Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer
File:                     244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer (raw, json)
Hash identifier:          8DXNOgweF8OIZ7Y2J7DfXl1ZwqUVRxjHSV+nO8GYWlQ=
Subject key identifier:   24:43:88:DD:FE:9A:99:D7:1C:EB:27:CD:B6:C7:66:37:D2:2C:AB:8F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2B60B315776EA3025FABF628D616D82513B96F11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 19:36:07 +0000
Certificate not after:    Wed 04 Mar 2026 19:41:07 +0000
Subordinate resources:    AS: 262422
                          IP: 143.208.204.0/22
                          IP: 177.39.80.0/21
                          IP: 2804:43c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:60:b3:15:77:6e:a3:02:5f:ab:f6:28:d6:16:d8:25:13:b9:6f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 19:36:07 2025 GMT
            Not After : Mar  4 19:41:07 2026 GMT
        Subject: CN=244388DDFE9A99D71CEB27CDB6C76637D22CAB8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c1:a9:6b:3f:45:63:db:81:e3:ef:bb:8f:ea:
                    a1:bf:2f:79:7b:1d:63:98:dd:9b:13:c5:48:08:0d:
                    5a:63:ff:21:6d:b4:e6:dc:2c:f2:9a:4a:79:71:89:
                    e3:df:26:75:b3:19:31:b8:85:2c:14:59:c2:2c:65:
                    4b:d2:02:70:be:c3:0e:1f:d0:6a:de:ca:51:22:f2:
                    60:de:8e:73:12:2e:70:a0:57:b3:38:78:91:d1:7a:
                    ac:3c:e4:b4:6e:83:58:aa:40:47:08:1e:d3:db:64:
                    23:21:c5:40:c7:69:cb:5c:7f:2b:ee:31:fd:ab:9a:
                    a2:55:0b:88:bc:9a:99:60:dc:33:da:e0:1c:b6:65:
                    58:1c:49:af:86:73:7f:fa:e7:95:40:1b:fb:a3:55:
                    96:30:fa:d4:ec:26:7b:81:1f:dd:7d:72:39:03:a3:
                    ac:26:9a:12:8a:57:0a:79:75:d5:e1:fb:ff:39:e4:
                    73:8e:3c:0e:22:8c:38:e2:b5:eb:54:ae:29:df:2f:
                    ef:92:d9:b6:df:8e:c4:81:ac:a9:ad:54:fe:f2:e3:
                    ad:59:65:96:89:b7:75:cc:5d:14:0c:8a:71:e6:03:
                    95:59:ad:42:60:41:74:e5:7b:0f:02:72:7a:89:54:
                    7a:0e:57:08:d6:64:2e:fe:9f:8e:36:2c:b3:b5:db:
                    f9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                24:43:88:DD:FE:9A:99:D7:1C:EB:27:CD:B6:C7:66:37:D2:2C:AB:8F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.204.0/22
                  177.39.80.0/21
                IPv6:
                  2804:43c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262422

    Signature Algorithm: sha256WithRSAEncryption
         c9:04:2d:8e:c4:02:f5:b7:e7:d1:d8:0f:b9:7e:9e:63:77:f3:
         fe:80:6a:5d:d5:0b:45:5f:2b:50:08:43:bf:c2:a3:0b:82:c6:
         f7:f8:de:e7:f0:f7:bd:2b:33:c1:2a:0c:23:c3:81:e8:fa:b3:
         64:7c:41:94:d7:42:1c:84:22:38:79:77:2a:30:d3:b1:ad:94:
         11:0f:5e:61:94:76:49:8b:73:57:7c:23:4e:47:cb:b4:3d:88:
         52:31:de:6b:1d:4f:5b:cf:46:56:6d:ea:9f:94:b2:df:43:bf:
         0f:e3:5c:18:4b:ec:6d:3e:21:29:4b:c8:07:fb:26:da:db:ab:
         df:06:d7:b3:9b:76:fa:aa:d1:a0:93:51:d7:e7:1a:a0:3f:09:
         7c:46:de:4a:f7:6b:e2:ac:ab:30:a7:33:be:b4:de:e6:b7:f2:
         6d:8e:6a:19:3c:5c:1a:18:c8:80:41:1c:d2:ec:3f:c2:87:4e:
         07:43:5e:96:4a:fd:44:ac:8b:62:06:03:d5:74:57:ba:ea:89:
         3e:d5:b4:e1:97:fb:aa:83:7c:29:61:27:3e:bc:c9:f3:dd:b4:
         e1:61:e4:e2:14:fb:b4:8d:05:66:e3:a0:8f:b8:1a:a5:00:c0:
         ed:a9:a2:ad:7c:fb:85:1d:ea:61:bf:ba:45:16:f5:b2:64:88:
         8d:71:da:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:33:43 2025 by rpki-client