Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/3F84F51408CD88D165CE931B15E48DC9CB8084BE.cer
File:                     3F84F51408CD88D165CE931B15E48DC9CB8084BE.cer (raw, json)
Hash identifier:          bneUqEfcWiqCK1EgfWngSuxPze6DUwisjEeQVQH1Wm0=
Subject key identifier:   3F:84:F5:14:08:CD:88:D1:65:CE:93:1B:15:E4:8D:C9:CB:80:84:BE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       572940A4932A32B72AC087B85B1DF868A6AC8C38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/3F84F51408CD88D165CE931B15E48DC9CB8084BE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Mar 2025 19:48:57 +0000
Certificate not after:    Tue 10 Mar 2026 19:53:57 +0000
Subordinate resources:    AS: 268955
                          IP: 45.176.224.0/22
                          IP: 2804:5d2c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:29:40:a4:93:2a:32:b7:2a:c0:87:b8:5b:1d:f8:68:a6:ac:8c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 11 19:48:57 2025 GMT
            Not After : Mar 10 19:53:57 2026 GMT
        Subject: CN=3F84F51408CD88D165CE931B15E48DC9CB8084BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:56:2d:35:3c:23:83:e4:14:c0:9e:fc:5c:25:
                    71:d0:41:1f:67:27:15:23:5f:b3:4b:38:7c:22:5a:
                    00:60:86:58:4d:21:49:1e:6b:aa:df:7b:2a:23:f5:
                    b1:45:bb:d7:d4:a7:c0:38:c2:08:28:8b:e7:3e:8d:
                    8b:35:ef:85:89:8e:dd:3c:30:57:a2:71:80:ca:4d:
                    f5:0d:9a:43:e5:08:8d:63:8c:31:85:da:ec:b0:77:
                    0e:71:7a:9f:5f:f8:53:70:ab:c9:ce:f1:e0:4e:e3:
                    b8:c5:bd:0d:09:f0:b4:6b:b6:1b:39:30:34:d2:8d:
                    3d:be:80:de:d3:1d:2c:15:1e:4e:52:dc:fa:a2:cc:
                    7c:92:b1:d2:ab:77:60:60:3e:32:9c:f6:96:4f:1a:
                    06:5c:04:2e:3c:80:d7:21:5d:37:72:2c:1a:ae:b5:
                    a1:f6:8e:98:84:d1:86:15:83:0c:e4:cc:1c:77:aa:
                    da:57:db:65:d4:35:8f:a9:ec:ea:6b:60:2a:7e:b8:
                    a2:34:bb:d0:e6:6c:04:89:de:eb:c0:66:f3:0d:4b:
                    a1:62:ab:a1:8f:d5:69:07:85:53:67:5f:fb:fd:36:
                    b8:36:07:76:f7:f2:f5:6d:e7:5d:b8:74:da:af:24:
                    92:47:5f:68:3b:fa:d3:0e:5f:5d:b9:54:8a:fe:71:
                    c7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                3F:84:F5:14:08:CD:88:D1:65:CE:93:1B:15:E4:8D:C9:CB:80:84:BE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ECp253pH9pDsEk9PnXy267fkfCe5m4rugUvYk7tnJfM6/0/3F84F51408CD88D165CE931B15E48DC9CB8084BE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.224.0/22
                IPv6:
                  2804:5d2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268955

    Signature Algorithm: sha256WithRSAEncryption
         69:30:18:20:eb:6c:f9:fe:19:ac:82:ce:82:70:4e:1d:aa:c9:
         6d:09:99:a6:91:04:69:6f:7b:fa:c5:01:59:6a:5a:e2:ba:4c:
         f2:b1:30:3a:b9:0d:98:8b:a6:85:68:d7:91:8d:cf:dd:31:97:
         f5:25:de:f4:2c:a7:8a:02:7d:08:b2:32:45:ed:5d:4a:92:f2:
         a5:81:db:00:0d:34:40:cc:38:cc:40:d0:ec:1b:16:c5:ae:15:
         33:af:49:07:90:82:cd:ee:06:d2:a2:19:35:de:71:4d:84:03:
         89:68:9c:8e:a1:c9:60:e8:28:32:3d:3a:aa:40:35:dd:77:6d:
         1b:ff:09:92:20:e7:c5:5d:8d:c1:04:ca:0b:98:3d:9f:89:a3:
         83:51:b8:6a:6a:c4:c2:69:02:69:7f:fe:7d:71:6f:e9:b7:90:
         a6:87:a5:19:39:e9:e6:41:ec:b0:c5:69:d2:c8:4e:99:20:12:
         51:a3:91:ac:c8:5c:46:da:db:80:bd:80:7e:2e:16:d5:67:54:
         0e:b7:06:29:5f:d6:80:21:02:7b:18:15:3a:63:1e:d2:9e:8f:
         3b:e0:40:d4:0e:27:0b:46:4d:f6:6d:1d:03:79:8b:08:fc:ba:
         41:8f:64:da:a2:8f:89:04:f5:b0:ac:53:e4:b5:5e:3d:94:88:
         db:a5:26:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:27:38 2025 by rpki-client