Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4B1A36B44EF3E80969206C2513099DCF09E1D686.cer
File:                     4B1A36B44EF3E80969206C2513099DCF09E1D686.cer (raw, json)
Hash identifier:          jx+tTcLU7nVeoHgOS8rCJnZc5ZYWtO+CTcRSx8F4y78=
Subject key identifier:   4B:1A:36:B4:4E:F3:E8:09:69:20:6C:25:13:09:9D:CF:09:E1:D6:86
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7BB31452E7384740DACFA62278B6497C9F7CCBDE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/4B1A36B44EF3E80969206C2513099DCF09E1D686.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Jan 2025 19:47:47 +0000
Certificate not after:    Tue 13 Jan 2026 19:52:47 +0000
Subordinate resources:    AS: 263295
                          IP: 177.91.140.0/22
                          IP: 2804:1698::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b3:14:52:e7:38:47:40:da:cf:a6:22:78:b6:49:7c:9f:7c:cb:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 14 19:47:47 2025 GMT
            Not After : Jan 13 19:52:47 2026 GMT
        Subject: CN=4B1A36B44EF3E80969206C2513099DCF09E1D686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d8:67:9f:0e:fd:7d:38:39:33:fc:8d:6f:4f:
                    73:15:8e:fd:df:d8:fa:e0:3a:f5:0c:af:68:28:60:
                    0e:42:0d:bd:41:43:a5:ec:40:ec:ea:b8:93:1a:ad:
                    53:ac:ea:1f:df:a1:f1:89:4d:10:2c:b8:35:27:d7:
                    d5:0d:56:95:74:1e:eb:70:9d:17:69:b6:29:e5:ba:
                    c7:d3:3b:59:7f:83:bf:2b:4b:a9:b0:b9:ee:43:5d:
                    a2:d9:2f:8f:3c:dd:88:3f:19:b2:2b:f0:73:b9:86:
                    d0:ea:93:c7:8e:c0:61:f9:1d:26:80:eb:76:2e:e1:
                    22:02:4e:66:72:35:4f:7a:14:e7:73:42:01:4b:98:
                    96:66:b4:cb:f6:a0:3d:a3:37:11:38:f1:60:63:ee:
                    a8:94:9d:42:fd:ec:77:27:98:d3:11:e0:01:93:c6:
                    76:cc:2d:76:77:e1:79:25:a0:14:3d:7d:a9:c6:32:
                    0d:2f:c3:a5:82:45:c8:81:f0:50:69:87:f6:cd:25:
                    71:90:8a:1e:23:83:3f:b4:9b:22:79:17:f0:05:4e:
                    7b:b0:31:23:9a:d9:42:f2:d4:4f:a7:58:c2:5c:ff:
                    4d:4e:05:8a:8b:96:b6:0c:e8:00:12:f2:0d:04:cc:
                    63:0c:cd:e4:80:63:dc:fe:00:9e:de:11:d3:d5:c7:
                    9a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:1A:36:B4:4E:F3:E8:09:69:20:6C:25:13:09:9D:CF:09:E1:D6:86
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8B34FbzDcFJWzeZ9ECX9QHxf77mL9HMMmd9bAphvUtdN/0/4B1A36B44EF3E80969206C2513099DCF09E1D686.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.140.0/22
                IPv6:
                  2804:1698::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263295

    Signature Algorithm: sha256WithRSAEncryption
         29:da:17:17:4f:d7:d7:7c:f6:ea:a3:70:19:73:00:cd:46:0f:
         61:a8:7e:1a:0c:b1:86:27:7f:f1:d7:89:19:38:96:8c:86:8c:
         ad:d9:70:7c:ed:89:66:1e:58:ec:16:1e:00:f9:2b:b8:7d:5e:
         43:f0:c2:8a:3a:63:1c:89:a4:ad:bf:3d:d8:71:9f:64:76:5c:
         5c:9c:a3:99:da:9f:e1:60:f6:b7:79:5e:67:d9:93:be:4d:ff:
         36:c8:9a:70:6b:c6:85:89:9d:d8:5c:ed:7c:63:6d:56:fb:bb:
         6e:fd:0f:1c:1d:7b:fc:0f:80:dd:fe:29:5c:20:d9:71:53:77:
         ad:a1:fe:e3:d1:d9:c7:d3:dc:3e:be:0a:ce:28:09:68:87:c3:
         aa:74:94:85:2c:4a:40:8e:b4:c9:f8:70:19:8d:21:fb:0b:4b:
         a7:30:c7:5a:ac:fb:99:c9:43:a0:03:28:9b:79:22:78:40:ef:
         3d:a1:a1:e9:e2:b6:9b:0d:d6:3c:cb:ce:a7:a8:48:f0:dc:c8:
         f6:c2:c8:6a:1f:73:d0:ce:a5:db:33:1d:8d:ee:4a:72:ff:d2:
         28:a7:79:10:c9:5c:a3:8f:64:75:04:7a:07:99:34:52:b4:9c:
         32:47:8b:49:5b:61:44:29:31:c5:5b:8f:87:65:a3:3c:f0:01:
         f4:8a:1c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:26 2025 by rpki-client