Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4AFA601F99292DB95180C5CAF098EB94C76A7CD1.cer
File:                     4AFA601F99292DB95180C5CAF098EB94C76A7CD1.cer (raw, json)
Hash identifier:          ZN3Cg3zuYYeVA5XOgi4ruUXkc7IRb2Yv4RpXPd1oT7I=
Subject key identifier:   4A:FA:60:1F:99:29:2D:B9:51:80:C5:CA:F0:98:EB:94:C7:6A:7C:D1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       59932D5DB53BD65E0B1294E76A795B8DC3299159
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/4AFA601F99292DB95180C5CAF098EB94C76A7CD1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 13 Dec 2024 18:06:00 +0000
Certificate not after:    Fri 12 Dec 2025 18:11:00 +0000
Subordinate resources:    AS: 264999
                          IP: 170.84.76.0/22
                          IP: 2804:3130::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:93:2d:5d:b5:3b:d6:5e:0b:12:94:e7:6a:79:5b:8d:c3:29:91:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 13 18:06:00 2024 GMT
            Not After : Dec 12 18:11:00 2025 GMT
        Subject: CN=4AFA601F99292DB95180C5CAF098EB94C76A7CD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7c:52:6e:04:28:91:3f:dd:79:24:f2:4d:8e:
                    cd:2a:06:2a:16:78:58:74:9a:d8:3f:2d:c2:8f:6e:
                    3c:e0:ab:62:95:51:4e:ae:9d:95:3a:bc:1e:29:c9:
                    81:84:02:04:22:bc:48:2f:b3:e0:10:a0:b0:e8:c4:
                    c3:4c:3c:0b:81:0b:ad:f6:b0:80:f5:9b:22:f5:94:
                    5b:24:69:22:d3:4c:18:4d:b3:c9:5f:1d:16:ac:08:
                    67:3e:7a:bc:34:87:e2:ef:78:e4:54:19:1a:73:44:
                    ee:7c:2b:54:d8:3d:cf:01:5c:63:89:71:1a:a7:7b:
                    b6:44:4f:ca:a2:67:f4:ee:36:3c:19:9e:16:fb:d0:
                    a9:6a:4e:29:3d:cd:a4:2a:b2:33:d6:19:d6:f0:38:
                    ab:61:bf:b5:05:a9:80:14:2f:81:e0:cb:7c:d0:7d:
                    e8:91:2f:96:7f:b2:f0:b6:aa:24:a7:cc:19:22:24:
                    52:8d:fd:13:cd:f3:81:20:1e:8c:9b:1f:c4:ac:92:
                    bd:ff:39:63:2a:65:8c:d1:a4:7a:12:d3:9f:bf:28:
                    cd:17:17:e9:52:52:04:bd:41:c6:b2:89:bc:44:32:
                    9e:b8:d3:e5:e7:1e:c9:cd:4b:c4:77:96:97:19:31:
                    11:d0:97:0f:4e:5e:90:d4:f9:4e:7d:c8:0b:4e:1a:
                    36:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:FA:60:1F:99:29:2D:B9:51:80:C5:CA:F0:98:EB:94:C7:6A:7C:D1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/4AFA601F99292DB95180C5CAF098EB94C76A7CD1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.76.0/22
                IPv6:
                  2804:3130::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264999

    Signature Algorithm: sha256WithRSAEncryption
         d3:ea:83:75:26:84:b2:b6:f2:f3:35:e0:63:34:41:91:2c:7a:
         dc:20:67:ae:17:0a:8f:64:b2:af:6b:1f:c3:a9:05:0d:ad:da:
         26:de:e2:c6:b1:c6:77:9c:a2:76:33:b7:3c:7b:54:b2:34:4b:
         3f:ca:05:c9:e8:32:2e:0c:47:a5:63:d9:36:ec:22:65:db:49:
         6d:8c:f6:7d:38:de:9e:58:f0:81:bd:75:10:e5:22:a0:e4:ae:
         1f:85:9f:41:fd:e6:66:62:1d:76:9b:ff:91:34:24:ec:d6:22:
         bb:c1:74:83:d0:fa:45:59:97:7b:83:75:03:9f:16:82:8a:25:
         27:16:e1:b2:f2:59:d9:16:fb:4d:d9:5c:90:f5:80:9c:e3:73:
         3f:43:d7:13:15:63:43:86:9b:75:43:ac:b4:56:72:9c:ab:a4:
         77:7a:ba:39:61:ea:d2:7d:cd:ae:61:e6:7e:9e:99:5d:31:d1:
         af:37:bc:13:1d:a6:04:f5:a2:cc:70:e7:cc:f6:78:3a:78:e4:
         fb:e0:4f:8a:54:57:d5:a2:b9:e0:13:ad:4b:e1:15:59:02:76:
         51:05:2e:08:5f:af:b1:a0:9f:4f:ac:ab:48:d7:ca:fa:e8:80:
         a3:a4:c3:5d:a2:73:fd:d8:60:9f:82:d7:41:52:8d:26:38:b4:
         bd:4b:73:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:00 2025 by rpki-client