:3c:75:
         3f:d6:7a:b5:b5:2d:71:c8:fb:a1:0e:1e:e9:be:f2:0b:d5:64:
         57:34:42:0f:11:fb:1b:2c:17:e1:54:5f:ba:a2:98:de:ce:f8:
         8b:b9:fb:06:20:1c:db:69:7c:7c:cf:ae:cc:25:10:86:31:68:
         20:66:f0:9b:cf:9b:ef:42:7a:fe:43:af:06:d4:ae:75:cd:59:
         ab:9b:95:dc:66:4a:7c:4b:66:1c:56:e7:15:44:a6:b4:bf:76:
         09:71:ed:00:e0:d9:27:55:ed:d9:12:cf:ca:45:ba:23:58:98:
         b3:a9:12:09:31:0b:12:21:06:dc:fc:f0:b0:04:ab:f0:ec:5d:
         65:a1:37:59:93:33:bf:4f:ac:7a:26:81:d4:2c:37:6c:39:7b:
         c2:48:92:86:60:53:d3:fb:a8:44:d4:10:e4:a5:bd:64:31:71:
         c7:c3:8c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:49:49 2025 by rpki-client