Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2E8459987E9776F5848158AEADDA7C12BA642F8E.cer
File:                     2E8459987E9776F5848158AEADDA7C12BA642F8E.cer (raw, json)
Hash identifier:          21Wo4fjC563kfOycG74Jt0Qoeu9IEcbpnz7maWW5Uk4=
Subject key identifier:   2E:84:59:98:7E:97:76:F5:84:81:58:AE:AD:DA:7C:12:BA:64:2F:8E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6181CE38C8768CC3FE36AFC1A8E94C006DA62CD9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/2E8459987E9776F5848158AEADDA7C12BA642F8E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Mar 2025 12:32:24 +0000
Certificate not after:    Thu 19 Mar 2026 12:37:24 +0000
Subordinate resources:    AS: 270440
                          IP: 200.13.84.0/22
                          IP: 2804:6c04::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:81:ce:38:c8:76:8c:c3:fe:36:af:c1:a8:e9:4c:00:6d:a6:2c:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 20 12:32:24 2025 GMT
            Not After : Mar 19 12:37:24 2026 GMT
        Subject: CN=2E8459987E9776F5848158AEADDA7C12BA642F8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fe:1a:3b:56:3f:cd:e8:b1:66:da:71:22:b5:
                    eb:f7:12:67:23:d2:9f:f9:71:1d:9d:4e:9a:e3:69:
                    f1:13:84:36:aa:c7:9a:55:e8:1c:e9:7c:70:df:ef:
                    a2:75:c1:bd:f7:bc:8e:89:91:c6:66:51:13:b3:da:
                    d6:55:88:40:ce:b5:e7:10:5a:58:a7:54:74:20:72:
                    77:17:ed:e9:64:35:ce:4e:21:6d:cb:7f:8c:62:75:
                    5c:4f:b8:1d:9b:bf:ac:56:65:a5:e1:29:1d:f1:7f:
                    86:20:86:46:49:72:f0:f0:5a:df:ca:19:f1:d0:2b:
                    c2:c6:bb:0f:39:50:68:e8:1a:8c:30:52:b1:52:98:
                    d8:7c:69:7a:93:d5:23:30:88:b0:69:6c:74:59:0e:
                    79:b7:51:ef:bb:95:d8:0c:87:05:48:f0:4c:d2:b8:
                    f8:c0:80:06:f3:63:34:d6:b4:1b:f4:b5:8b:7d:2f:
                    4b:b0:05:a9:45:60:aa:d4:9a:72:0a:8b:62:2d:5c:
                    a5:d9:c9:a2:38:d3:a2:b9:ac:e9:db:18:c4:fd:25:
                    f9:1a:08:1b:38:82:5a:ff:58:f4:31:f3:fb:91:20:
                    67:ac:95:3f:93:ee:40:71:2b:83:c6:bb:78:9b:41:
                    a3:b2:a8:84:a8:0b:35:ab:64:60:d0:65:5e:83:90:
                    ae:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:84:59:98:7E:97:76:F5:84:81:58:AE:AD:DA:7C:12:BA:64:2F:8E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/2E8459987E9776F5848158AEADDA7C12BA642F8E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.84.0/22
                IPv6:
                  2804:6c04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270440

    Signature Algorithm: sha256WithRSAEncryption
         3a:05:4b:86:68:41:5c:8b:ed:07:8a:bf:7b:a4:92:71:e2:21:
         6d:b1:f8:6a:fd:c9:92:65:71:e9:b6:59:25:15:f2:7f:67:bf:
         24:f1:f5:c0:7e:bb:a1:a7:02:d3:ee:a6:76:ad:b8:d1:47:c2:
         d6:81:0a:68:10:c4:20:26:a9:16:4a:8c:7a:eb:ae:b8:ee:5f:
         88:aa:01:73:30:6a:4c:ee:11:a6:1b:91:31:81:28:ee:9f:db:
         be:3f:a8:29:88:98:81:43:c5:78:7a:35:62:7c:53:b6:b8:5e:
         b5:e1:e8:9e:bc:ec:7b:17:2d:eb:bc:cd:a1:77:42:66:a4:05:
         47:4e:d3:ed:fb:e4:2d:3e:1f:15:bc:05:d0:97:b5:a6:cf:3f:
         a6:f1:2f:37:52:b3:94:90:05:9a:e5:8d:d8:87:43:d3:c7:c5:
         03:c2:40:43:0c:b7:9d:99:0e:6d:cd:25:0e:3e:2f:93:cb:53:
         bc:da:51:2a:3e:1f:70:50:70:ae:84:40:e7:13:f3:f0:3f:74:
         4e:c8:74:57:93:0d:92:02:e1:5b:4a:6d:81:b8:9b:9f:18:7e:
         7f:25:4a:3f:6b:88:ec:7f:09:7a:9a:57:87:12:b8:a8:bc:2c:
         16:a5:3f:80:5e:62:9b:a7:a9:09:17:fb:26:05:b8:7a:41:37:
         a9:f2:93:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:19 2025 by rpki-client