Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3925EED4443902E12DF7A9A139E25CB34974D01A.cer
File:                     3925EED4443902E12DF7A9A139E25CB34974D01A.cer (raw, json)
Hash identifier:          pyFbbGBL2myNVp/ljvrW2WsHqspNgQuVYeLCo98+BmU=
Subject key identifier:   39:25:EE:D4:44:39:02:E1:2D:F7:A9:A1:39:E2:5C:B3:49:74:D0:1A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       713F067D8238D7649D6751DE9828D9E4B1683784
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3925EED4443902E12DF7A9A139E25CB34974D01A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Jan 2025 14:00:26 +0000
Certificate not after:    Fri 16 Jan 2026 14:05:26 +0000
Subordinate resources:    AS: 263603
                          IP: 170.80.12.0/22
                          IP: 177.11.76.0/22
                          IP: 2804:fc8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:3f:06:7d:82:38:d7:64:9d:67:51:de:98:28:d9:e4:b1:68:37:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 17 14:00:26 2025 GMT
            Not After : Jan 16 14:05:26 2026 GMT
        Subject: CN=3925EED4443902E12DF7A9A139E25CB34974D01A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:05:cd:d9:15:80:dd:99:20:8d:f8:2c:ad:1c:
                    7b:e7:48:89:bd:78:1c:94:b6:29:44:ea:59:54:e4:
                    a2:b2:05:84:39:f3:b4:95:26:87:35:f0:93:16:ea:
                    ba:d1:d9:cf:49:9f:76:06:87:dc:03:96:a9:8c:05:
                    65:a3:eb:ff:b9:78:e0:f5:a2:d4:2e:b1:87:73:0a:
                    45:73:81:92:92:8e:e7:37:bd:64:5c:e8:b5:ae:69:
                    5f:cf:ee:f0:91:1a:f6:85:e4:e9:64:a2:5f:0f:6c:
                    e0:3c:11:c0:e6:c8:95:45:79:14:bf:be:f4:aa:0c:
                    8e:3e:e0:ad:dd:49:5c:09:8c:31:6b:f6:6e:da:9a:
                    62:77:20:5f:e3:75:5e:54:5c:97:cf:06:a3:50:92:
                    fa:01:5a:07:c2:5c:88:76:fa:4e:8c:8c:44:fd:d8:
                    08:78:55:41:40:44:ea:cf:3a:3c:89:8e:29:12:2d:
                    83:6f:c9:d8:36:71:06:75:e4:3f:96:44:4d:86:77:
                    2b:1e:94:ba:e5:44:e0:fd:50:e1:3d:e2:33:d2:65:
                    34:c5:47:1e:b1:d0:23:42:e3:51:17:d5:61:ec:75:
                    da:1c:07:20:ce:14:95:5a:78:16:5a:d4:d6:44:70:
                    ae:26:ea:37:82:ad:6d:08:91:e2:e5:0f:8e:10:03:
                    e2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                39:25:EE:D4:44:39:02:E1:2D:F7:A9:A1:39:E2:5C:B3:49:74:D0:1A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3925EED4443902E12DF7A9A139E25CB34974D01A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.12.0/22
                  177.11.76.0/22
                IPv6:
                  2804:fc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263603

    Signature Algorithm: sha256WithRSAEncryption
         68:93:73:84:a2:8d:3f:c6:18:0e:ea:0c:e0:49:e6:93:fa:28:
         00:39:75:41:2a:2b:d2:d3:22:dd:71:c6:10:b2:7d:03:fd:3d:
         e6:eb:56:21:e0:39:db:69:48:13:73:e8:94:7f:6d:ab:6b:04:
         b9:7d:82:04:8b:50:db:dc:5c:bb:dc:06:e6:81:41:d6:47:e0:
         1f:29:40:59:5a:36:ab:6c:28:97:ca:df:64:c0:22:b6:66:52:
         2e:6b:6f:ae:99:ce:c6:0c:db:1e:10:78:13:92:d0:ac:8f:fb:
         29:4c:e9:08:47:25:88:2c:d7:2f:52:b7:cd:6a:0b:f2:34:de:
         7e:35:40:6d:6e:1a:2b:13:f8:e5:6e:6f:c6:1b:f6:14:96:d0:
         0f:71:14:12:37:ff:a1:6d:7d:bc:9e:05:b4:05:eb:c6:89:7a:
         64:1b:19:e9:48:20:5b:9a:1f:1c:b5:73:ff:cc:85:f9:69:60:
         ce:7f:7c:96:45:b4:ac:da:4e:c5:2d:37:4a:c9:4f:c6:a2:00:
         d2:a4:23:81:e8:49:36:0e:a5:18:f5:11:45:e3:8e:dc:83:58:
         bf:e7:74:78:f3:ea:2a:db:c3:0d:3c:19:25:7a:20:79:bd:f5:
         bd:46:92:f5:12:d7:08:0d:db:24:a1:55:d8:ef:c6:96:4e:5e:
         23:de:28:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:53 2025 by rpki-client