Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3A5BDFC276B561E79FD3A38ED1E2583CDF3C5EE4.cer
File:                     3A5BDFC276B561E79FD3A38ED1E2583CDF3C5EE4.cer (raw, json)
Hash identifier:          PgO7APlDjRnWt1Kgx3ReDc0tSReqqd/yQYCM39xcbeg=
Subject key identifier:   3A:5B:DF:C2:76:B5:61:E7:9F:D3:A3:8E:D1:E2:58:3C:DF:3C:5E:E4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5B24F3C53A2E29F3F845F2D771742AC3F457EF8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/3/3A5BDFC276B561E79FD3A38ED1E2583CDF3C5EE4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/3/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 05:26:52 +0000
Certificate not after:    Thu 03 Apr 2025 05:31:52 +0000
Subordinate resources:    AS: 266072
                          IP: 45.4.140.0/22
                          IP: 2804:3a20::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:24:f3:c5:3a:2e:29:f3:f8:45:f2:d7:71:74:2a:c3:f4:57:ef:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 05:26:52 2024 GMT
            Not After : Apr  3 05:31:52 2025 GMT
        Subject: CN=3A5BDFC276B561E79FD3A38ED1E2583CDF3C5EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e6:e3:7a:c8:71:09:5d:4d:8e:b7:e5:88:f9:
                    e9:d7:4b:f0:79:70:81:31:5c:a5:01:fb:09:fc:c0:
                    df:ef:de:84:54:28:c9:ab:4b:82:8f:d5:22:a9:37:
                    c5:90:c2:2c:96:cd:2f:e5:b8:80:f8:8b:a8:c0:14:
                    74:43:be:99:24:00:1c:86:54:c2:b1:57:c4:a2:ec:
                    1c:65:d7:95:20:f4:4b:f9:31:f6:00:94:3d:3d:e9:
                    99:56:3a:35:93:b1:ce:1c:f8:c7:81:f2:a3:c3:23:
                    8e:28:8e:6a:ac:42:9c:7c:03:19:a9:34:32:60:0f:
                    bf:8a:be:39:76:71:9a:40:70:58:34:36:bc:12:38:
                    74:bd:32:e9:4b:22:fb:09:4d:1a:44:20:73:fd:92:
                    29:9d:5c:c5:0f:37:be:88:3f:9a:43:c9:d5:53:b7:
                    ec:84:da:18:01:5f:06:45:3b:48:42:e8:a5:f7:c7:
                    f0:ed:5c:77:83:5f:1c:83:1a:0c:9a:c4:cc:4e:3b:
                    eb:a9:ab:79:f1:7e:92:91:e6:d4:95:9b:d1:ae:92:
                    f2:6f:9e:10:55:aa:ed:bb:25:bb:16:11:f1:0e:01:
                    df:f3:9a:d6:a1:cb:c7:a2:90:01:73:f9:0e:db:5b:
                    e7:1f:6a:db:bd:3a:d3:2d:54:83:fe:a4:9f:63:14:
                    36:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3A:5B:DF:C2:76:B5:61:E7:9F:D3:A3:8E:D1:E2:58:3C:DF:3C:5E:E4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/3/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/3/3A5BDFC276B561E79FD3A38ED1E2583CDF3C5EE4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.140.0/22
                IPv6:
                  2804:3a20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266072

    Signature Algorithm: sha256WithRSAEncryption
         16:7d:79:67:ca:5d:60:1b:1e:a1:8f:25:de:8f:53:d1:18:ac:
         53:2e:2a:12:5f:ff:5b:db:3e:05:4f:a5:b0:a0:9c:8e:c8:90:
         7d:8e:b7:c1:2c:4f:be:90:1e:f7:f0:43:c0:61:38:64:2e:d1:
         33:44:6c:0a:e0:25:8d:e1:fe:b7:62:08:40:26:1e:7f:e9:06:
         d3:bb:3b:6f:01:5e:c7:98:fc:72:75:c7:1d:1f:87:81:b4:71:
         a3:ac:af:77:50:42:ea:8f:34:09:96:db:4b:df:24:88:e0:58:
         af:88:ad:db:c6:3d:9e:0e:4d:ef:4f:4f:93:4f:4d:1c:1e:d2:
         50:14:51:ff:48:63:58:7e:af:17:1d:64:54:c4:72:e8:20:3d:
         be:4c:ad:7f:11:47:7c:b5:e9:59:f0:83:0d:63:1b:54:6f:95:
         1d:78:59:0b:bf:4c:11:90:19:2f:be:de:84:8d:d5:bb:7c:1b:
         c7:92:41:a7:1c:0b:65:81:eb:d0:71:57:33:5a:53:81:f7:29:
         64:38:b6:34:9d:f8:7d:c9:4b:d7:6e:c0:f4:b7:39:2e:9a:ef:
         28:44:cd:69:da:3a:0c:29:36:c5:83:5f:d1:ee:15:b5:94:d5:
         08:56:ce:c7:b6:50:e0:23:e3:66:41:25:20:55:b2:b8:4e:3b:
         4f:b1:1f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:33:20 2025 by rpki-client