Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer
File:                     3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.cer (raw, json)
Hash identifier:          yvN/wlTS+/TcKj34P3hYV/0gAJIDBWBnKiYg0uzFmEs=
Subject key identifier:   3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       73695E7BD79F0F396404F4EC528885C1CFAD5A7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:48 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:48 +0000
Subordinate resources:    AS: 271367
                          IP: 200.36.216.0/22
                          IP: 2804:7a60::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:69:5e:7b:d7:9f:0f:39:64:04:f4:ec:52:88:85:c1:cf:ad:5a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:48 2025 GMT
            Not After : Mar  4 18:40:48 2026 GMT
        Subject: CN=3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ab:20:9e:60:ea:cd:30:4d:a0:1f:df:45:31:
                    b7:fb:18:0b:00:d7:a7:b9:65:59:b1:db:b0:4d:f7:
                    c8:25:98:f2:66:bd:31:32:0a:39:1b:3e:c5:80:87:
                    95:15:b1:4a:fe:0e:7a:d2:a1:1e:cb:bd:b0:92:83:
                    66:93:6d:c3:58:c1:d7:20:4d:fd:51:1f:9c:a5:39:
                    fe:ef:99:86:9e:7a:e9:b0:f3:44:d5:eb:44:bd:5f:
                    8f:0f:a2:0c:6b:0b:c6:7b:10:a2:bf:fe:6e:b5:1f:
                    f5:93:fc:9b:24:33:c4:45:e1:da:3e:e4:e8:a6:bb:
                    c7:18:71:3d:ee:e0:ee:99:9c:7c:0a:11:0a:b2:ef:
                    41:9f:70:2c:b3:ac:31:59:75:8a:d5:9b:84:03:63:
                    da:7b:cc:f6:fb:bb:24:9f:af:47:dd:49:72:b2:76:
                    1d:8d:8c:6a:7e:2c:54:1d:b3:ec:74:76:c4:bd:fc:
                    fe:f1:ef:2e:cf:fe:55:d5:f6:11:0b:c4:12:bb:82:
                    37:69:79:f0:d4:4d:6e:2e:10:2b:59:f8:26:a0:d8:
                    17:f0:82:53:4d:71:68:a8:b9:4c:3a:5e:6f:e3:07:
                    0c:16:f1:02:51:79:bb:2d:de:18:00:62:7f:7a:2c:
                    1c:ae:59:b0:35:ec:2c:9e:d6:8a:f7:8b:b5:b7:37:
                    91:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3A:BF:96:D1:8E:7E:05:A2:4E:DA:A1:17:D2:B9:E7:6A:07:FE:C5:CE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BFYHy3pBkYRQtrB8M6jwJMajyW4dfzkEmRYTsFtwusgr/1/3ABF96D18E7E05A24EDAA117D2B9E76A07FEC5CE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.216.0/22
                IPv6:
                  2804:7a60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271367

    Signature Algorithm: sha256WithRSAEncryption
         bc:5c:2a:64:f5:b4:e8:13:5c:fd:7c:a0:91:2f:58:d0:f0:ea:
         ea:91:cf:39:50:78:46:45:a0:0a:33:d7:1e:e7:0b:a6:bf:ba:
         fe:b5:59:5b:a0:6b:f9:cb:97:6d:a5:63:92:8e:5c:b6:5e:c3:
         38:b8:88:d0:a2:81:fa:5c:42:58:8e:54:35:62:24:55:3a:79:
         86:72:83:73:c7:06:9e:c6:c3:ca:d8:c0:ee:56:f5:48:4e:15:
         79:fa:83:e8:d8:8c:bc:46:aa:e9:92:8f:a2:74:c6:22:82:34:
         86:bd:18:a9:19:55:43:05:e0:9b:43:ae:57:4d:54:0c:77:d6:
         16:be:34:c3:1a:a1:62:27:c6:fe:55:ea:7e:51:45:b7:48:89:
         c0:b3:68:6e:42:6b:e5:86:6f:52:0a:93:3b:0c:77:00:99:24:
         fd:51:ff:05:67:0f:7f:41:b5:8d:ed:5c:15:ce:13:6f:ed:25:
         11:62:13:ef:c5:1a:c9:27:43:8d:f8:6d:e7:c4:3b:13:20:fd:
         3b:fe:88:00:88:41:88:52:d7:0e:3b:3f:37:ab:f8:ad:50:3f:
         16:e7:aa:3d:ec:97:8c:01:05:8a:3e:61:44:dd:f5:da:eb:9c:
         8a:e2:97:49:23:f9:d1:ae:3b:7d:19:c2:5e:3d:ea:2f:41:7c:
         43:f0:f7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:33:35 2025 by rpki-client