Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer
File:                     2BB1FB85B5A824CE1F12E99D84943C2812338D9C.cer (raw, json)
Hash identifier:          /0eIFGMQaji8fWI+8rwuFOHieb6tVw16XcWSBUutM+A=
Subject key identifier:   2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0BA02099FC68973DECAD2895F6A0B88F57BFA363
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:44 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:44 +0000
Subordinate resources:    AS: 264126
                          IP: 138.59.200.0/22
                          IP: 2804:22d8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a0:20:99:fc:68:97:3d:ec:ad:28:95:f6:a0:b8:8f:57:bf:a3:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:44 2025 GMT
            Not After : Mar  4 18:40:44 2026 GMT
        Subject: CN=2BB1FB85B5A824CE1F12E99D84943C2812338D9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:71:19:34:17:7f:de:5b:73:ea:a8:63:9c:e8:
                    4e:b3:a8:56:c6:ce:87:b8:6f:e8:fb:89:46:01:b1:
                    51:b6:21:06:e6:06:7b:e8:fa:0b:33:2c:4d:7d:d7:
                    b5:78:4a:b3:14:1f:98:46:ab:d9:91:26:53:51:56:
                    d5:71:ad:f8:44:57:a3:16:cc:e9:f9:62:e3:60:67:
                    4f:36:30:09:f2:01:57:e6:56:0c:70:bd:d8:4d:3b:
                    69:17:c7:23:59:e5:5d:07:41:6b:36:66:1a:fe:de:
                    8e:b3:67:f8:b4:cd:98:50:82:84:86:c8:79:28:af:
                    ab:6d:a4:14:44:d8:e1:2e:2e:52:e1:3b:73:aa:f3:
                    de:de:37:50:fb:ab:ec:0e:18:7b:19:6c:c9:76:60:
                    d4:17:a2:5a:7f:9c:dd:ef:32:0c:d9:7d:aa:a3:03:
                    57:a9:33:27:1e:8c:71:28:82:80:7f:a5:55:85:97:
                    05:36:c4:9f:07:d1:2a:1f:47:87:df:6c:35:55:4a:
                    dc:18:83:a5:af:1b:45:45:af:53:7f:5b:cc:a4:7c:
                    6c:f7:00:7b:8e:d2:d6:fd:7f:bc:b7:16:c6:e3:a5:
                    81:aa:51:21:8a:e4:e9:ca:0c:7c:22:39:67:e6:2d:
                    50:57:87:66:a9:f8:ed:bb:f5:c7:47:7d:6a:85:12:
                    b6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2B:B1:FB:85:B5:A8:24:CE:1F:12:E9:9D:84:94:3C:28:12:33:8D:9C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/1/2BB1FB85B5A824CE1F12E99D84943C2812338D9C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.200.0/22
                IPv6:
                  2804:22d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264126

    Signature Algorithm: sha256WithRSAEncryption
         95:c9:d4:8e:1b:76:4b:79:e7:c2:2d:fb:d4:07:7a:dc:59:7f:
         a5:35:36:56:56:80:24:84:2a:cc:a3:12:6e:39:0b:b5:66:ac:
         00:7e:ec:db:c4:91:94:7d:dc:d2:a7:7a:34:69:4e:7c:52:a1:
         94:e1:7a:8c:33:98:67:35:24:30:c2:4d:81:9f:88:9f:6f:2b:
         74:6f:22:23:09:53:bc:18:58:a5:f6:78:3d:bb:67:19:b3:3c:
         58:ea:f1:73:7e:dd:45:3b:47:99:83:eb:d2:38:d6:15:ac:4a:
         d7:9f:ba:e6:d9:24:87:fa:7a:b5:c5:fb:7c:03:38:6b:e6:ef:
         7f:fe:4e:02:41:49:bc:44:d0:fb:5a:2a:71:e1:40:e2:0c:c0:
         ac:f6:4a:ac:50:8f:cd:24:cd:13:bd:6d:68:9d:28:e8:ba:b1:
         07:b9:0f:da:81:c4:ae:4c:58:ae:f4:69:cc:4f:48:27:10:3d:
         80:9e:a0:56:03:7c:46:e1:98:df:b2:3c:21:09:aa:c6:3f:e1:
         d2:f9:21:cb:ff:b4:e9:36:8d:48:99:01:9b:8b:4e:89:6e:51:
         21:eb:d0:35:9c:20:a9:a9:47:b5:74:79:08:95:50:32:dd:86:
         83:8a:04:b8:c4:ca:eb:0b:06:f9:d1:f5:2f:a9:92:1a:d9:e6:
         55:f0:62:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:23 2025 by rpki-client