Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/26DC2A50C0A139F3B637BFEA63C5A472E4CAB4FE.cer
File:                     26DC2A50C0A139F3B637BFEA63C5A472E4CAB4FE.cer (raw, json)
Hash identifier:          pegsffvvHqLnPFcfO1ZuOmLeeV2n3Dxm9oSlt/H+LoI=
Subject key identifier:   26:DC:2A:50:C0:A1:39:F3:B6:37:BF:EA:63:C5:A4:72:E4:CA:B4:FE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       28130E88509744BA9A977EC3124651646BC1EEDD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/26DC2A50C0A139F3B637BFEA63C5A472E4CAB4FE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 04 Mar 2025 21:32:58 +0000
Certificate not after:    Tue 03 Mar 2026 21:37:58 +0000
Subordinate resources:    AS: 269419
                          IP: 45.186.112.0/22
                          IP: 2804:644c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:13:0e:88:50:97:44:ba:9a:97:7e:c3:12:46:51:64:6b:c1:ee:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  4 21:32:58 2025 GMT
            Not After : Mar  3 21:37:58 2026 GMT
        Subject: CN=26DC2A50C0A139F3B637BFEA63C5A472E4CAB4FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1f:26:04:65:44:3d:7c:9d:46:e4:54:59:74:
                    0e:b8:95:a5:73:1b:4b:f1:80:16:da:20:c6:6e:31:
                    94:9d:2e:90:85:f1:b9:84:67:10:a7:78:77:19:63:
                    59:0c:73:47:40:e2:6f:8e:d6:06:a3:bf:51:33:6f:
                    fa:c4:ce:16:34:e4:13:ca:32:7b:02:ee:1e:d3:3b:
                    b2:c6:e8:c3:3c:ca:0f:e6:97:47:b4:e9:60:bf:fa:
                    7a:76:8a:a8:05:6a:01:12:0c:a7:d0:bf:df:df:7e:
                    35:f5:f8:81:54:1b:13:f9:04:06:c6:25:62:c7:ca:
                    dd:73:31:57:99:6b:90:87:18:7c:ad:7f:79:79:d2:
                    e9:08:53:43:30:bc:44:01:18:23:c3:03:b1:ea:75:
                    be:ac:54:e1:74:5a:68:6a:62:8a:63:2b:ac:a4:70:
                    55:de:54:b0:02:8e:3a:2e:ba:1d:de:90:df:a5:a2:
                    ce:ee:01:19:13:f0:79:02:05:11:30:75:8d:df:55:
                    0b:83:1a:6c:a0:4d:28:48:e5:ec:4c:c7:fa:87:ee:
                    5f:89:71:af:38:8a:f7:b6:90:80:ee:ac:64:43:5c:
                    19:7f:26:e0:19:2e:3b:e6:72:a4:fe:34:22:45:32:
                    c0:7b:43:51:b9:97:dc:58:d6:8c:d9:09:1d:02:e2:
                    1b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                26:DC:2A:50:C0:A1:39:F3:B6:37:BF:EA:63:C5:A4:72:E4:CA:B4:FE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ARwZYYVkfmKWZoAuCxHgBNmvFfczcKWBGEjGg4HaNS7c/0/26DC2A50C0A139F3B637BFEA63C5A472E4CAB4FE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.112.0/22
                IPv6:
                  2804:644c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269419

    Signature Algorithm: sha256WithRSAEncryption
         1f:4a:53:49:a2:f4:7d:da:ba:79:ea:6d:3c:45:b8:48:e3:ee:
         88:19:b5:a2:9d:a0:44:e3:b0:d2:e3:c2:2f:65:eb:30:e7:e1:
         a4:ea:7a:53:44:0b:6d:d9:f5:41:35:94:ff:41:01:2c:b7:1a:
         88:83:ea:f6:2f:da:89:e2:02:d0:45:b5:09:af:80:0a:6e:3b:
         6b:b1:ef:47:c1:23:1d:aa:b0:84:f7:e4:b1:d5:a2:c7:ba:6a:
         a9:a3:e4:67:a2:ba:07:85:28:b0:79:4a:dc:4d:20:51:05:5f:
         ec:69:ed:f0:39:e9:be:cc:b6:24:ce:76:2c:f7:65:3b:7c:59:
         02:cc:c7:46:e3:25:06:d7:73:5e:cb:76:1f:99:55:8c:33:db:
         d2:b4:70:1c:62:09:57:88:3e:71:a6:33:64:7c:84:9b:46:0d:
         33:6c:1a:ac:65:5b:51:44:fb:5f:94:31:22:9a:ef:f8:26:7f:
         c4:d1:18:49:a8:07:86:04:56:ea:11:c5:f6:2f:c7:25:4a:13:
         ba:3b:a2:68:d9:93:53:44:46:f6:85:8e:54:13:01:c0:5b:03:
         54:b4:ad:a6:b3:f6:6a:56:fb:88:37:8c:01:e7:2a:f4:9f:87:
         a0:a9:80:e0:c6:43:ce:75:1c:85:44:4e:12:3d:e1:54:22:08:
         0f:c1:89:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:44:49 2025 by rpki-client