Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer
File:                     4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer (raw, json)
Hash identifier:          5RabUo1rzZKr+s246Crats5Pma9X5QsmwiUTdDOdLP4=
Subject key identifier:   4B:FC:C6:54:DB:42:48:ED:9C:C8:AF:C7:D6:1B:71:F7:0A:48:70:7E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7D34E39C70D4925C85E4A40454CEE7568B7C94A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 15:52:09 +0000
Certificate not after:    Fri 06 Mar 2026 15:57:09 +0000
Subordinate resources:    AS: 269153
                          IP: 45.180.236.0/22
                          IP: 2804:6038::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:34:e3:9c:70:d4:92:5c:85:e4:a4:04:54:ce:e7:56:8b:7c:94:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 15:52:09 2025 GMT
            Not After : Mar  6 15:57:09 2026 GMT
        Subject: CN=4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4d:85:44:94:86:5e:0c:a7:0e:c1:68:c5:8e:
                    86:b9:36:bb:f4:6f:d2:d3:bd:99:5a:30:eb:a6:97:
                    13:ca:f3:fc:70:a9:23:e5:9d:73:f1:17:0d:17:e7:
                    c4:44:17:46:06:75:71:db:45:65:08:ca:87:8d:aa:
                    3d:87:0e:86:2e:00:32:7e:70:73:71:fb:3b:78:a7:
                    9f:d6:07:7d:f3:a7:a5:d5:79:05:2d:5b:15:1e:83:
                    d1:b1:06:30:41:7e:5a:fa:53:1e:01:d4:be:d3:9d:
                    8a:37:21:5b:a0:2e:04:a2:b7:89:5a:9b:81:c8:d1:
                    31:73:0a:36:1c:f9:99:53:2b:30:05:c2:19:ee:ae:
                    50:40:05:d3:d6:b1:0e:6c:b8:62:0a:1c:c5:f7:11:
                    f8:f5:c7:ab:1c:77:04:13:5e:7c:8a:f0:66:b8:ac:
                    97:05:be:ab:2e:a4:9f:81:0e:49:c0:09:70:2e:0e:
                    15:8a:be:89:b2:3c:b4:ff:a3:59:6a:3d:09:ec:88:
                    f9:66:c3:33:6a:cf:2d:cc:20:d1:5e:68:28:3a:b2:
                    bc:fc:74:0c:50:27:13:40:f5:d7:7a:0d:67:10:bc:
                    a2:c1:59:ab:c2:ea:d9:ec:c8:da:37:8a:9b:21:29:
                    70:2b:ac:59:67:89:8f:f0:e4:09:8a:f2:46:c2:6b:
                    28:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:FC:C6:54:DB:42:48:ED:9C:C8:AF:C7:D6:1B:71:F7:0A:48:70:7E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.236.0/22
                IPv6:
                  2804:6038::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269153

    Signature Algorithm: sha256WithRSAEncryption
         60:4c:66:50:05:1b:b4:ff:70:2c:35:6c:6d:da:02:8c:e9:f5:
         cb:fe:a5:2c:d2:96:cb:54:0b:5a:d6:c8:cd:43:0f:b2:bd:31:
         e1:b0:d7:52:5d:75:f9:95:95:01:db:f8:5b:87:ba:9f:33:81:
         cd:72:54:45:d1:22:2d:80:29:50:19:84:c0:be:d6:a0:1c:6f:
         0f:f0:81:52:5b:35:d5:16:5f:7d:be:74:d1:e5:62:95:37:2c:
         00:78:9b:f6:ef:ff:16:27:a0:7b:05:4c:7f:05:bb:73:8c:70:
         8c:39:ef:1d:89:60:a1:58:02:26:33:22:12:bf:16:5b:89:c2:
         6e:37:bc:84:18:7a:fb:f1:18:42:63:63:c4:bb:b1:4a:b5:db:
         ee:c8:53:0f:e9:70:e0:7a:db:32:c1:7e:21:73:81:d2:cc:e8:
         af:d0:95:70:a7:c1:d5:61:8c:46:f9:a4:0a:ff:04:53:d3:bd:
         95:3f:57:58:c4:59:cc:f3:0f:bb:00:46:f3:38:ab:6d:37:3c:
         c9:2d:c1:49:52:2e:87:dd:42:f3:fb:86:b9:28:15:ea:81:fb:
         9d:7a:e5:ee:7e:7b:18:18:8b:10:3a:cb:d2:09:46:f4:43:68:
         21:d0:82:09:d2:a4:3d:d5:0f:64:04:44:1b:1d:3c:0e:41:17:
         1c:76:06:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:36 2025 by rpki-client