Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer
File:                     3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.cer (raw, json)
Hash identifier:          noVdPVUg2bkzhhHFQRPXeHJnSuf8AUU0A8dVf6vrPXA=
Subject key identifier:   3A:5A:1F:BD:FB:AC:3B:0E:47:1D:80:73:BA:46:35:F1:7B:26:60:48
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       35D1818276080326AC3534FEEB251C03DB8A69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Mar 2025 11:46:01 +0000
Certificate not after:    Fri 20 Mar 2026 11:51:01 +0000
Subordinate resources:    AS: 270838
                          IP: 189.39.180.0/22
                          IP: 2804:7230::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d1:81:82:76:08:03:26:ac:35:34:fe:eb:25:1c:03:db:8a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 21 11:46:01 2025 GMT
            Not After : Mar 20 11:51:01 2026 GMT
        Subject: CN=3A5A1FBDFBAC3B0E471D8073BA4635F17B266048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0a:8a:25:21:b5:4e:a9:60:c0:df:1a:37:9f:
                    c8:3f:15:6b:58:a7:94:50:bb:b7:0b:f3:51:dc:d6:
                    eb:f6:12:1a:47:ab:80:f4:50:e0:43:45:4e:09:66:
                    55:ac:ea:58:19:f2:23:3f:50:d9:b3:62:25:21:bd:
                    d6:80:87:62:9e:2f:49:a4:fe:6f:c0:9c:4d:09:3a:
                    70:e7:3f:04:53:3d:4b:61:59:d2:47:37:dc:69:70:
                    f7:40:64:8f:59:86:86:90:7c:24:cf:ba:c8:9c:88:
                    75:78:02:ba:df:b3:a8:c7:35:bd:43:f5:88:3b:4a:
                    5c:f2:da:9f:6f:c7:18:50:a3:86:3c:10:e5:cf:b8:
                    06:5c:fa:94:69:d1:04:63:f8:26:3a:4c:ee:5b:57:
                    64:43:d0:a6:d3:2c:7f:11:65:27:59:a1:16:18:e0:
                    c8:b9:9e:cc:61:49:a9:96:7e:6e:5c:c9:62:d9:72:
                    79:7a:92:0a:b1:9a:4f:e9:79:a7:b9:f5:11:1e:57:
                    77:b0:55:65:10:fb:72:13:98:9a:f8:95:7d:c3:4e:
                    6f:6a:be:d3:8e:00:c1:5a:9a:86:0a:0e:02:5a:1c:
                    ba:74:f4:d6:77:e9:f4:03:b5:b2:cf:6a:13:8a:22:
                    e7:1e:4f:e3:c5:49:94:f4:73:2c:97:e1:31:02:d4:
                    50:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3A:5A:1F:BD:FB:AC:3B:0E:47:1D:80:73:BA:46:35:F1:7B:26:60:48
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BSxbezzeZAZx9dLR7Aj6BgTy88V2c3xXTzQYhZz2D9ik/0/3A5A1FBDFBAC3B0E471D8073BA4635F17B266048.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.180.0/22
                IPv6:
                  2804:7230::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270838

    Signature Algorithm: sha256WithRSAEncryption
         37:08:b4:a6:91:c1:23:ae:df:e0:c7:2c:f2:15:09:04:08:40:
         7c:b0:d2:3e:e9:6d:0d:0b:c1:35:3f:f3:1d:aa:64:47:67:66:
         a8:b8:3b:38:30:7e:c9:bd:e1:00:ef:ea:76:35:fb:db:ed:f4:
         ba:b4:23:99:d0:af:05:3f:42:f4:f3:3e:b6:ae:41:60:19:1e:
         87:28:b8:6d:01:73:be:e0:da:e4:10:0b:82:aa:f4:f0:78:30:
         e6:fb:d6:ae:54:b8:f8:3d:a9:46:04:8c:24:02:b6:0f:57:80:
         4f:2b:3d:29:79:4b:5b:be:59:07:cf:99:22:b6:63:8c:b0:93:
         b0:23:d2:91:3c:a5:43:60:21:59:ca:1e:da:7e:cf:20:5e:fa:
         f9:9c:5e:3d:f7:56:35:7b:65:88:84:82:00:15:0c:9b:1e:85:
         39:d2:9a:e8:27:70:e6:99:5c:8a:10:17:fe:34:bb:01:9d:e0:
         03:43:ae:8d:dd:66:55:4d:45:24:85:59:15:c4:64:cb:c1:d3:
         eb:1d:0f:27:9e:65:29:17:91:bc:07:11:c9:23:e1:ef:19:77:
         11:d2:9d:dc:51:94:40:5b:9d:e4:3f:07:af:50:4c:b0:10:ec:
         bf:48:55:ad:fc:42:cb:46:4e:d0:8e:23:05:df:cc:cf:e3:e2:
         93:0b:c9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:49 2025 by rpki-client