Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer
File:                     2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer (raw, json)
Hash identifier:          g3674Agmi8rnPewsg8E/lcQoIANfVKIo6ngnLZex7Dw=
Subject key identifier:   2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       18633FC7A3E49BE4309CB032DC37178BC81DB51D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 18:14:44 +0000
Certificate not after:    Fri 06 Mar 2026 18:19:44 +0000
Subordinate resources:    AS: 267602
                          IP: 45.71.84.0/22
                          IP: 2804:4418::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:63:3f:c7:a3:e4:9b:e4:30:9c:b0:32:dc:37:17:8b:c8:1d:b5:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 18:14:44 2025 GMT
            Not After : Mar  6 18:19:44 2026 GMT
        Subject: CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:15:98:e1:93:a3:f6:1b:65:97:83:f6:84:11:
                    f3:d5:91:3a:7d:94:d7:12:f8:61:70:a2:48:91:af:
                    1c:e1:0b:41:06:11:92:f6:58:b4:51:70:21:65:4e:
                    19:8b:36:33:30:5b:75:6f:87:38:f8:62:fb:25:e9:
                    1b:1a:7c:b7:61:b3:5f:48:26:f5:64:99:ce:11:a5:
                    3d:f7:a9:c1:c8:b8:bc:c1:48:72:ca:de:c9:9d:a0:
                    9f:51:e4:23:1a:4a:c4:42:aa:9a:b6:4d:5f:90:08:
                    3a:04:5e:3c:e8:4e:bb:ee:d1:94:cf:a5:87:2a:c9:
                    e8:cb:52:36:f8:46:6c:f2:cf:d2:48:0e:60:ab:ca:
                    d6:6d:58:ca:e8:ef:99:5e:05:25:ac:e1:81:ef:b1:
                    92:a5:36:55:a1:e3:7f:f8:7f:ef:0d:1c:f7:48:68:
                    d8:a4:ee:f9:89:71:04:aa:ce:84:34:5e:0b:46:61:
                    ae:32:43:b0:ef:c8:2d:11:0f:35:6d:67:07:76:19:
                    15:f4:e2:f1:93:ef:54:80:2a:36:65:ce:9d:40:ef:
                    3f:12:ca:48:23:55:c7:06:24:0a:4c:f2:74:60:01:
                    77:e4:e2:ec:de:15:d9:b7:5b:c3:b7:9d:d5:70:d8:
                    24:13:2e:70:a5:cf:70:5b:8b:50:c4:9c:fb:18:83:
                    ab:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.84.0/22
                IPv6:
                  2804:4418::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267602

    Signature Algorithm: sha256WithRSAEncryption
         37:5c:5f:f7:25:d0:0f:b1:84:5f:36:03:fe:73:13:66:89:75:
         52:68:94:56:45:36:cd:07:fa:ec:ea:02:0c:26:5c:5d:34:87:
         e1:71:66:b8:2d:8b:fa:72:2d:d2:b6:97:75:82:67:84:d0:60:
         af:f3:88:25:c1:57:06:a5:eb:09:00:cf:34:51:6c:f9:c9:64:
         cf:8a:59:d3:ea:a7:81:45:4b:23:ac:cf:85:e2:83:4f:3f:a1:
         25:63:f1:2e:d8:60:0e:a3:c7:83:c3:b6:77:25:b6:39:58:6f:
         21:ec:3c:dd:57:d9:59:c0:f6:b8:c7:53:de:f3:ab:45:e0:e7:
         a5:70:8c:7d:60:26:9e:62:e3:f7:a9:c2:cd:bd:35:95:f3:5b:
         a6:14:2d:75:00:a8:46:03:7c:52:c5:a3:cc:d3:eb:11:ec:e7:
         92:b3:f6:ef:cf:50:e6:87:76:e0:66:3a:c3:a6:6f:b4:8b:9a:
         95:79:68:36:80:15:76:01:7c:a2:51:2b:08:d1:d3:c0:00:48:
         2e:b8:71:3c:fc:78:32:5a:02:bb:0f:a8:ae:84:5b:7b:76:66:
         14:be:42:3d:03:fc:a2:9e:c0:6b:56:60:6c:0a:bf:55:0d:6a:
         bd:aa:33:9f:3b:49:69:e1:73:6d:5f:4f:e5:ca:86:90:5b:64:
         31:2c:61:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:37:00 2025 by rpki-client