Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2F31829AD9E8542E92D68A1D4B84371FA881196F.cer
File:                     2F31829AD9E8542E92D68A1D4B84371FA881196F.cer (raw, json)
Hash identifier:          PwPKmeNo/cJn1PmMcjejedYZmHdwNm8w/MpXQZrD200=
Subject key identifier:   2F:31:82:9A:D9:E8:54:2E:92:D6:8A:1D:4B:84:37:1F:A8:81:19:6F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       15A49697ED4087EEC0512D8B32DB6B822AD4CE2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/mbWDxmZVtZ38RtmuZ1ZGLMT4kaZabi6bKBHqcJs74L8/0/2F31829AD9E8542E92D68A1D4B84371FA881196F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/mbWDxmZVtZ38RtmuZ1ZGLMT4kaZabi6bKBHqcJs74L8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Dec 2024 15:27:49 +0000
Certificate not after:    Thu 04 Dec 2025 15:32:49 +0000
Subordinate resources:    AS: 268111
                          IP: 45.169.152.0/22
                          IP: 2804:582c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a4:96:97:ed:40:87:ee:c0:51:2d:8b:32:db:6b:82:2a:d4:ce:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  5 15:27:49 2024 GMT
            Not After : Dec  4 15:32:49 2025 GMT
        Subject: CN=2F31829AD9E8542E92D68A1D4B84371FA881196F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ed:42:1d:fb:b9:67:2d:d8:2e:d6:bf:88:59:
                    81:fc:16:e5:61:a6:76:79:07:ab:8a:00:b2:d7:83:
                    74:a7:27:f3:5c:24:ad:01:23:48:c1:89:0a:5d:86:
                    63:cc:f6:0e:a5:7c:29:e5:42:5f:89:13:ae:48:33:
                    c6:7f:bf:41:33:71:0e:ec:2d:17:8a:7a:28:a0:f0:
                    23:65:57:5b:2e:5a:83:9e:2b:a8:84:96:a7:cc:62:
                    c7:3b:62:be:0e:d9:55:53:af:20:ff:6b:37:ae:ad:
                    71:0d:5c:6c:d9:1c:c6:43:c0:14:e0:1d:0e:a1:fe:
                    b3:44:15:07:9e:64:05:6c:4c:9c:2f:d5:96:c5:37:
                    bf:c2:cc:ce:13:0d:f1:0d:02:5a:2b:ce:8e:14:27:
                    c4:16:d8:8f:d5:f6:a9:da:fe:c7:d2:0b:b6:4d:f9:
                    fc:de:9a:6a:cf:7d:20:c3:e4:5f:99:fb:e7:37:aa:
                    01:8b:95:9f:e9:21:8d:c5:6c:91:25:30:f9:f8:e1:
                    bb:b0:3e:06:ea:c2:2c:79:54:fc:11:40:d1:9e:25:
                    ac:d4:f1:a8:25:03:a0:b1:60:fb:9c:61:84:53:70:
                    ff:48:6d:ed:ec:e3:af:d3:5e:53:0e:56:55:26:bc:
                    6d:87:1b:2e:e8:6f:f6:64:8e:3e:30:5d:67:ce:02:
                    2f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2F:31:82:9A:D9:E8:54:2E:92:D6:8A:1D:4B:84:37:1F:A8:81:19:6F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/mbWDxmZVtZ38RtmuZ1ZGLMT4kaZabi6bKBHqcJs74L8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/mbWDxmZVtZ38RtmuZ1ZGLMT4kaZabi6bKBHqcJs74L8/0/2F31829AD9E8542E92D68A1D4B84371FA881196F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.152.0/22
                IPv6:
                  2804:582c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268111

    Signature Algorithm: sha256WithRSAEncryption
         4b:bb:a6:3b:ec:8d:d9:23:a3:05:f6:a2:3b:93:1e:75:69:cc:
         d1:35:d7:28:ed:e4:78:96:2d:56:c8:1b:f8:2e:99:80:04:78:
         0f:96:e9:61:e4:f9:a9:a6:89:52:03:74:4b:df:b0:e8:1a:0c:
         01:6f:99:10:fb:92:fe:bb:56:c7:cd:22:27:e7:68:de:f2:07:
         2b:4c:69:92:fa:82:d9:88:84:fd:4e:1f:15:34:25:66:05:0b:
         85:99:38:6b:cb:26:d8:c2:cb:be:27:91:fb:9d:76:3e:13:d3:
         2a:04:52:a6:97:b6:6e:0d:bf:7a:f0:f5:f3:05:48:80:ae:7a:
         d4:dd:c3:53:d5:09:22:6e:1c:9d:ca:9f:f9:4f:67:4d:3a:7c:
         21:55:62:9c:f8:22:7f:30:bb:cf:60:92:2f:68:1c:28:1f:c1:
         b6:2a:6e:5f:b6:05:5c:14:cd:5e:f8:f2:4f:98:be:58:da:df:
         af:cf:58:6e:eb:ae:b4:02:58:c5:8a:cd:63:f6:48:3a:41:1b:
         25:69:b6:36:70:c7:07:ae:ab:c0:ee:69:91:9b:d0:18:2b:35:
         80:56:f3:e0:22:81:58:70:5e:c4:f4:7e:12:6d:cb:04:04:d0:
         9a:cb:7f:ad:55:67:f2:19:b8:21:91:4b:6b:e4:6b:e0:54:dd:
         d1:6e:6e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:22:56 2025 by rpki-client