Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3EA8671A0DD4715FBC0474E196FA5FCAD0E3A30F.cer
File:                     3EA8671A0DD4715FBC0474E196FA5FCAD0E3A30F.cer (raw, json)
Hash identifier:          7XIiFsT0Ly/OLaGSp8LlpDed1kV72Oz55G5g4LRB9VI=
Subject key identifier:   3E:A8:67:1A:0D:D4:71:5F:BC:04:74:E1:96:FA:5F:CA:D0:E3:A3:0F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2572B8D8F3D4CC6A658E947DBEE7DCEDB57409C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/1/3EA8671A0DD4715FBC0474E196FA5FCAD0E3A30F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Feb 2025 02:56:49 +0000
Certificate not after:    Thu 05 Feb 2026 03:01:49 +0000
Subordinate resources:    AS: 262738
                          IP: 186.195.166.0 -- 186.195.175.255
                          IP: 2804:1ba8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:72:b8:d8:f3:d4:cc:6a:65:8e:94:7d:be:e7:dc:ed:b5:74:09:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  6 02:56:49 2025 GMT
            Not After : Feb  5 03:01:49 2026 GMT
        Subject: CN=3EA8671A0DD4715FBC0474E196FA5FCAD0E3A30F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1e:1c:03:5d:d9:83:2f:fd:c8:a5:1a:68:2c:
                    6a:2f:a0:ce:bc:f4:5a:a6:8d:d2:e4:2d:eb:f5:a0:
                    14:7e:44:52:13:89:fc:d9:cb:25:84:6b:55:12:93:
                    34:0d:68:da:65:1d:0c:e0:67:ff:44:02:a0:f7:7b:
                    60:2f:f9:4e:58:43:20:5e:1a:41:e1:ef:2b:bf:01:
                    16:90:84:ac:23:8a:ee:5c:c4:31:8c:cf:bf:96:0a:
                    ab:2d:1b:82:92:39:af:c6:27:ad:73:d5:d0:1a:ed:
                    60:f3:6f:aa:bc:37:7b:fd:39:11:78:4b:79:be:12:
                    42:3d:6c:27:ad:e6:c0:ed:3e:5c:46:ec:7b:52:a6:
                    6c:07:b9:7b:79:ee:76:63:d2:d8:ac:e2:62:3c:a3:
                    4d:8c:bc:80:ca:91:36:43:25:71:5a:8a:2b:04:6a:
                    65:9d:07:71:0f:9d:0e:7f:c8:a5:0b:b7:df:6d:66:
                    ab:eb:1a:ff:a1:15:fd:53:13:34:a5:f1:12:06:c0:
                    61:97:ea:4d:c5:e3:f3:70:0c:cc:fe:40:75:0f:8d:
                    d0:b7:90:11:3d:c7:a0:6a:16:48:87:05:0a:77:2c:
                    d7:2f:92:68:82:f5:16:cf:38:d1:9c:11:88:f6:5e:
                    55:e8:03:ec:97:43:fb:c1:b2:e2:5a:1a:cb:23:86:
                    6f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3E:A8:67:1A:0D:D4:71:5F:BC:04:74:E1:96:FA:5F:CA:D0:E3:A3:0F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FRRzHwySTjeDLqmN7xfj261p5dcsmg9sT9N2dRi4H4sw/1/3EA8671A0DD4715FBC0474E196FA5FCAD0E3A30F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.166.0-186.195.175.255
                IPv6:
                  2804:1ba8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262738

    Signature Algorithm: sha256WithRSAEncryption
         cb:64:2b:8f:60:3b:45:78:67:9c:cb:7b:3b:01:6f:04:c5:db:
         8c:77:dc:55:6a:98:0a:07:b1:20:5e:18:a9:e8:f8:aa:51:50:
         d9:68:e3:83:6b:10:7c:67:80:86:cf:02:5b:07:90:f6:09:47:
         ab:93:55:be:3a:52:72:bd:76:a2:cc:81:84:c1:4e:32:d7:c4:
         63:60:9b:0d:97:9b:45:47:dd:87:7e:ed:09:9b:7c:34:cb:4c:
         5b:6c:3f:76:06:c2:85:b4:4b:1e:9a:03:f9:95:90:b8:ce:5d:
         2b:dc:fa:5c:08:d9:0f:5d:12:2c:a9:6e:f6:c8:b5:19:44:2f:
         51:96:da:27:56:07:d5:cd:9d:a9:1e:88:57:38:8d:85:11:2d:
         8f:7c:10:a3:1b:ce:9c:f5:e8:e1:cc:65:b1:8b:ce:39:2c:a6:
         e6:33:2c:e7:46:8d:ff:91:bf:0c:15:29:9c:cb:08:2c:31:53:
         54:94:64:d8:5c:dd:a8:2d:cd:40:0c:38:86:03:63:eb:f8:d6:
         14:e5:00:f7:22:03:fb:eb:ad:c5:e0:eb:eb:e5:82:de:35:16:
         ea:a1:8d:33:56:88:97:8b:5b:65:6b:17:bc:51:23:9b:41:7c:
         52:bb:1b:ce:94:ec:98:01:22:cf:07:b4:16:52:b7:b8:3f:c2:
         c3:ee:0b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:19:59 2025 by rpki-client