Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/201858301640DA230EDCEE272F949CD407A471E7.cer
File:                     201858301640DA230EDCEE272F949CD407A471E7.cer (raw, json)
Hash identifier:          jJCX6+q2Q87Bun1PrccF3TC4E2fTVYotDU74ncmc1eo=
Subject key identifier:   20:18:58:30:16:40:DA:23:0E:DC:EE:27:2F:94:9C:D4:07:A4:71:E7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       55A69BF3873947B65B006F5A48B61D8DC2454C78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/201858301640DA230EDCEE272F949CD407A471E7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Feb 2025 00:36:24 +0000
Certificate not after:    Tue 24 Feb 2026 00:41:24 +0000
Subordinate resources:    AS: 266961
                          IP: 45.226.72.0/22
                          IP: 164.163.104.0/22
                          IP: 2804:4600::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a6:9b:f3:87:39:47:b6:5b:00:6f:5a:48:b6:1d:8d:c2:45:4c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 25 00:36:24 2025 GMT
            Not After : Feb 24 00:41:24 2026 GMT
        Subject: CN=201858301640DA230EDCEE272F949CD407A471E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4b:08:2b:a7:65:9f:4b:a4:1a:a2:e6:3b:fe:
                    31:c4:50:9e:1b:ff:2a:b8:2b:32:d0:43:7e:01:0e:
                    62:6c:2e:4b:cf:31:c9:76:40:52:b6:1d:23:e9:0f:
                    e6:d3:19:ee:95:f4:da:19:36:45:b1:33:1a:90:cc:
                    1d:11:5f:0e:67:93:14:57:37:ab:ad:ba:c5:12:cc:
                    60:1d:7f:b6:1f:1e:28:30:f0:49:44:9c:10:19:ae:
                    87:51:f7:b7:14:d9:3a:42:01:98:f2:7d:f9:75:d2:
                    7b:c2:f9:0c:8b:ab:72:d2:ed:c5:13:61:ec:b2:a3:
                    b5:78:02:76:d8:1d:ae:30:54:91:4b:2a:e7:55:6d:
                    69:c1:40:3c:f7:35:e8:87:f7:61:6e:0a:88:54:82:
                    3d:05:81:6f:b8:f2:12:d9:f6:19:7a:ea:73:0a:fd:
                    89:09:2f:52:cd:d3:90:04:ac:d0:d9:5a:ac:54:fb:
                    b9:19:64:ae:57:ce:42:63:d2:7a:50:b6:61:bb:45:
                    89:1a:e7:63:5a:b5:89:1d:ae:03:27:2a:17:a0:79:
                    10:f4:ac:a6:05:5e:96:53:29:f9:92:02:58:63:37:
                    bb:0d:62:ff:dc:76:c9:23:1d:b4:ae:6a:39:0a:3d:
                    66:4d:04:4c:8c:45:84:71:84:55:6f:ec:bf:09:10:
                    90:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:18:58:30:16:40:DA:23:0E:DC:EE:27:2F:94:9C:D4:07:A4:71:E7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5S7qMU9nE3MgnsHpgvwmtuh3RHGPqLTg8PcBa4TQfGby/0/201858301640DA230EDCEE272F949CD407A471E7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.72.0/22
                  164.163.104.0/22
                IPv6:
                  2804:4600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266961

    Signature Algorithm: sha256WithRSAEncryption
         8e:3a:c9:ad:e2:f3:2b:ee:d8:8f:72:67:7b:d9:d3:1d:3b:3b:
         20:15:b4:7c:91:b8:00:b6:4a:a8:f7:1a:4d:39:ad:98:33:c8:
         b0:1b:00:bd:e1:d4:90:9a:98:2f:1e:b7:a2:e7:fb:c7:4e:bc:
         4c:ca:b3:17:0d:20:f2:06:82:b5:65:fa:2b:62:6e:85:12:2a:
         1d:28:9a:56:c4:70:95:46:2c:15:ce:ae:3f:d4:9d:95:77:76:
         93:18:82:0e:a9:ae:49:e0:bb:cc:08:51:c7:22:6f:9d:83:cb:
         79:1e:5a:04:a1:10:63:48:f5:13:11:a3:da:f3:62:21:b6:c0:
         a6:e7:4f:1c:83:d9:3d:63:09:36:38:8c:a8:2d:1c:f5:18:1b:
         c1:10:34:ad:09:4d:d2:e8:66:c4:b3:7c:b0:84:ee:ea:14:2c:
         50:95:4c:77:c9:a3:60:68:1c:bc:c1:b3:48:03:a9:a4:06:4a:
         09:83:3a:2c:4b:f4:e1:55:25:25:ad:3b:b6:a8:ed:39:98:05:
         db:54:48:95:92:36:09:67:ee:7c:99:e2:ab:1b:b5:49:5e:d1:
         27:4b:b1:05:b2:62:d4:86:5a:91:6f:a0:e1:14:f7:eb:ee:35:
         20:97:d3:1a:31:c1:fa:c9:ef:23:dc:21:83:8b:56:54:da:35:
         9e:e7:18:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:49:50 2025 by rpki-client