Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/28274B18A146B4236FC8543D9D65B0C9F6C657E5.cer
File:                     28274B18A146B4236FC8543D9D65B0C9F6C657E5.cer (raw, json)
Hash identifier:          OOSrXOfYyYZqHNxgyUTRrMGkFi4biC6Et00f0/+0H50=
Subject key identifier:   28:27:4B:18:A1:46:B4:23:6F:C8:54:3D:9D:65:B0:C9:F6:C6:57:E5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       27D6061FB01B73118C83E9A193B63C3E46E08F06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/28274B18A146B4236FC8543D9D65B0C9F6C657E5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Jan 2025 01:41:07 +0000
Certificate not after:    Tue 20 Jan 2026 01:46:07 +0000
Subordinate resources:    AS: 266232
                          IP: 45.6.180.0/22
                          IP: 2804:3cc0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d6:06:1f:b0:1b:73:11:8c:83:e9:a1:93:b6:3c:3e:46:e0:8f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 21 01:41:07 2025 GMT
            Not After : Jan 20 01:46:07 2026 GMT
        Subject: CN=28274B18A146B4236FC8543D9D65B0C9F6C657E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:43:b2:7f:b9:7d:22:76:f7:14:aa:92:80:
                    34:64:72:0a:98:71:50:d8:a8:dc:94:72:cd:70:36:
                    ca:e0:25:7e:44:c8:0e:bb:5e:1e:68:24:bf:02:b9:
                    11:91:d2:3c:72:0e:dd:ab:6b:72:86:28:78:0a:62:
                    69:a7:6c:c3:63:92:2f:e9:57:43:8c:fd:1f:62:48:
                    3f:17:a8:bd:88:de:65:d4:1e:0a:0e:91:4a:29:6a:
                    cd:01:d8:03:6c:cc:45:4e:9b:73:5d:dc:f5:1b:91:
                    13:8f:24:99:5f:28:8a:38:9f:2a:4e:81:ac:bb:37:
                    fe:74:e9:bc:ef:e3:eb:e4:30:2f:6e:bb:42:27:1a:
                    69:8e:c8:a6:15:10:1c:94:73:09:71:ea:ec:50:50:
                    3d:e6:3c:82:a7:6c:17:f9:28:94:be:c8:6e:bc:95:
                    c4:f7:31:40:30:b7:ab:90:3b:85:71:2f:78:8e:3f:
                    d6:0e:d2:05:3d:16:25:37:15:53:9d:96:6e:c8:41:
                    87:4a:12:fa:9f:77:a7:9a:ba:c0:33:90:b2:5f:ad:
                    be:be:31:e3:a4:29:08:df:7f:13:07:65:e5:b8:fa:
                    06:8a:1a:81:a7:24:54:bb:08:4a:49:d1:84:ba:db:
                    de:63:8e:ee:5b:b4:10:50:19:84:64:3d:e6:f0:89:
                    c2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                28:27:4B:18:A1:46:B4:23:6F:C8:54:3D:9D:65:B0:C9:F6:C6:57:E5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/28274B18A146B4236FC8543D9D65B0C9F6C657E5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.180.0/22
                IPv6:
                  2804:3cc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266232

    Signature Algorithm: sha256WithRSAEncryption
         69:f1:20:17:bd:60:28:24:34:c0:2e:7c:98:0d:86:a5:b8:6e:
         d3:9b:35:25:ee:7c:b0:49:22:0c:0e:5a:4d:48:74:da:1e:2f:
         36:cd:f3:aa:f7:f8:dc:90:89:83:30:d1:a3:cb:9d:bb:90:08:
         83:4f:f1:f1:07:03:de:8a:b2:ab:ed:26:b9:16:fe:43:2f:ad:
         a6:62:58:0f:bc:07:de:67:14:f1:08:e5:61:6c:32:68:7f:9d:
         cc:b1:e4:ff:10:e8:06:d2:8a:af:91:a0:50:0e:f7:82:d2:ce:
         c1:49:1d:16:31:df:08:f4:80:99:a7:df:34:de:5f:82:c5:8c:
         80:30:46:0a:38:3f:ad:bc:94:85:35:48:a4:dd:20:b5:71:ff:
         49:0c:4f:34:4b:28:cc:7d:71:f6:33:45:cb:be:46:e0:4b:f9:
         87:cb:28:5c:4b:2c:58:b6:8e:28:0a:83:b6:57:95:2b:01:8e:
         b7:9c:fb:a8:56:99:e2:ae:68:d8:aa:4c:f7:86:af:37:87:5a:
         98:7c:14:c3:ca:a9:27:97:8b:c7:8e:ef:8b:92:73:8b:b3:da:
         71:20:08:aa:a0:c1:ad:ac:1a:35:5d:f4:10:be:0f:3a:fc:9f:
         28:c9:4c:bd:b4:04:f0:04:3a:05:c8:8d:e6:87:40:31:c8:18:
         18:df:fc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:29:19 2025 by rpki-client