Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/41EC9566071678B51D9FA4BDE316F9A8EB12601B.cer
File:                     41EC9566071678B51D9FA4BDE316F9A8EB12601B.cer (raw, json)
Hash identifier:          sK6mG1RVp9jhDWlsVJYqP1tNE7b+tuGeIhUFXzzYYbQ=
Subject key identifier:   41:EC:95:66:07:16:78:B5:1D:9F:A4:BD:E3:16:F9:A8:EB:12:60:1B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       58500FF53A400BDC518802BA56A2D8C998D88502
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/41EC9566071678B51D9FA4BDE316F9A8EB12601B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Jan 2025 22:52:42 +0000
Certificate not after:    Fri 09 Jan 2026 22:57:42 +0000
Subordinate resources:    AS: 270348
                          IP: 190.83.28.0/22
                          IP: 2801:80:38b0::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:50:0f:f5:3a:40:0b:dc:51:88:02:ba:56:a2:d8:c9:98:d8:85:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 10 22:52:42 2025 GMT
            Not After : Jan  9 22:57:42 2026 GMT
        Subject: CN=41EC9566071678B51D9FA4BDE316F9A8EB12601B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5d:47:3d:03:79:e7:20:3c:fd:d4:a8:25:c6:
                    ca:d2:47:e6:f9:db:19:2d:23:b3:e7:99:89:05:84:
                    75:6e:2b:65:89:d3:3b:89:af:9d:29:16:eb:5f:13:
                    20:5b:fd:67:d7:cf:17:54:aa:73:4f:05:47:5d:f5:
                    fe:14:54:ba:94:f3:28:15:ff:e6:d7:a3:cc:24:e3:
                    7f:25:a7:ef:b0:1a:39:3d:e4:9d:24:88:ec:6e:f4:
                    f9:ee:4a:fb:36:a7:59:7a:fb:6d:4a:2d:4f:de:5e:
                    91:e4:4d:fe:02:00:a0:02:6a:c0:99:56:f4:ee:86:
                    a7:20:75:f8:ab:75:26:a8:11:f8:a0:3f:4c:b9:e4:
                    db:32:b6:ed:dd:ad:8b:ab:35:4a:e5:79:dd:85:47:
                    d7:fb:b4:3b:07:62:5c:74:f8:44:52:2a:f7:10:bd:
                    ea:8e:ea:78:b8:93:5c:42:f7:c2:b8:5e:62:84:29:
                    65:ef:18:14:b6:a3:cb:17:51:ad:79:b4:c9:a3:b1:
                    52:07:bb:0b:03:ca:7e:8d:3d:09:cf:e8:27:93:b1:
                    1a:b1:8e:ff:97:29:df:9b:41:70:e4:c1:0f:66:9a:
                    6f:a1:e9:fa:42:40:cb:88:ba:d0:fe:20:97:6e:21:
                    c7:38:e8:ca:5d:b5:7e:ca:4d:3d:4c:f8:27:60:41:
                    1d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:EC:95:66:07:16:78:B5:1D:9F:A4:BD:E3:16:F9:A8:EB:12:60:1B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/41EC9566071678B51D9FA4BDE316F9A8EB12601B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.28.0/22
                IPv6:
                  2801:80:38b0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270348

    Signature Algorithm: sha256WithRSAEncryption
         1e:f3:04:ca:2d:f1:4e:30:c5:5b:61:ec:01:7c:a9:ff:1e:ab:
         7c:62:5b:86:dd:8b:51:5c:0c:c5:4e:e9:6a:27:2a:8f:ab:b1:
         62:7b:be:dc:0d:40:11:62:bd:88:6f:b5:5b:c0:dd:72:32:98:
         76:f7:12:04:bf:60:db:16:c8:60:55:d5:02:f4:5f:00:5e:3e:
         b4:93:0e:eb:44:53:6b:89:1e:1b:f2:15:34:3f:e1:93:12:4b:
         3b:63:37:95:51:4f:b9:95:b8:98:91:09:dc:1b:b2:41:7d:1a:
         4d:65:6e:96:c1:cc:ce:6a:b8:40:85:fa:5b:45:29:af:78:82:
         f7:c0:24:47:13:77:ae:0f:ef:ae:a8:c3:d9:ae:70:b1:1b:3e:
         83:b6:87:42:53:ff:90:ca:99:67:3d:72:7b:e9:5c:01:c8:65:
         ff:60:90:28:5a:59:87:a8:66:5a:7c:46:38:e2:40:96:3a:e7:
         2c:cc:7c:ba:83:ee:62:b8:96:12:ef:69:b7:42:43:df:f3:4e:
         6b:c5:14:6f:07:71:5b:21:5a:cd:e8:62:e6:91:1c:93:2e:da:
         70:30:5e:cb:e7:92:3c:3b:80:e6:83:15:10:bf:f9:f0:f5:b2:
         05:00:ac:a1:1f:11:18:ef:5c:0d:16:75:0e:3c:53:43:fd:a0:
         1b:7f:46:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:48:49 2025 by rpki-client