Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer
File:                     25678997D666BF9281FFEAB78B6D28A1FA51FF78.cer (raw, json)
Hash identifier:          bLeVJ4yDfA5WN3DHTYfnl1+0h+sg1J+s0VLgCnGPWdY=
Subject key identifier:   25:67:89:97:D6:66:BF:92:81:FF:EA:B7:8B:6D:28:A1:FA:51:FF:78
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4DEBFED1C9731374D0C628F6EC5320A88BF09753
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 16:42:31 +0000
Certificate not after:    Thu 05 Mar 2026 16:47:31 +0000
Subordinate resources:    AS: 266632
                          IP: 128.201.148.0/22
                          IP: 2804:3ef8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:eb:fe:d1:c9:73:13:74:d0:c6:28:f6:ec:53:20:a8:8b:f0:97:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 16:42:31 2025 GMT
            Not After : Mar  5 16:47:31 2026 GMT
        Subject: CN=25678997D666BF9281FFEAB78B6D28A1FA51FF78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f1:8f:38:bc:b9:ef:0d:b4:b4:f1:14:4c:2f:
                    63:41:46:8f:0b:cc:6a:e3:96:67:4e:c3:03:c4:5f:
                    1d:cf:22:4b:5d:6c:76:20:e0:1e:d6:b7:c1:5f:06:
                    5b:bc:06:36:8b:a8:82:52:27:c0:0a:38:f4:e2:c9:
                    05:4e:ba:b8:c1:e7:58:c8:84:ed:5e:ac:fa:d6:fd:
                    04:94:84:a3:a3:67:20:7b:ad:49:c9:39:3c:50:90:
                    98:2e:04:1c:2b:6a:37:ec:25:94:bf:9a:04:e3:69:
                    28:95:35:dd:ff:36:6c:a4:23:24:1a:1b:71:a1:19:
                    bb:39:a7:4c:fe:f2:2e:19:e8:1d:21:72:fb:ed:a0:
                    bc:84:3b:73:b1:39:8e:2c:52:ec:26:9b:40:fb:0f:
                    d7:99:01:e7:28:c1:95:c9:80:74:fb:89:e9:06:b1:
                    9d:10:09:dd:39:10:ab:1d:e3:aa:f4:22:60:d3:cd:
                    4d:f4:9d:fd:b8:66:4e:48:fc:a7:ee:74:87:3f:3c:
                    53:ce:5a:f6:f0:df:87:33:dc:3d:02:53:52:09:ba:
                    b8:ac:68:70:a5:fc:2d:6e:af:d1:65:ee:e4:a6:3e:
                    45:30:35:e3:e0:cc:d0:08:f8:74:90:99:72:3c:88:
                    8b:d3:2d:fe:6c:af:40:e8:4f:c9:61:40:9c:6e:18:
                    c6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:67:89:97:D6:66:BF:92:81:FF:EA:B7:8B:6D:28:A1:FA:51:FF:78
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Jon2s1Y1AkVCstMHNGYjbtyCeftAQKReQpo3qFrbDK7/1/25678997D666BF9281FFEAB78B6D28A1FA51FF78.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.148.0/22
                IPv6:
                  2804:3ef8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266632

    Signature Algorithm: sha256WithRSAEncryption
         97:9e:a7:ed:62:99:de:cb:fc:45:5d:8e:e6:6a:3c:7a:de:ef:
         ee:f1:83:7b:47:2e:34:27:37:a0:a5:0f:4d:6e:29:44:ef:eb:
         71:d0:e9:6c:ce:8d:20:54:c8:c6:d1:63:2d:26:00:6f:96:52:
         b0:3e:1f:79:3a:4d:82:73:67:6c:53:84:c7:14:f3:db:a9:f3:
         47:e8:11:9f:43:52:65:c8:05:3a:23:3f:d9:e6:b5:14:a9:45:
         f1:34:28:64:74:6a:18:9c:d9:7c:cf:93:8f:ba:89:42:9b:83:
         bb:b2:42:6e:f7:f1:88:c7:71:c7:45:ee:42:7c:7b:89:dc:d0:
         7f:c5:e2:bb:2e:41:9b:f3:57:a9:38:e0:80:99:53:0c:82:6c:
         14:bb:c5:95:9c:53:c4:02:6d:0c:e2:5c:dc:a7:3f:d0:cc:d9:
         93:c3:e8:47:d9:e0:3b:c5:08:0e:a6:c2:a4:a3:93:13:b8:90:
         75:73:c2:10:e9:d1:66:ec:9f:b6:10:e0:b8:f2:c1:f5:9c:c3:
         3f:8b:a3:4f:90:6b:79:f7:e8:cd:37:11:eb:41:31:c1:e3:82:
         e4:7c:63:ef:ed:19:b0:6a:ed:f8:6b:22:6b:ef:ad:d6:8f:64:
         05:ba:33:00:68:92:a6:54:20:46:5e:f1:d8:5e:cf:9e:4f:a6:
         bf:47:fa:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:56 2025 by rpki-client