Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07.cer
File:                     2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07.cer (raw, json)
Hash identifier:          aQtZpfJH8vyQ1SwJScQUAtoUBfn02JOYfXDr3TyXGTg=
Subject key identifier:   2A:3C:A2:DB:D8:29:73:99:B3:83:1F:D9:90:D4:BF:DB:EC:0B:ED:07
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1BBF952DDE093E35BE21FB366A1D939D5A419540
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07.mft
caRepository:             rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Dec 2024 19:49:05 +0000
Certificate not after:    Tue 16 Dec 2025 19:54:05 +0000
Subordinate resources:    AS: 266368
                          IP: 170.80.44.0/22
                          IP: 2804:36bc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:bf:95:2d:de:09:3e:35:be:21:fb:36:6a:1d:93:9d:5a:41:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 17 19:49:05 2024 GMT
            Not After : Dec 16 19:54:05 2025 GMT
        Subject: CN=2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9c:72:4a:cf:7b:76:0f:66:58:47:3c:19:a5:
                    ea:19:16:a2:64:7d:fe:9a:c2:37:4a:52:b3:84:6a:
                    35:66:3d:89:49:a3:45:fc:a2:3b:43:84:e1:7b:17:
                    f8:b2:16:0e:df:c1:f2:85:86:b6:28:6a:63:a3:af:
                    04:5a:a8:d7:5e:c2:74:66:a9:34:59:3f:a4:a8:89:
                    f9:d1:9a:f1:69:85:2c:e6:1b:b5:6d:c0:7e:c4:1a:
                    61:bf:f5:e2:5f:80:68:3c:1c:0a:9c:f7:e5:0d:d3:
                    1e:69:38:40:7e:7c:81:6a:4f:eb:3a:c9:cb:82:63:
                    2d:f4:54:dd:0b:d1:38:1c:0b:dc:e2:ec:c8:14:a9:
                    db:ec:01:59:50:36:e5:8e:58:c3:8f:c9:0f:77:46:
                    98:26:5b:15:b3:a9:eb:bf:96:e9:63:05:8e:9c:06:
                    69:70:86:8a:e4:d6:b2:15:b5:73:6b:75:93:da:ed:
                    68:9a:75:d5:04:0e:6a:8a:cc:83:3c:7d:77:41:14:
                    d0:94:06:a6:17:bd:4b:94:ee:ba:e9:a8:7e:6a:ba:
                    f4:1a:39:6f:27:22:25:15:c0:5b:f9:8c:6b:fe:59:
                    e1:14:63:20:7d:10:96:41:e8:37:23:a5:a8:e4:ce:
                    a0:95:87:5d:c1:13:60:39:be:86:04:30:bc:f8:19:
                    2e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:3C:A2:DB:D8:29:73:99:B3:83:1F:D9:90:D4:BF:DB:EC:0B:ED:07
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.44.0/22
                IPv6:
                  2804:36bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266368

    Signature Algorithm: sha256WithRSAEncryption
         d6:3f:78:de:76:ca:b7:31:89:17:86:b9:60:77:3a:42:8e:be:
         2a:a9:6b:48:49:c9:13:78:55:09:21:f7:c9:27:fc:b2:92:24:
         a6:15:e7:ab:c3:11:71:8d:f0:fe:d5:f7:b5:01:87:0b:c0:49:
         e0:1b:cc:48:4e:25:71:0b:3f:36:d2:98:f4:61:72:ac:43:9f:
         ef:99:cf:93:12:77:04:27:60:62:9d:50:54:b8:38:72:1d:4e:
         01:55:55:54:99:91:9b:3e:a7:ef:e6:6e:28:63:63:e9:dc:62:
         90:17:e8:dd:fe:a5:24:3f:08:c0:b2:77:4d:e1:7c:06:1e:69:
         c3:e0:92:47:08:79:6e:2a:37:06:44:7d:5d:7f:b5:bf:b2:e5:
         36:98:d0:27:39:73:46:2f:7a:72:21:e1:70:cd:2b:4e:4b:d6:
         d7:e4:1e:ac:57:02:28:2e:3a:8d:70:fc:8f:55:eb:e8:6a:5d:
         0e:96:2d:d3:b2:4f:ff:d8:c0:e0:b2:2d:11:5d:4d:c9:24:f7:
         1c:ba:8f:6e:8c:73:50:09:ca:b8:17:45:77:9e:11:c8:de:db:
         91:f0:44:0e:fe:bf:34:e9:6e:81:30:06:b6:27:db:c8:59:f0:
         13:69:21:bf:e0:d8:1c:f3:3e:bb:a9:a2:13:ac:83:68:f3:c4:
         a8:8c:b9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:55:50 2025 by rpki-client