Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/37B806BF29E248B54BB5E131FC505AA28CD8E67B.cer
File:                     37B806BF29E248B54BB5E131FC505AA28CD8E67B.cer (raw, json)
Hash identifier:          FvsHh2SZBlCRZBIOXyNCRHc9K1tZtTNx0Bf4Q3TrIBk=
Subject key identifier:   37:B8:06:BF:29:E2:48:B5:4B:B5:E1:31:FC:50:5A:A2:8C:D8:E6:7B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2A052511034D90AE30FFE263F8ED6D2A5DD42B9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GgintYyM1MkCsi6iGj7xDS8ommMtpj9KFQy4cjUk26qw/1/37B806BF29E248B54BB5E131FC505AA28CD8E67B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GgintYyM1MkCsi6iGj7xDS8ommMtpj9KFQy4cjUk26qw/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 11:46:50 +0000
Certificate not after:    Fri 06 Mar 2026 11:51:50 +0000
Subordinate resources:    AS: 262439
                          IP: 177.52.80.0/21
                          IP: 2804:5a98::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:05:25:11:03:4d:90:ae:30:ff:e2:63:f8:ed:6d:2a:5d:d4:2b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 11:46:50 2025 GMT
            Not After : Mar  6 11:51:50 2026 GMT
        Subject: CN=37B806BF29E248B54BB5E131FC505AA28CD8E67B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:a6:4e:1f:1c:19:12:a3:54:22:c8:6b:6e:
                    15:e0:91:d3:ba:be:b4:90:a5:13:1e:27:78:2a:43:
                    68:42:51:06:fd:4f:ad:31:e5:17:72:0d:5d:e2:e5:
                    10:d3:0b:77:f7:0a:ea:73:28:b7:2c:4c:1e:95:10:
                    2e:6f:0e:05:d9:08:50:a2:73:21:37:8f:67:c9:8d:
                    ed:d3:01:76:b0:e6:6e:9c:c5:d7:b9:db:64:b3:4a:
                    95:d8:c3:26:de:11:b7:31:4e:21:58:9b:c5:84:f4:
                    cb:da:82:de:86:21:1c:d0:57:79:a1:91:12:36:f0:
                    cd:c6:6d:fd:0c:f8:dd:25:21:a2:5c:96:58:fa:23:
                    19:15:29:a1:e3:ac:6e:b0:95:ae:5b:98:50:a1:b4:
                    fa:32:06:ac:15:ca:eb:ec:c6:64:c7:f5:c4:6e:11:
                    84:f1:68:70:87:a5:68:c0:74:d3:35:f0:24:c3:22:
                    9c:0a:1d:71:a4:13:2e:7a:79:0c:a4:84:58:fb:a6:
                    a8:59:c9:59:44:73:e6:17:8b:84:81:09:73:1c:25:
                    74:95:bc:d0:e3:33:90:25:00:78:59:48:b5:0c:dd:
                    be:a1:2d:23:d6:41:06:0c:51:7a:d3:97:7f:1d:e8:
                    ae:45:b2:0c:fb:c2:2b:a0:41:b2:8b:93:75:45:f4:
                    64:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                37:B8:06:BF:29:E2:48:B5:4B:B5:E1:31:FC:50:5A:A2:8C:D8:E6:7B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GgintYyM1MkCsi6iGj7xDS8ommMtpj9KFQy4cjUk26qw/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GgintYyM1MkCsi6iGj7xDS8ommMtpj9KFQy4cjUk26qw/1/37B806BF29E248B54BB5E131FC505AA28CD8E67B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.80.0/21
                IPv6:
                  2804:5a98::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262439

    Signature Algorithm: sha256WithRSAEncryption
         ae:ed:86:68:5d:b0:24:4a:de:93:9f:4e:4d:6d:de:0e:47:d2:
         16:70:b7:bc:1d:9e:d9:10:d6:a7:b9:c9:3c:b2:c9:1d:0b:aa:
         23:ae:d2:fb:1e:39:3c:3e:97:41:2e:36:60:b1:84:bc:87:04:
         13:c5:51:5a:2c:92:77:49:3e:fb:12:d0:f2:82:01:1a:5c:54:
         21:33:ac:90:c1:38:e5:35:c0:9e:33:14:da:7b:74:67:3e:a5:
         53:7b:47:a8:b1:a5:44:d0:2c:c9:23:e2:52:39:5a:69:de:9f:
         cb:0d:df:15:3e:40:f7:0c:60:98:aa:09:19:f0:d4:d0:42:4a:
         48:2b:f7:c2:67:17:97:f4:75:7a:a5:ef:25:66:bd:1f:16:44:
         42:2c:dc:2c:64:74:da:c4:bb:da:0f:84:cb:76:e7:c5:f0:56:
         e3:72:14:c7:40:6f:26:4d:48:4c:2a:62:48:29:51:6d:2f:b4:
         64:36:33:76:19:b5:2c:e0:9e:1d:16:9e:83:9f:06:46:57:21:
         6a:4c:c7:22:b1:fc:ce:b4:17:65:6e:26:21:ab:89:d7:58:81:
         53:65:0c:d2:61:77:c3:90:d5:33:16:2f:c4:16:49:20:e0:79:
         12:59:c1:f7:83:c4:92:31:aa:80:76:a0:2d:d5:63:5c:5d:be:
         cf:11:70:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:32:53 2025 by rpki-client