Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/315119F0C7108A60EB3B6173D16C7114048C8D54.cer
File:                     315119F0C7108A60EB3B6173D16C7114048C8D54.cer (raw, json)
Hash identifier:          cycQV/UpvKOS4QfNQFdJPRADqpdWM9YRPtpTww0yin4=
Subject key identifier:   31:51:19:F0:C7:10:8A:60:EB:3B:61:73:D1:6C:71:14:04:8C:8D:54
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       514A7C2BA305469B837F6A79CD4516AA2813C9DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/315119F0C7108A60EB3B6173D16C7114048C8D54.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 Jan 2025 13:32:37 +0000
Certificate not after:    Mon 05 Jan 2026 13:37:37 +0000
Subordinate resources:    AS: 267551
                          IP: 45.70.48.0/22
                          IP: 2804:4324::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:4a:7c:2b:a3:05:46:9b:83:7f:6a:79:cd:45:16:aa:28:13:c9:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  6 13:32:37 2025 GMT
            Not After : Jan  5 13:37:37 2026 GMT
        Subject: CN=315119F0C7108A60EB3B6173D16C7114048C8D54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cc:a0:66:99:78:c1:f5:52:27:7c:83:94:50:
                    47:79:87:81:35:00:67:e2:e0:bb:00:9b:f2:62:16:
                    20:2b:d6:cb:50:ba:93:81:99:be:fa:83:da:07:34:
                    1d:ba:e9:96:ce:c1:aa:3a:45:d9:9d:47:b3:6d:9a:
                    2e:83:1b:4b:ee:9a:eb:22:95:af:9d:33:23:6d:28:
                    a5:f4:2d:75:9a:27:07:d2:6a:5e:12:8f:db:a6:ae:
                    ea:8c:d0:ed:87:ed:4e:86:53:9d:f6:e9:7a:4c:e6:
                    16:44:5b:dc:79:c7:95:6b:8b:47:28:65:db:0a:60:
                    08:be:20:0b:e5:d7:cb:a1:7b:50:bf:99:5a:9e:d0:
                    83:0e:91:cc:8d:0a:9e:d5:bf:47:6e:a4:5a:21:e6:
                    31:8d:a9:ad:4c:4f:30:7e:98:e9:47:0c:2b:86:85:
                    af:2e:3e:2e:96:c7:43:3a:4c:5f:b2:28:0b:55:81:
                    ad:76:27:54:2e:b3:38:11:5f:ef:ef:31:fd:d0:e7:
                    56:72:ae:58:c7:4f:96:de:82:60:dc:66:0e:97:7e:
                    e9:a1:46:b0:3a:73:79:8f:21:30:6f:92:7d:60:36:
                    fd:80:93:d7:3f:08:08:36:34:7a:f7:c7:1c:68:c4:
                    e9:cf:08:1e:40:59:33:0f:0e:6e:31:eb:1f:f6:d1:
                    2e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                31:51:19:F0:C7:10:8A:60:EB:3B:61:73:D1:6C:71:14:04:8C:8D:54
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xbNK3nw91aZEU6HeBRbZkBoTkTAPmw1ZG7c7zp99bV9/0/315119F0C7108A60EB3B6173D16C7114048C8D54.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.48.0/22
                IPv6:
                  2804:4324::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267551

    Signature Algorithm: sha256WithRSAEncryption
         50:ad:db:e7:6d:c5:84:95:05:5b:cf:2b:57:37:4f:25:77:38:
         a0:e8:19:03:c9:8f:8b:e1:21:a7:41:f3:8c:1c:36:1a:4b:5d:
         9c:c7:6c:26:c5:42:4a:7a:60:e5:69:76:88:07:0d:93:86:35:
         79:7e:86:79:64:cf:0a:b7:6b:d3:9c:64:c4:4c:9a:53:02:c6:
         da:ac:20:1f:71:41:3b:93:3f:d5:3b:c3:66:97:3c:e3:92:c8:
         cc:f3:d3:07:ee:29:e8:39:c6:2a:52:a0:71:47:50:a9:c4:4f:
         2e:0a:6c:02:35:ac:8c:dd:e0:ec:3c:d1:f2:e5:26:47:bd:c5:
         25:c4:71:c0:93:dc:a1:ef:3b:62:4c:2f:15:28:3f:7e:26:dd:
         19:f6:f4:e0:67:57:1c:a1:65:03:4f:c3:ad:eb:c1:fc:0e:e4:
         c0:07:2c:c9:e0:75:aa:b3:49:cf:4d:e7:18:19:3f:59:68:57:
         c8:1b:50:91:57:74:f9:35:7b:28:1b:c0:45:e0:08:83:a6:ee:
         54:df:20:bc:62:88:5b:12:9f:e8:61:20:44:4f:d2:4c:64:95:
         6b:67:54:d6:01:30:d5:06:a6:71:0b:f4:90:58:f0:54:e9:39:
         4e:c5:a4:05:ef:97:98:42:db:30:f3:1d:b5:47:3d:66:68:99:
         a4:60:38:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:26:57 2025 by rpki-client