Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2E99EC5426678FEDA87CF25917DEEA66BCE0738C.cer
File:                     2E99EC5426678FEDA87CF25917DEEA66BCE0738C.cer (raw, json)
Hash identifier:          K8H18ug0/7z870DztP7wySQZAVCT/1yh0LBVqiNwlxc=
Subject key identifier:   2E:99:EC:54:26:67:8F:ED:A8:7C:F2:59:17:DE:EA:66:BC:E0:73:8C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3F21B71249DAC826C3D1DBBCDD310AA0A7F2894E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/2E99EC5426678FEDA87CF25917DEEA66BCE0738C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 19 Mar 2025 15:58:39 +0000
Certificate not after:    Wed 18 Mar 2026 16:03:39 +0000
Subordinate resources:    AS: 262661
                          IP: 177.128.216.0/22
                          IP: 179.96.168.0/21
                          IP: 2804:1548::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:21:b7:12:49:da:c8:26:c3:d1:db:bc:dd:31:0a:a0:a7:f2:89:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 19 15:58:39 2025 GMT
            Not After : Mar 18 16:03:39 2026 GMT
        Subject: CN=2E99EC5426678FEDA87CF25917DEEA66BCE0738C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:11:26:27:d8:2a:11:da:c3:ae:97:4b:84:68:
                    9e:d2:60:44:b1:6c:a9:2b:09:83:c9:cd:a5:2f:73:
                    a0:75:11:44:a6:1b:fc:31:13:d0:cc:ca:aa:7e:85:
                    42:94:08:06:8d:42:85:49:88:7d:05:fc:4f:70:56:
                    b7:d8:21:7c:34:2d:d9:d6:67:87:91:c8:36:aa:79:
                    8c:c3:34:0f:e4:0d:5e:fa:f5:fc:0a:a7:1d:e4:37:
                    7f:3f:8f:85:90:80:12:61:1d:bf:85:ca:63:05:ce:
                    fc:37:98:fe:53:8c:73:9f:d9:d3:4b:7b:ba:cd:ea:
                    fa:6d:28:5a:17:1e:35:b4:49:a2:d3:4b:ba:f0:21:
                    4e:a4:54:9f:6e:b9:80:b3:78:5d:59:d3:d0:87:73:
                    0e:e9:92:e1:07:91:50:2a:9e:e6:f8:16:fc:47:45:
                    bf:b9:6b:e3:e2:b4:3e:8a:4d:13:c1:3b:d3:7b:76:
                    d0:54:25:e8:db:51:f2:e4:fb:f4:e9:9e:9a:1f:7a:
                    c0:d7:62:4d:bd:a0:a1:ab:7f:15:48:e1:e5:10:35:
                    b2:09:9c:f6:20:a4:e5:00:ee:be:bc:4c:2d:f9:df:
                    c2:80:a8:f2:2f:1c:3f:06:ae:2f:ab:fe:07:6a:54:
                    48:1f:0f:7d:6a:ca:a8:fa:d8:a4:19:ab:af:92:33:
                    0a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:99:EC:54:26:67:8F:ED:A8:7C:F2:59:17:DE:EA:66:BC:E0:73:8C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EkNUcjoZ4k8dpGPP61dGAFLBoRd9uiWpCPveJgcPuuK6/0/2E99EC5426678FEDA87CF25917DEEA66BCE0738C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.216.0/22
                  179.96.168.0/21
                IPv6:
                  2804:1548::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262661

    Signature Algorithm: sha256WithRSAEncryption
         2c:92:b6:07:a2:13:5c:29:c4:09:b7:33:93:35:60:1e:d9:43:
         d3:5a:92:26:0c:99:9c:de:eb:08:91:9a:f9:ca:0a:28:cc:15:
         09:1b:b4:24:1b:39:b8:d7:ae:0d:52:45:83:6d:fe:ed:93:c5:
         d8:de:cb:22:2d:04:69:48:4e:f8:ba:80:83:da:1c:c8:7a:f3:
         7c:dd:4f:06:f9:49:fd:2b:4e:46:27:99:15:89:66:e4:7b:81:
         99:1d:9e:0b:05:5e:eb:3b:f6:fe:cb:f5:d9:83:51:9b:36:5c:
         bc:ef:d6:06:77:8a:12:f1:4b:fc:bd:8c:2b:a5:3c:c9:4f:34:
         3d:91:2d:68:74:fb:2f:2a:54:ab:ab:36:52:b3:28:73:2d:ea:
         d0:9f:2e:b7:c4:be:50:27:53:0c:d0:43:0b:d2:a6:fc:a9:d4:
         26:d6:ae:f8:0b:b3:1a:e9:95:7c:7c:69:cb:71:ec:fe:6d:e5:
         15:34:a2:b4:80:f7:4a:a3:c8:a9:63:33:c8:92:fe:70:dc:be:
         a0:c9:eb:5d:b9:99:2b:9c:c3:de:1d:2b:ad:f3:6e:d0:ee:1a:
         d7:42:c5:2f:0e:4d:55:98:72:24:e6:7d:1f:b1:96:63:64:e6:
         aa:04:c7:6d:14:15:e3:a1:c3:cd:18:fa:4d:79:e8:02:d1:bd:
         55:58:59:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:34:19 2025 by rpki-client