Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.cer
File:                     3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.cer (raw, json)
Hash identifier:          fyJFLoXp/JJsCQGa3nl4oBnCaBM03lSRmAsl8Lkxg4M=
Subject key identifier:   3B:5B:BC:E7:F8:F2:8C:41:BF:C3:07:B8:43:0A:56:A1:6C:67:E8:00
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       21BAF74E494F031453B9F02696813C84416B3131
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Mar 2025 15:05:26 +0000
Certificate not after:    Thu 12 Mar 2026 15:10:26 +0000
Subordinate resources:    AS: 271484
                          IP: 181.233.16.0/22
                          IP: 2804:7c40::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ba:f7:4e:49:4f:03:14:53:b9:f0:26:96:81:3c:84:41:6b:31:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 13 15:05:26 2025 GMT
            Not After : Mar 12 15:10:26 2026 GMT
        Subject: CN=3B5BBCE7F8F28C41BFC307B8430A56A16C67E800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a6:e8:36:16:83:dc:de:74:e5:83:a6:e6:fc:
                    36:33:aa:85:39:33:36:3e:10:40:76:7e:fb:5e:17:
                    94:4c:ee:2d:f2:43:95:a0:43:b9:97:1c:86:62:3f:
                    f9:5c:65:d0:f0:db:12:e2:37:0c:88:a7:42:66:94:
                    f6:43:2e:c5:1b:6a:00:87:52:44:d7:6a:ae:9f:40:
                    62:c9:cb:62:e3:56:36:43:7f:ae:97:7d:2e:fe:c1:
                    e3:ca:dc:92:d4:61:c3:6b:44:11:77:ba:70:a9:b1:
                    19:71:0e:1e:7d:f8:7c:e9:2e:99:a1:4f:bc:c1:23:
                    db:5b:4c:02:6e:9e:bb:33:1b:41:b1:93:4f:e0:8e:
                    70:38:02:72:34:29:37:d8:bb:1f:cc:4b:8c:db:d4:
                    0c:5d:16:94:82:3d:23:c4:53:95:a8:b9:61:bd:51:
                    b9:c8:16:a8:81:09:99:5c:0d:52:10:c7:e0:3e:c5:
                    77:05:fa:c5:71:76:a3:7d:36:12:93:50:50:c6:f0:
                    63:c2:37:32:04:58:25:1f:00:13:a4:01:81:10:25:
                    a8:0b:4f:99:af:94:b1:0d:e3:98:72:2e:42:60:8a:
                    aa:ee:fc:e1:08:e3:1f:2b:e5:30:14:6d:21:8d:ec:
                    42:0a:50:27:b2:f5:34:50:13:44:03:16:92:42:e4:
                    b6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:5B:BC:E7:F8:F2:8C:41:BF:C3:07:B8:43:0A:56:A1:6C:67:E8:00
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.16.0/22
                IPv6:
                  2804:7c40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271484

    Signature Algorithm: sha256WithRSAEncryption
         bf:36:71:3d:70:7f:83:75:27:db:6e:19:72:83:d3:1a:a4:aa:
         41:0e:82:14:0f:c7:d9:8f:d5:16:79:79:40:27:36:9f:90:d7:
         8f:79:ef:b7:bf:13:aa:ed:22:1d:b6:7c:e2:64:86:d2:f4:bd:
         93:fe:6c:19:4f:47:7f:4b:9a:dd:2c:54:7e:c9:ab:82:4e:b5:
         0a:92:e9:e1:6e:b7:b1:eb:4b:e8:88:b7:06:ef:a7:66:a0:1a:
         83:35:fa:e2:3e:26:fb:27:81:7a:07:62:7a:3e:92:0f:58:d4:
         39:33:7a:f7:3f:8d:2a:9e:c0:36:cb:87:73:6b:bf:14:91:68:
         2f:09:6d:b8:08:28:b0:51:4f:e2:a8:28:36:01:cb:a1:09:ab:
         17:7d:d8:8a:36:7e:79:65:65:2f:e0:f6:37:c7:e9:99:36:13:
         69:ee:bc:14:55:ae:ce:d6:ea:17:26:e3:e1:81:a8:7c:06:7d:
         aa:42:28:8f:db:80:f6:a4:c7:48:f2:db:1b:55:cc:60:38:f9:
         2d:dd:25:24:2f:b9:15:10:a0:03:87:c8:f6:44:01:8e:d1:9f:
         cc:08:2e:b3:09:56:cd:d4:89:16:23:3e:79:11:69:5a:14:e5:
         ac:7a:f5:7f:9a:d6:ac:fc:46:6a:65:c6:b0:46:90:6e:c7:8d:
         93:7a:e9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:05 2025 by rpki-client