Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.cer
File:                     2ED5E473D72A6D301514B818C3D2A94A5E387474.cer (raw, json)
Hash identifier:          lDPIZjVVV1iSPc+Qo/CqGIOj/9+BEJYLwa+zBSfHB0E=
Subject key identifier:   2E:D5:E4:73:D7:2A:6D:30:15:14:B8:18:C3:D2:A9:4A:5E:38:74:74
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1B4BD670E00645EF0666EC57E2F7E02F799434C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Mar 2025 01:54:39 +0000
Certificate not after:    Tue 24 Mar 2026 01:59:39 +0000
Subordinate resources:    AS: 267163
                          IP: 45.230.144.0/22
                          IP: 2804:4914::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:4b:d6:70:e0:06:45:ef:06:66:ec:57:e2:f7:e0:2f:79:94:34:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 25 01:54:39 2025 GMT
            Not After : Mar 24 01:59:39 2026 GMT
        Subject: CN=2ED5E473D72A6D301514B818C3D2A94A5E387474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9e:fd:fa:71:83:0e:59:87:95:80:e6:69:25:
                    a9:df:0b:3d:e4:6b:00:e4:f2:f6:bc:14:a0:71:ab:
                    94:5a:06:db:1d:2e:75:3e:4b:1b:74:da:dd:75:16:
                    87:20:b2:45:be:30:28:af:69:53:20:88:cf:d2:fb:
                    25:d4:59:49:07:32:64:0f:3b:31:9f:c9:3e:ff:03:
                    7f:52:f5:33:f9:00:8e:90:76:35:3b:7f:4d:73:ab:
                    b8:d2:ec:26:a5:e1:01:a4:d5:9a:0a:e5:c1:b7:78:
                    0d:cb:53:28:81:49:52:d2:39:57:60:54:fb:31:0d:
                    0e:05:e4:2c:f7:9d:03:ff:6f:89:c5:8c:ea:ea:98:
                    26:0c:86:df:d7:9c:b6:67:52:c5:5d:a4:68:57:c0:
                    c3:43:01:a5:e1:07:50:be:8b:8e:28:c0:0c:e7:3b:
                    7b:b0:88:f9:6e:37:b4:b0:c2:fc:cd:14:41:44:a3:
                    f4:f6:30:e0:eb:01:8c:94:b0:16:2d:55:a1:58:5b:
                    4b:42:14:3b:11:98:14:84:c5:b3:91:77:bc:4d:d9:
                    13:f4:33:cd:6b:ef:73:a3:58:08:11:08:65:e5:3c:
                    94:7f:39:a2:b6:db:1e:60:01:6b:ab:64:3f:32:d8:
                    26:dd:2b:15:bd:22:78:c8:3b:b3:77:be:97:23:fb:
                    c7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2E:D5:E4:73:D7:2A:6D:30:15:14:B8:18:C3:D2:A9:4A:5E:38:74:74
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ALWcRUjWxQzmCQLSZknhZQNfSPPnT2HDq6RjcsCx3wqM/1/2ED5E473D72A6D301514B818C3D2A94A5E387474.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.144.0/22
                IPv6:
                  2804:4914::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267163

    Signature Algorithm: sha256WithRSAEncryption
         84:29:2e:ab:ec:f6:54:46:a8:40:a5:5b:fc:ee:67:4e:d3:86:
         12:b8:e8:0e:a7:7c:59:58:8a:3b:5a:88:dd:08:ba:e4:00:de:
         f1:a1:30:f7:1c:3a:6e:97:9b:04:30:f2:93:e6:ad:6c:00:09:
         ff:f7:83:e0:a2:cf:e3:92:66:c5:5e:ff:7a:84:d0:99:06:ec:
         b9:d0:10:33:66:99:a2:a9:15:6b:64:06:75:be:d1:a4:cb:03:
         f2:f9:de:c7:4c:28:f5:7a:6c:ef:65:c6:b9:2b:a8:66:2c:b1:
         2e:3a:9f:37:33:52:96:53:b6:96:54:b8:5a:ae:3f:94:c1:54:
         71:c6:de:71:d8:11:9a:7d:fe:22:6b:29:03:d9:09:c2:91:22:
         38:7c:6b:4e:dc:58:b5:80:2d:28:d1:a5:55:e1:41:4f:e9:ad:
         78:3b:8a:44:da:ca:9c:3e:9b:8f:36:16:f5:87:85:f2:f5:ef:
         b9:b0:4a:b2:29:fd:9a:f4:98:9d:b0:9b:75:14:8c:af:55:82:
         61:97:eb:3a:79:d5:ab:07:c2:11:7e:ba:17:d8:d7:72:1c:e9:
         09:62:1b:70:e7:6b:fc:8b:9d:41:e9:de:9f:61:e2:af:9f:fd:
         32:28:e0:b8:03:e1:b9:9a:1b:db:3d:0d:87:0f:ea:1f:96:de:
         50:af:72:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:20:02 2025 by rpki-client