Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer
File:                     3D2A1A094245D407474F93186CE3F25FFBBEE59E.cer (raw, json)
Hash identifier:          gO9xW6TSzo+F2Zqt7Cx5YpOmqq4Zb+1vEg30Icana/o=
Subject key identifier:   3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2BA49E20B98E8193AB543D7520F2B88D7F5096FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 25 Jan 2025 14:18:25 +0000
Certificate not after:    Sat 24 Jan 2026 14:23:25 +0000
Subordinate resources:    AS: 270551
                          IP: 189.50.220.0/22
                          IP: 2804:6db8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a4:9e:20:b9:8e:81:93:ab:54:3d:75:20:f2:b8:8d:7f:50:96:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 25 14:18:25 2025 GMT
            Not After : Jan 24 14:23:25 2026 GMT
        Subject: CN=3D2A1A094245D407474F93186CE3F25FFBBEE59E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:48:8b:10:1e:cd:94:1a:1a:d5:46:b1:fa:a6:
                    36:ab:e1:35:e6:48:50:63:e3:e1:3e:6c:be:17:a1:
                    dc:7f:ee:54:9a:39:f6:b3:06:e1:57:17:54:1a:6b:
                    51:29:ac:b7:ba:41:9a:3f:96:7c:00:10:28:30:19:
                    85:0b:96:9f:2b:ba:85:b6:64:66:51:71:f4:15:89:
                    48:d2:ed:e0:c4:2b:f6:15:1a:93:df:37:ca:73:89:
                    5c:92:1c:57:8d:21:4f:44:ad:c7:57:2e:f0:2f:2c:
                    83:3f:7b:e4:2a:45:d6:bc:a4:a6:44:fc:43:80:c3:
                    9e:38:aa:cf:e2:4e:61:c1:5a:1f:82:9d:3d:6d:30:
                    cb:e0:81:9d:8b:65:b6:c4:75:52:9e:ce:f2:cc:96:
                    01:fa:92:d3:66:b7:d2:46:6a:d9:29:d2:89:ad:af:
                    d5:b4:6c:1a:3b:73:3c:60:dd:1e:89:13:5e:55:bd:
                    0e:32:bc:dc:1a:f5:8b:56:37:4c:75:b7:09:26:c3:
                    2a:a7:6f:39:d9:19:ea:5c:4d:82:c5:ee:04:e5:db:
                    0d:82:a5:3b:3e:a8:fa:e1:fd:34:5a:4b:03:9c:06:
                    32:cb:03:af:ba:9c:0b:dc:46:91:43:aa:67:d2:57:
                    06:5b:57:5b:88:3a:0f:ab:75:8c:d2:ae:ea:e8:41:
                    1e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3D:2A:1A:09:42:45:D4:07:47:4F:93:18:6C:E3:F2:5F:FB:BE:E5:9E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4C5t3Vmr9j7ax1AXGK1uswQGxtDqyZTkLFMLgZnTcnRg/0/3D2A1A094245D407474F93186CE3F25FFBBEE59E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.220.0/22
                IPv6:
                  2804:6db8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270551

    Signature Algorithm: sha256WithRSAEncryption
         6e:7d:58:ba:34:0f:77:a2:8b:eb:2b:3b:c6:6b:f3:a3:d8:16:
         86:16:de:ae:3b:a3:ce:39:a0:43:ac:4d:18:2a:58:9d:06:b9:
         85:64:11:b3:99:3c:ad:08:05:b5:b6:00:e1:f8:4d:c3:c5:89:
         d6:60:7a:46:9f:62:6e:61:49:00:9b:af:9a:1e:d8:94:73:70:
         51:34:8f:2b:2e:88:ea:ca:1a:a5:1d:79:88:82:02:5a:1f:ed:
         b7:1c:e9:fe:7c:ea:0d:f5:ef:c2:f3:a5:e2:a9:5a:fb:90:0c:
         56:0e:31:37:73:de:cd:f8:75:6c:4b:f6:4b:86:f3:0a:14:c9:
         73:93:80:54:4c:e5:03:8e:6e:37:8f:58:3e:a4:e8:94:22:34:
         25:24:58:95:21:ad:95:40:f1:86:8e:72:be:2e:ef:44:22:28:
         c8:f0:b6:ca:b1:9f:67:69:21:23:1c:e1:1e:fe:6a:88:e9:03:
         23:57:42:f4:cd:33:9e:29:77:8d:57:cb:8e:f1:c8:91:48:fa:
         f0:85:04:92:7d:7f:04:45:7e:de:b1:46:8b:90:5e:f0:32:a0:
         b7:99:6f:b2:a2:e9:fa:20:dc:b3:cb:61:2c:9f:8c:03:6c:07:
         22:fe:56:42:ac:a4:22:0d:8c:83:b4:f8:71:83:f5:83:82:c1:
         8f:9d:88:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:14 2025 by rpki-client