Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer
File:                     4765DF83369720EE1AF514C7CA6660A475D18592.cer (raw, json)
Hash identifier:          it7LIiJX9MbzwvxYh7B4eWRr3qxAgZtLCBi7im6RIAo=
Subject key identifier:   47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6B09DE56A636AE22FB8E11B111597B5185FCB2E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 14:37:16 +0000
Certificate not after:    Fri 06 Mar 2026 14:42:16 +0000
Subordinate resources:    AS: 52858
                          IP: 138.59.248.0/22
                          IP: 170.247.232.0/22
                          IP: 177.87.64.0/22
                          IP: 177.125.248.0/22
                          IP: 2804:774::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:09:de:56:a6:36:ae:22:fb:8e:11:b1:11:59:7b:51:85:fc:b2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 14:37:16 2025 GMT
            Not After : Mar  6 14:42:16 2026 GMT
        Subject: CN=4765DF83369720EE1AF514C7CA6660A475D18592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:af:63:e0:72:9c:1c:5b:2c:6a:65:9a:3e:c4:
                    92:ac:d5:ec:f4:d3:17:8b:a3:01:b8:3e:6c:69:fa:
                    5e:68:30:9c:59:65:c6:9c:5c:77:b2:da:a3:70:67:
                    62:0e:d3:60:d3:2a:55:5b:8f:03:16:44:5c:37:38:
                    e6:25:d3:65:b9:31:0b:8b:bf:dc:37:87:55:24:6b:
                    cd:76:86:f8:80:43:0f:33:e5:42:f6:40:5f:d7:e6:
                    35:da:4c:18:f3:eb:80:a5:e9:9d:81:96:5c:5a:d1:
                    c8:8e:76:89:65:22:d5:1d:06:3f:7a:2f:2e:a3:ea:
                    02:a9:2c:57:2b:51:73:e4:2b:18:48:69:2b:62:41:
                    5c:56:ba:07:c0:c2:00:8d:46:aa:9a:f2:8d:dd:fc:
                    df:ae:43:3e:7d:9b:cd:b4:b5:4b:02:aa:5d:d3:98:
                    84:a1:de:82:32:ed:32:a8:7f:c5:68:79:87:8a:87:
                    50:3c:09:12:78:b3:85:85:b5:03:e6:e9:df:65:2d:
                    79:df:2d:f0:84:14:7c:d6:f6:e0:a5:ca:12:cd:81:
                    20:36:61:be:67:a4:b4:2b:d2:99:f3:e5:a1:45:44:
                    55:3e:2e:8d:5f:de:7f:cd:9f:6c:d9:25:65:f7:a0:
                    4e:58:6c:bd:d5:3a:ea:8f:52:66:22:0a:4a:e0:8b:
                    49:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.248.0/22
                  170.247.232.0/22
                  177.87.64.0/22
                  177.125.248.0/22
                IPv6:
                  2804:774::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52858

    Signature Algorithm: sha256WithRSAEncryption
         92:a4:fb:90:ce:82:bd:79:82:ee:d3:0f:77:54:63:a9:9d:9e:
         c1:9e:9a:e3:6b:1d:fa:40:72:59:7c:ff:0d:0f:ee:13:db:5b:
         6e:28:60:c0:85:61:71:5c:bb:10:0e:a5:20:91:9d:5b:7f:03:
         a9:e2:b8:6d:f2:55:43:86:c1:6b:89:08:d6:3b:44:5f:34:8a:
         84:44:5a:0b:a0:3f:73:d9:e8:d0:5f:0b:a5:c5:6f:fa:60:c5:
         1f:e8:a0:7f:a8:2f:77:a8:bf:16:81:9d:36:85:fe:db:3c:29:
         e9:f6:b9:e7:60:e5:c6:e8:ab:af:a7:7c:e2:bb:1e:ad:da:f7:
         cb:78:91:9b:a4:5f:99:72:f4:df:4a:9f:d5:4e:b2:0b:a3:1d:
         bf:37:04:d7:b6:29:d0:25:60:df:aa:62:50:72:3a:13:94:b1:
         77:e8:24:c1:9d:fa:ed:3c:22:b8:f9:47:78:9a:ce:ba:78:19:
         91:ec:37:e7:2c:35:30:6b:36:a4:89:88:39:9c:0b:75:53:3f:
         f7:74:27:6a:42:aa:b1:e1:8a:6a:63:99:f2:1c:2e:98:5a:c9:
         cb:a0:29:6b:d2:34:24:9c:a9:2d:24:7c:f5:fd:c0:66:66:42:
         92:c8:20:cb:ec:5f:89:75:d7:e3:60:31:85:c6:65:14:29:d7:
         04:a6:6c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:35:41 2025 by rpki-client