Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3BA0E4707E0361E96A25CFBC6104551202B34011.cer
File:                     3BA0E4707E0361E96A25CFBC6104551202B34011.cer (raw, json)
Hash identifier:          iu5wG4Y84SrGmxgGfdjIuqt3aoYOibkmzc/qTfpFl04=
Subject key identifier:   3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       16E14DBF5E78A54098C69557D963ABCE3592EFDE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Mar 2025 00:01:56 +0000
Certificate not after:    Mon 23 Mar 2026 00:06:56 +0000
Subordinate resources:    AS: 265222
                          IP: 168.0.32.0/22
                          IP: 2804:2c7c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e1:4d:bf:5e:78:a5:40:98:c6:95:57:d9:63:ab:ce:35:92:ef:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 24 00:01:56 2025 GMT
            Not After : Mar 23 00:06:56 2026 GMT
        Subject: CN=3BA0E4707E0361E96A25CFBC6104551202B34011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:af:0d:9b:38:c4:bc:31:d5:3d:97:e6:de:6b:
                    54:36:e0:4e:b8:f5:79:66:bc:d7:c3:6c:e1:b0:fe:
                    f7:2f:24:6d:61:29:9b:42:0f:7e:46:5c:13:21:5c:
                    3f:04:7a:c9:bd:e8:7e:de:99:10:2a:c3:23:be:eb:
                    f2:a6:49:3b:76:90:c8:80:f4:b4:91:a5:a3:58:d0:
                    04:38:f0:da:cf:21:6d:34:d3:dc:bb:43:67:2f:90:
                    ac:83:04:81:df:00:34:b0:4c:29:12:80:eb:50:c1:
                    ee:ad:cf:9c:fd:2e:ef:5c:60:e5:2b:f3:bd:46:0a:
                    62:de:fc:39:a9:df:de:41:3b:5a:b5:27:34:f6:ee:
                    23:a2:a1:ed:9f:ad:92:00:00:65:17:36:a4:b7:be:
                    08:2d:bc:11:7d:0e:71:ac:e3:83:70:9f:36:0b:4e:
                    30:df:61:00:ef:29:fe:62:15:f4:36:09:bd:7d:6c:
                    52:1b:e6:dc:9f:5b:b2:2a:04:ed:60:cf:96:fa:42:
                    9c:2e:29:5d:b0:0f:4b:82:34:e0:15:4c:5e:38:0b:
                    a0:39:6d:cf:1e:67:7d:e6:ce:61:c2:b5:e6:35:51:
                    54:16:ec:4d:f0:dc:aa:b5:09:ef:ae:89:44:4b:a2:
                    ed:dc:55:ac:dd:16:9f:e7:32:e5:83:bb:4a:1f:1e:
                    2f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3B:A0:E4:70:7E:03:61:E9:6A:25:CF:BC:61:04:55:12:02:B3:40:11
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ahp1RgpnjWVcHyp7EA9GicjtyLSXGVy3C1xxGeHiNjse/1/3BA0E4707E0361E96A25CFBC6104551202B34011.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.32.0/22
                IPv6:
                  2804:2c7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265222

    Signature Algorithm: sha256WithRSAEncryption
         a0:49:22:52:a8:cf:39:87:cc:2a:f0:99:9c:80:f4:e3:65:29:
         cc:7e:28:1c:8b:3d:14:a6:90:01:46:f7:04:25:f8:f4:fb:1a:
         82:e0:92:13:8c:04:73:af:f7:ab:f1:91:6d:32:59:59:0b:c9:
         70:88:f4:98:49:62:92:bb:81:22:b3:6f:7a:7a:1e:38:5e:5e:
         ce:3b:59:ba:c8:94:b6:f8:10:f4:18:c0:64:c9:e2:79:12:73:
         f4:ad:ee:e9:c4:db:1e:f7:c2:0d:33:51:a9:36:2a:03:d3:6e:
         91:6a:b4:6a:65:7a:97:c0:d8:3d:bf:19:6d:d4:42:d2:cc:2c:
         6d:3b:15:ac:3a:2d:92:5c:1b:0e:a3:54:77:b8:59:b4:3d:0a:
         ac:cf:e7:37:f8:87:68:5d:d2:e8:82:2f:8b:09:4a:4b:94:25:
         e6:4f:63:ce:49:c5:96:6b:66:15:e0:b4:47:7f:20:d0:c8:15:
         9b:05:be:59:70:0a:a2:79:dc:aa:a5:3d:67:dc:4f:a1:60:09:
         8e:b6:51:9e:9c:66:25:86:33:ac:5f:f9:65:10:17:b7:40:cc:
         7f:d6:10:35:b8:ee:67:4e:fa:24:7f:58:b4:2e:da:99:02:4c:
         f7:d2:d1:64:19:26:7c:ee:8e:90:77:3f:ad:70:cf:1a:c4:6f:
         01:e7:01:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:33 2025 by rpki-client