Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/233201DBED32F6A687426F3C6DE66D3690C5A5CA.cer
File:                     233201DBED32F6A687426F3C6DE66D3690C5A5CA.cer (raw, json)
Hash identifier:          T6xQOKU9Zy26weKg5NkrgkJIqXePkEjQ0ttL/oAMOHI=
Subject key identifier:   23:32:01:DB:ED:32:F6:A6:87:42:6F:3C:6D:E6:6D:36:90:C5:A5:CA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4FD9E14C4B1F4C5AB516A7190915E9D470041BCA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/1/233201DBED32F6A687426F3C6DE66D3690C5A5CA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 10:49:34 +0000
Certificate not after:    Fri 06 Mar 2026 10:54:34 +0000
Subordinate resources:    AS: 267580
                          IP: 45.70.68.0/22
                          IP: 2804:43a0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d9:e1:4c:4b:1f:4c:5a:b5:16:a7:19:09:15:e9:d4:70:04:1b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 10:49:34 2025 GMT
            Not After : Mar  6 10:54:34 2026 GMT
        Subject: CN=233201DBED32F6A687426F3C6DE66D3690C5A5CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d0:dd:8f:4c:f3:3d:5f:cc:70:57:f8:f2:41:
                    e4:61:16:61:a9:13:ab:e8:d0:01:82:1a:75:ca:e5:
                    8a:5f:ef:d4:a6:02:fe:c1:bd:88:94:8b:11:8e:44:
                    5a:c3:37:85:32:33:1a:fa:b6:3b:87:e8:51:6b:1b:
                    e9:a1:7e:be:32:8a:b8:ef:1b:43:3a:02:37:80:97:
                    1b:ef:42:53:bc:ca:85:4a:23:8b:8b:90:f7:ff:e5:
                    26:bb:a3:37:56:c3:d1:92:7c:0d:47:fd:f9:86:99:
                    9f:d3:d2:42:1d:9a:88:67:37:3d:7d:98:d1:c7:52:
                    62:65:87:9f:34:74:96:23:90:27:d6:88:4c:07:64:
                    50:f1:57:f3:ce:83:9b:72:a7:a7:63:72:59:f0:f3:
                    a3:76:33:4c:f4:b3:cc:d4:0a:fa:a7:a9:f0:d9:41:
                    d2:03:cc:1c:23:19:17:8a:e3:64:de:99:cc:dd:e6:
                    0f:0d:18:47:71:9c:2a:3d:4f:69:f0:82:8b:00:3f:
                    cd:54:ac:73:bc:0e:ac:be:ef:3c:a4:fc:91:b8:c0:
                    a3:56:cf:54:16:75:e8:a9:e7:ff:af:10:e7:ec:35:
                    a5:e7:9e:6c:52:cc:9e:f8:a6:6f:1b:6a:af:6d:2c:
                    b1:6d:98:a4:dc:a7:88:1f:46:d5:7e:9f:83:9f:af:
                    4e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:32:01:DB:ED:32:F6:A6:87:42:6F:3C:6D:E6:6D:36:90:C5:A5:CA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/1/233201DBED32F6A687426F3C6DE66D3690C5A5CA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.68.0/22
                IPv6:
                  2804:43a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267580

    Signature Algorithm: sha256WithRSAEncryption
         66:05:0c:31:27:b2:23:5c:8c:41:97:2e:a5:54:f3:e6:aa:8c:
         16:06:f6:bf:cd:b2:8a:c8:1d:74:c9:e6:ee:0b:e9:32:b3:c7:
         7f:b5:97:ad:fb:fc:0a:1d:7c:a1:8d:90:36:8f:90:e9:0e:2b:
         f1:40:5d:00:76:82:21:e3:22:ba:eb:08:f0:11:82:7d:aa:03:
         3a:4b:ee:1a:7e:f7:fb:77:0e:e4:4c:d4:78:9f:01:1e:46:39:
         54:fe:28:ed:6e:1e:58:17:0c:f4:50:12:20:a7:31:04:47:92:
         f8:62:d0:0d:91:6a:ad:d1:b1:83:92:bc:c4:0a:dd:56:9f:35:
         5e:f7:c6:de:4b:c8:1e:bf:94:b3:4e:16:5d:2f:86:5b:6f:5a:
         b7:9a:fe:27:bf:4e:d3:18:25:b0:b1:25:fd:42:a6:5c:e3:3a:
         2b:1c:3a:95:9b:5b:f6:fa:a4:da:86:c1:f2:de:61:4f:cd:d8:
         16:9f:8c:c2:00:56:f3:4b:5b:1c:be:be:8b:58:a3:41:f5:8d:
         d9:f7:d3:96:73:84:62:0e:8b:3a:09:5b:f5:09:8e:27:8a:70:
         5c:82:36:ce:d1:12:7b:c1:0e:61:26:c2:83:90:11:b8:e8:ef:
         cc:b5:76:95:ab:f8:e8:10:45:4d:f9:e6:16:08:80:72:b5:bf:
         2f:f6:ee:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:34:50 2025 by rpki-client