Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer
File:                     4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.cer (raw, json)
Hash identifier:          FKmVTePi1ShNZbwBHyJjIOVWv3hrbrvsq5x4DujHHXw=
Subject key identifier:   4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3D4871138E5195E5854B4E46E69DE35A619B4003
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:17 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:17 +0000
Subordinate resources:    AS: 270765
                          IP: 186.194.164.0/22
                          IP: 2804:7114::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:48:71:13:8e:51:95:e5:85:4b:4e:46:e6:9d:e3:5a:61:9b:40:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:17 2025 GMT
            Not After : Mar  4 18:40:17 2026 GMT
        Subject: CN=4DA27EB834A2B83F0B2AC8C04DFFAE968381973A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4d:cf:f3:2d:c4:04:9f:84:0b:98:3c:5c:b9:
                    dd:5c:8c:5a:4e:31:2f:29:eb:23:11:06:31:60:66:
                    de:e5:6f:bb:e2:21:e2:93:13:03:6a:ae:95:1c:97:
                    a7:6e:11:0a:ce:51:79:91:e1:66:59:da:c9:44:d8:
                    d6:64:4e:30:12:39:dc:95:db:25:42:76:59:66:83:
                    e3:17:6a:d6:d4:48:29:53:d1:88:b0:20:8e:1c:18:
                    58:b5:8e:c1:31:5a:18:a8:f9:5d:47:53:78:5d:25:
                    25:66:10:3c:de:f1:51:56:88:72:20:10:27:42:ae:
                    b0:f0:cb:52:92:18:e4:c8:11:f6:43:28:df:ff:4c:
                    62:3c:00:41:d5:b8:a6:d1:c6:04:e2:c7:1a:4a:9b:
                    59:93:c6:4b:04:c8:75:d9:b8:ce:18:a1:76:5e:0b:
                    a9:a0:93:0b:95:01:a9:da:e0:9b:96:4c:be:da:3b:
                    9b:6a:95:f8:f2:7e:bf:1e:b1:1a:db:8a:bb:3b:c7:
                    1e:c7:19:c3:ee:a8:9a:f0:3f:34:a4:ff:ea:01:cc:
                    46:0f:f9:68:d0:a4:2c:ef:51:39:34:03:78:8b:df:
                    54:93:d4:c3:b4:9c:1a:69:7b:a8:68:19:8c:a1:5a:
                    a7:5a:8e:a8:07:39:e1:a2:07:c0:71:f2:eb:d6:b6:
                    c9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4D:A2:7E:B8:34:A2:B8:3F:0B:2A:C8:C0:4D:FF:AE:96:83:81:97:3A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fxk9vcgx1b4dDHuRV8Mr5bL7QNTj5okVgeQQS5RwYkGk/1/4DA27EB834A2B83F0B2AC8C04DFFAE968381973A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.194.164.0/22
                IPv6:
                  2804:7114::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270765

    Signature Algorithm: sha256WithRSAEncryption
         5c:29:c2:e8:62:fc:08:1b:69:c7:c4:cf:ff:00:95:41:d2:d4:
         7d:55:5d:1f:01:14:91:f1:2b:2b:6e:d0:4e:35:a4:6d:25:5d:
         f5:dc:ae:f2:f7:90:f1:8b:fb:58:51:ce:2e:39:66:b0:cf:ad:
         6e:bf:e6:1d:93:f5:58:5d:82:03:18:fe:9d:1b:86:98:79:83:
         85:20:c0:06:3c:41:e3:eb:00:24:5f:0c:73:f6:89:a7:2f:0c:
         c6:e1:13:a5:97:e3:4e:f3:d5:e8:fd:0e:19:ed:07:67:49:48:
         48:4d:2a:fe:d7:7d:2f:3c:b8:e1:d4:d4:87:51:70:3f:f1:15:
         d7:7c:1b:b0:1b:03:4a:b3:ea:f0:61:26:13:fb:aa:59:51:21:
         08:2d:ec:30:94:57:e4:89:09:90:2f:e1:f4:8f:5a:86:dd:97:
         bf:48:40:af:fe:fb:b3:75:70:e9:49:85:59:a2:95:d4:6a:c0:
         75:3b:d7:13:80:bc:79:9a:9a:29:83:68:59:b7:0c:67:a5:c6:
         09:4b:53:a1:b0:24:60:fe:66:32:85:80:7d:b7:4c:42:ed:09:
         de:59:51:48:ea:d8:4a:77:5e:a1:c5:11:05:08:7f:1e:63:15:
         4b:31:72:97:3a:c6:6d:1d:73:0d:f5:63:9f:03:60:d3:e1:54:
         76:fe:1a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:33:31 2025 by rpki-client