Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.cer
File:                     37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.cer (raw, json)
Hash identifier:          8nowfJg1/e9mkIOn+fknOnoRkD+7rRh1sfaLAQULSIQ=
Subject key identifier:   37:FE:03:60:BF:70:C2:BB:2E:6A:D3:D3:4F:0D:94:2B:07:6F:AA:97
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0E375FF41EDEE6492C7196CCDA1F03F717C60597
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 16:52:11 +0000
Certificate not after:    Thu 05 Mar 2026 16:57:11 +0000
Subordinate resources:    AS: 268391
                          IP: 45.160.36.0/22
                          IP: 2804:5078::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:37:5f:f4:1e:de:e6:49:2c:71:96:cc:da:1f:03:f7:17:c6:05:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 16:52:11 2025 GMT
            Not After : Mar  5 16:57:11 2026 GMT
        Subject: CN=37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6d:5b:34:cd:72:c5:54:f2:88:9a:f8:c7:ae:
                    a7:5c:f3:c6:e8:57:b3:ec:1a:7c:81:d1:73:47:cf:
                    97:e5:34:6d:3c:e4:7a:35:72:de:68:0a:0f:0a:6d:
                    ec:8c:f8:6a:2c:4d:46:9d:0b:7e:ba:75:b4:b2:d1:
                    f1:26:04:fa:03:70:d8:94:eb:fe:4c:29:3b:d2:c1:
                    19:c0:0c:01:13:7d:4d:c2:7f:29:5c:00:24:d9:09:
                    44:95:b3:80:05:53:45:e4:65:8c:a6:be:db:94:2f:
                    0c:cf:f7:5b:f3:19:e6:61:50:09:14:93:3e:4c:51:
                    d0:a5:1e:31:87:22:e7:2d:58:bb:33:89:c8:17:5c:
                    ac:f5:be:dc:ba:6b:f5:34:5a:f8:7b:9f:0e:0b:22:
                    9a:c6:ce:62:0d:1e:44:70:67:ef:6b:32:0b:25:da:
                    16:c6:f7:6d:9d:00:98:86:3c:d7:df:62:db:0d:f0:
                    a0:a6:16:bd:81:9f:97:19:e0:11:98:f2:b8:52:13:
                    e0:27:38:e1:62:6a:80:f2:bf:7f:71:24:00:02:cd:
                    5b:41:8c:2d:4b:15:04:d3:3f:94:54:9c:65:58:17:
                    79:ad:fa:3f:f9:a7:ee:da:4c:1d:a2:ef:cb:f8:17:
                    9b:ae:9a:f4:c4:59:32:de:85:07:e0:6f:6e:24:54:
                    91:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                37:FE:03:60:BF:70:C2:BB:2E:6A:D3:D3:4F:0D:94:2B:07:6F:AA:97
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9uT7syL4yB6haruad5nZQDGn3an9hLTpNBhZQ8Lg8HMj/1/37FE0360BF70C2BB2E6AD3D34F0D942B076FAA97.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.36.0/22
                IPv6:
                  2804:5078::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268391

    Signature Algorithm: sha256WithRSAEncryption
         b0:08:a8:55:e8:6e:e4:19:64:16:80:08:6c:08:f5:14:29:92:
         f1:83:4e:5a:94:cb:a6:9d:c4:9a:d4:4e:46:5e:72:34:27:f4:
         01:da:eb:56:6e:5d:22:c7:ac:58:51:5d:06:78:57:69:88:26:
         ac:50:16:62:05:28:45:f1:9f:77:de:d4:74:89:7c:76:3b:1e:
         5a:54:b3:bc:bf:a5:0e:ab:5c:aa:fe:66:0e:f4:93:29:7b:98:
         64:81:4e:df:f1:08:31:b2:66:9f:d1:b0:e4:0d:d2:cb:05:2b:
         d8:86:56:00:16:42:0f:18:8d:c8:6b:16:d0:9a:b6:1a:bc:37:
         aa:e2:1e:c2:f2:e1:1a:af:77:76:ce:5f:d4:94:2a:e0:18:ea:
         b0:87:17:37:00:f0:a9:23:97:82:19:2e:bf:1a:e2:ab:93:2d:
         c5:cf:2e:a6:cd:0c:b4:31:1d:40:0d:73:9e:ed:26:95:fa:c8:
         ff:65:70:cd:57:7f:6b:c5:9c:00:c5:08:63:f4:8a:9d:ee:a8:
         7c:2f:2b:cc:c7:5d:ea:d1:7b:9e:00:a6:82:d3:7b:17:d8:01:
         f8:be:66:7e:1f:71:fd:15:e4:ff:ee:87:2b:5b:07:23:09:46:
         63:61:73:67:b4:86:1d:cf:76:98:e3:bd:bc:68:b8:d1:12:72:
         f5:2f:93:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:36:23 2025 by rpki-client