Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer
File:                     3DC690C0DE80131B223BEE70D7F6FF990A15F341.cer (raw, json)
Hash identifier:          J/v8Ju4sELBlO9ZCYbN83kEy4wn9NCSnOQvehxs6Nb0=
Subject key identifier:   3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       24B7C66009A64EA9474E35F7A8539E5C7D8BBB88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:39 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:39 +0000
Subordinate resources:    AS: 268137
                          IP: 45.169.200.0/22
                          IP: 2804:5894::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b7:c6:60:09:a6:4e:a9:47:4e:35:f7:a8:53:9e:5c:7d:8b:bb:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:39 2025 GMT
            Not After : Mar  4 18:40:39 2026 GMT
        Subject: CN=3DC690C0DE80131B223BEE70D7F6FF990A15F341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9f:9b:ab:0f:37:ad:da:bf:20:76:77:14:bc:
                    60:4e:a5:03:10:be:10:bf:be:f2:f9:82:6e:be:29:
                    7b:3e:90:73:db:7c:73:07:27:d2:7c:b8:e2:f2:0d:
                    12:cd:47:cc:d0:9c:0a:04:9b:8b:a3:8d:1b:8c:0f:
                    e5:aa:b2:bc:9e:0c:e6:15:01:49:3b:1d:cf:96:de:
                    64:19:3e:1f:a4:54:da:b0:22:00:b5:77:89:35:64:
                    69:da:cd:44:61:10:9d:bb:5b:6b:2c:45:c7:dc:a5:
                    0d:76:d4:9f:c2:1c:f5:7e:3f:9b:b3:2e:db:d9:4c:
                    bf:ef:f7:16:61:4a:a5:24:a7:40:b2:65:db:c4:cd:
                    e6:35:c5:8e:3e:c3:28:dc:6b:7c:51:01:a4:5a:8a:
                    a2:2c:8d:f6:ab:47:30:bd:96:e8:ba:4c:86:a5:35:
                    81:8e:3c:c6:6a:6f:3e:7d:15:79:74:66:42:23:de:
                    b9:8a:f7:f0:98:1d:22:c4:d2:25:be:8e:ad:4e:86:
                    f4:e7:b5:98:01:b3:6d:1c:32:84:2e:a4:a0:f0:76:
                    29:2d:9d:42:a0:f5:2e:ae:38:72:bb:f1:36:25:ba:
                    b3:42:75:4b:57:e6:62:04:47:45:23:bf:e0:60:4b:
                    55:60:b5:30:e8:a2:22:f9:43:60:f9:e7:61:84:c8:
                    6b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3D:C6:90:C0:DE:80:13:1B:22:3B:EE:70:D7:F6:FF:99:0A:15:F3:41
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JuYLHPdKY5Y1phF5MoqqWBkM2V5PAonbkrcuPu2ReH2/1/3DC690C0DE80131B223BEE70D7F6FF990A15F341.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.200.0/22
                IPv6:
                  2804:5894::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268137

    Signature Algorithm: sha256WithRSAEncryption
         78:55:a7:0c:b7:0a:d4:94:14:f9:c6:8b:e7:29:df:3d:8b:6b:
         18:4c:90:42:81:b3:26:9a:30:ba:64:34:e3:50:46:02:b1:a5:
         ee:c0:04:14:5d:d5:ef:92:74:ce:ac:d1:e5:6e:8d:e3:a2:f6:
         36:7c:2c:6c:d4:62:77:56:9a:8c:45:d7:00:5e:78:9e:c9:f8:
         88:c3:be:12:4e:76:86:c8:e9:4d:57:f0:9f:5e:52:a6:5a:2b:
         fd:b2:a9:72:7b:43:52:54:3b:a8:d7:41:a6:98:f2:1d:01:05:
         8d:1d:93:45:34:96:9a:97:f7:12:27:d2:4b:e2:3e:1f:ed:ac:
         b1:de:1b:a7:62:8e:1c:ad:28:7b:6f:67:51:be:bf:25:a6:3d:
         9f:04:51:06:02:b7:b8:31:41:05:0f:8a:39:50:47:ee:16:4a:
         d2:ab:cb:1e:e6:92:46:62:11:a0:bc:5e:a1:96:be:9d:97:98:
         18:42:8f:35:d3:c3:c1:76:b8:b1:15:7e:00:8a:21:eb:c9:5c:
         8e:07:35:65:83:15:25:a6:9a:f9:40:f8:63:90:10:65:7c:49:
         b1:c3:26:d3:bc:4c:1a:5d:21:d9:98:cb:11:de:05:1c:ac:2a:
         96:3e:79:5e:f3:b1:da:e5:4e:28:dd:f3:2f:fa:2b:19:f5:5f:
         f1:a1:11:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:51:38 2025 by rpki-client