Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/42E0C742D5DC5A6C41753F73202F41323E27436C.cer
File:                     42E0C742D5DC5A6C41753F73202F41323E27436C.cer (raw, json)
Hash identifier:          0uI4nETroI8q7gBSfXKz0d4EckkEQMyl8kC3RrkPMrU=
Subject key identifier:   42:E0:C7:42:D5:DC:5A:6C:41:75:3F:73:20:2F:41:32:3E:27:43:6C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1F6C3412462FC0B27C7A0D96FBDF61EC0423DC4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 12:54:28 +0000
Certificate not after:    Thu 05 Mar 2026 12:59:28 +0000
Subordinate resources:    AS: 264552
                          IP: 45.172.80.0/22
                          IP: 138.0.172.0/22
                          IP: 170.79.52.0/22
                          IP: 201.148.112.0/22
                          IP: 2804:2164::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:6c:34:12:46:2f:c0:b2:7c:7a:0d:96:fb:df:61:ec:04:23:dc:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 12:54:28 2025 GMT
            Not After : Mar  5 12:59:28 2026 GMT
        Subject: CN=42E0C742D5DC5A6C41753F73202F41323E27436C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:93:fb:94:c8:03:d2:b8:f0:89:0b:55:a2:87:
                    73:7a:9b:0e:d8:24:08:a9:7e:91:92:97:94:9e:c8:
                    3b:09:da:f5:67:32:b9:80:e3:33:e8:86:d4:a8:c9:
                    15:56:b5:8b:ee:dc:77:16:2e:96:2a:97:cf:7f:c8:
                    64:8b:08:6f:33:62:89:9b:a4:57:c6:2b:b1:86:9c:
                    b9:b7:8e:d9:91:1d:c9:61:13:bd:23:2f:04:ae:d7:
                    ac:a0:f5:53:22:48:a3:21:3d:01:69:8e:81:02:e6:
                    19:8a:54:f5:03:8c:9e:38:7a:cd:b2:76:85:73:24:
                    b2:08:1f:cd:08:ca:a3:70:dc:56:40:de:b0:46:50:
                    db:d0:4a:34:ee:03:fc:a1:9a:7c:6b:82:0f:6e:36:
                    27:45:67:85:bf:31:36:14:71:d5:14:41:af:b7:d4:
                    fa:8d:6b:4f:a6:a4:0e:3c:cd:39:3c:a7:50:f4:48:
                    dc:c7:c2:39:2c:46:dc:d3:1b:d6:cf:74:2f:fe:32:
                    d9:6a:ea:db:c4:00:cb:a3:db:55:31:b4:53:20:15:
                    d2:f1:b2:dc:9b:38:9f:32:14:81:0a:c1:05:ae:c9:
                    a3:18:1b:76:3b:8e:ef:42:a8:84:32:0e:9c:b4:e7:
                    00:3d:f4:29:e1:b0:3d:81:1f:f0:53:de:b6:4a:9c:
                    e5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:E0:C7:42:D5:DC:5A:6C:41:75:3F:73:20:2F:41:32:3E:27:43:6C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/1/42E0C742D5DC5A6C41753F73202F41323E27436C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.80.0/22
                  138.0.172.0/22
                  170.79.52.0/22
                  201.148.112.0/22
                IPv6:
                  2804:2164::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264552

    Signature Algorithm: sha256WithRSAEncryption
         1f:da:0a:7e:44:d9:8f:5e:0b:be:a9:51:b4:82:37:a6:7b:dc:
         de:19:c6:aa:85:a3:9d:b4:fd:be:c2:11:2d:80:3c:cd:c0:b7:
         90:fc:0d:18:b1:ff:2a:77:09:15:37:c4:f5:6f:ec:04:88:e2:
         1a:4b:d4:72:4b:44:e4:78:0d:94:db:f9:e7:96:20:04:1a:11:
         47:8e:a4:69:20:ab:e8:c2:9e:cc:a2:47:96:8a:90:dc:0e:d1:
         fd:c9:74:be:1f:87:99:58:56:6d:03:fc:40:a2:48:38:2f:c8:
         49:39:4b:2e:0c:a2:c2:19:32:38:21:53:12:97:d5:b8:d9:9a:
         9b:6e:f5:82:9a:ca:b7:dc:b2:2b:b0:ba:89:ff:7a:3b:b8:74:
         e2:e5:b5:26:a5:35:61:bf:1c:a7:93:98:0c:79:f4:52:9f:d6:
         50:2d:05:f8:e1:b7:08:cc:03:3b:d8:05:ff:c8:d1:09:d7:c0:
         eb:6c:4a:5d:34:85:e8:6d:86:d8:c1:15:ff:34:84:44:81:a2:
         2f:50:20:89:8a:c3:7d:1e:f3:d9:38:28:0e:49:6c:58:73:0a:
         04:ec:e2:18:62:46:8d:d7:3d:2c:37:34:a5:0f:d4:a3:f3:15:
         fb:90:8d:0a:63:80:1a:61:c6:f0:fe:f5:15:18:cc:88:16:d3:
         b5:89:25:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:33:44 2025 by rpki-client