Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.cer
File:                     46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.cer (raw, json)
Hash identifier:          pM6iucicZlW4tZFMpdU/Bfw0wJyp3SgV0+2B55NC6s0=
Subject key identifier:   46:B6:1B:C4:E2:B4:2C:C1:1F:0C:5F:DB:2E:2B:A8:5C:35:94:CF:ED
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0C9A4FF3AD7B9AC433A43C9B4C18A75FAC90344A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/1/46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:54 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:54 +0000
Subordinate resources:    AS: 271538
                          IP: 179.63.112.0/22
                          IP: 2804:7d18::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:9a:4f:f3:ad:7b:9a:c4:33:a4:3c:9b:4c:18:a7:5f:ac:90:34:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:54 2025 GMT
            Not After : Mar  4 18:40:54 2026 GMT
        Subject: CN=46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:65:82:86:0f:10:3c:2a:92:66:3b:74:d0:60:
                    49:4f:46:5e:d7:fb:72:5f:3c:82:2a:77:6a:8a:d8:
                    a2:07:75:6f:64:4c:f2:6f:31:d3:dd:35:d7:58:8b:
                    80:63:2f:25:79:9a:16:54:3b:ad:a8:c9:d6:ef:ca:
                    a9:98:1f:a7:d9:4b:e6:16:01:0b:84:9a:6d:66:f3:
                    e7:6a:05:90:f3:d1:e6:9e:34:40:6d:c4:eb:1a:62:
                    8f:27:ae:f0:ac:b4:f0:c4:bc:39:a1:bc:e3:fd:27:
                    79:f0:bb:39:a8:15:36:cc:09:23:44:46:d2:aa:26:
                    cd:c4:e3:77:40:29:d0:dd:5f:cf:8d:70:20:14:4f:
                    f1:59:36:22:cc:1a:dd:45:51:f9:a4:42:09:80:dd:
                    49:fe:d7:4e:f1:2b:d5:50:35:1e:36:c6:f4:8b:53:
                    c6:1a:7d:fa:f6:d2:cb:77:7a:e6:65:89:b7:18:f6:
                    a4:17:b6:89:ac:15:84:76:c3:5e:d3:07:39:44:fc:
                    88:4c:e6:30:dc:94:98:63:33:c7:ad:e2:21:77:f6:
                    eb:24:d6:a7:a3:80:2d:f0:35:0a:ff:13:e6:9a:63:
                    83:de:3b:fb:5b:6b:0a:8f:5f:af:33:c5:c7:b8:f9:
                    06:a8:99:3d:dd:25:3d:73:f4:ad:ac:43:c4:5e:ee:
                    6f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:B6:1B:C4:E2:B4:2C:C1:1F:0C:5F:DB:2E:2B:A8:5C:35:94:CF:ED
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DqCUg3EZkJYyeFXxPWTTRJShaBLnD2cQP9yZ9ke6rzmN/1/46B61BC4E2B42CC11F0C5FDB2E2BA85C3594CFED.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.112.0/22
                IPv6:
                  2804:7d18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271538

    Signature Algorithm: sha256WithRSAEncryption
         66:66:92:14:52:ab:a6:6b:5c:e9:04:bf:a1:e4:58:4b:48:7e:
         41:58:96:da:64:55:fe:42:52:51:9d:bd:de:4a:d7:c5:99:0a:
         ad:3e:27:6e:1c:fa:3d:e7:5f:77:b3:f7:47:11:0f:ca:57:a2:
         c0:06:75:90:94:55:74:ee:72:f4:f5:cc:87:f6:f3:65:bf:ae:
         a3:bd:7a:65:34:30:fa:9b:a7:b9:60:e5:b5:82:1e:37:a2:53:
         92:9c:e1:e3:c0:fb:62:19:ce:4e:d1:93:69:0a:ee:f8:9a:b5:
         10:78:9a:c3:ca:cf:7e:03:63:69:1b:04:8d:8e:38:7b:ce:fc:
         b8:3d:1b:42:91:1f:a2:77:9a:25:ea:b4:4b:47:77:d1:1f:8a:
         66:b4:2e:19:09:08:19:df:d9:05:04:f1:7a:76:d3:04:ac:2b:
         40:a6:28:c1:e3:1c:9c:d1:35:cd:19:52:e6:fd:9c:e5:b7:c6:
         6b:30:94:05:4b:91:c9:d4:41:dc:38:af:d3:77:47:ce:06:c6:
         eb:29:47:32:fd:9a:b1:a7:12:44:ce:80:ac:36:50:a0:40:f1:
         4f:07:9e:6a:57:02:38:8a:70:63:01:d9:d9:93:61:36:1b:b8:
         24:f9:30:e0:db:61:8f:a1:bb:29:96:4b:51:cc:ef:e5:9f:ea:
         92:19:2c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:40:57 2025 by rpki-client