Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4923E0A3660B9561EFF8405895B2CCC86F819DE1.cer
File:                     4923E0A3660B9561EFF8405895B2CCC86F819DE1.cer (raw, json)
Hash identifier:          iJN/hayjE9LOMuNBkQ85lkl/wGIIrcLAe/n+TkLGn5g=
Subject key identifier:   49:23:E0:A3:66:0B:95:61:EF:F8:40:58:95:B2:CC:C8:6F:81:9D:E1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       594AD820373E8E7D8B60440C506A8F084001B1FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/1/4923E0A3660B9561EFF8405895B2CCC86F819DE1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 15 Feb 2025 23:44:11 +0000
Certificate not after:    Sat 14 Feb 2026 23:49:11 +0000
Subordinate resources:    AS: 271609
                          IP: 45.183.176.0/23
                          IP: 2804:7e34::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:4a:d8:20:37:3e:8e:7d:8b:60:44:0c:50:6a:8f:08:40:01:b1:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 15 23:44:11 2025 GMT
            Not After : Feb 14 23:49:11 2026 GMT
        Subject: CN=4923E0A3660B9561EFF8405895B2CCC86F819DE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e3:ab:69:37:cc:d7:77:5c:80:95:cb:05:c3:
                    51:02:84:62:a8:92:1c:19:22:cd:f2:b3:60:71:7e:
                    fa:72:79:b1:fe:13:74:f8:ed:fb:fc:32:c4:40:d1:
                    88:3a:81:7f:e5:cb:7c:44:c0:bb:39:5a:fa:c0:c8:
                    8f:ef:76:a9:96:e8:a7:48:d9:eb:7a:1c:8a:ef:fb:
                    e8:d6:02:6d:cb:8b:c3:3b:f8:c7:e2:46:fe:04:93:
                    33:d6:d4:e1:32:51:f3:aa:43:c4:23:b0:6d:37:34:
                    50:78:fb:e1:6c:c2:5f:10:30:4b:39:2a:e8:a1:b7:
                    0d:ce:e3:60:ed:23:c7:a4:c6:63:da:02:02:a8:e3:
                    72:bd:b4:08:4a:5c:85:ae:8b:df:40:53:6c:7d:36:
                    94:ac:e3:75:25:f1:36:a7:d0:73:8f:35:5d:0d:6e:
                    17:84:68:64:e6:bf:bb:a7:7e:6b:a7:24:55:0e:d9:
                    52:88:5e:b0:c3:5b:67:e7:cc:69:da:4b:1d:d9:c9:
                    64:43:4d:04:12:81:aa:b1:3d:cc:6d:cf:0f:19:79:
                    38:25:11:31:a5:ed:62:16:ed:b3:4c:05:d9:1f:14:
                    11:8b:dc:f3:41:d5:05:20:27:ac:f4:cb:a4:bd:36:
                    1f:6a:f4:65:11:e3:01:7b:bd:05:12:f2:4a:0a:90:
                    df:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:23:E0:A3:66:0B:95:61:EF:F8:40:58:95:B2:CC:C8:6F:81:9D:E1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/1/4923E0A3660B9561EFF8405895B2CCC86F819DE1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.176.0/23
                IPv6:
                  2804:7e34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271609

    Signature Algorithm: sha256WithRSAEncryption
         67:56:6b:9f:38:5e:ef:42:ed:07:2b:49:ad:29:c9:d7:84:be:
         27:89:98:f7:49:ed:0f:e7:b2:12:07:4a:81:77:5f:34:aa:20:
         ed:c4:06:9a:cb:07:47:d7:34:cc:18:d0:67:7e:35:a5:2b:b8:
         5b:fc:55:3d:6e:2a:3d:ae:ce:b2:4c:25:7c:89:53:bb:a0:5a:
         1c:31:d8:b4:d4:5c:13:e5:df:6f:27:36:db:9d:72:cc:f1:6d:
         44:a2:e3:f6:68:74:8a:51:81:fe:3e:ea:20:24:ca:79:26:3b:
         c3:50:75:d1:b5:99:9f:82:60:89:3b:ad:c4:e9:57:88:d3:f2:
         cc:45:d9:db:36:ce:d4:53:fe:5b:c5:d8:c5:cf:dc:c6:c5:5c:
         3c:53:fc:5f:55:d2:f7:48:ae:16:29:42:15:5f:8b:97:18:98:
         4a:1f:2f:4f:6b:f8:4e:94:ff:38:b0:40:32:ad:e2:eb:39:6a:
         81:df:48:78:b8:70:88:a9:a3:77:93:a4:53:21:f7:0e:0f:e2:
         ac:cb:e6:5c:d5:2f:6c:86:8f:bc:39:ec:45:77:64:b5:67:ba:
         92:67:32:79:4f:5a:e9:90:26:ce:8c:c9:d9:12:ce:6c:5a:43:
         9f:50:a2:87:9b:b8:52:eb:10:68:b4:fa:c2:29:c7:d1:b0:3f:
         2d:7e:c7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:39:45 2025 by rpki-client