Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4F03FCA42EE0F2A7F7B060246F07609C3A363D11.cer
File:                     4F03FCA42EE0F2A7F7B060246F07609C3A363D11.cer (raw, json)
Hash identifier:          QrwR2haXHA2XfQTLSuSlueMooxWoHuol93jXHjvM7/M=
Subject key identifier:   4F:03:FC:A4:2E:E0:F2:A7:F7:B0:60:24:6F:07:60:9C:3A:36:3D:11
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6E22AFDB9F068A81E6446B0CD82B4185981C93C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/4F03FCA42EE0F2A7F7B060246F07609C3A363D11.mft
caRepository:             rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Dec 2024 13:24:40 +0000
Certificate not after:    Tue 09 Dec 2025 13:29:40 +0000
Subordinate resources:    AS: 268924
                          IP: 45.176.0.0/22
                          IP: 2804:5cb0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:22:af:db:9f:06:8a:81:e6:44:6b:0c:d8:2b:41:85:98:1c:93:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 10 13:24:40 2024 GMT
            Not After : Dec  9 13:29:40 2025 GMT
        Subject: CN=4F03FCA42EE0F2A7F7B060246F07609C3A363D11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b9:6c:3e:45:e0:e7:f9:81:5b:dc:89:90:dd:
                    01:a0:3d:f1:c1:89:11:76:c7:39:9c:4b:a3:ef:80:
                    07:71:ce:05:ac:c1:64:5b:ed:1c:f1:80:be:5e:36:
                    9d:4a:22:eb:7b:20:bd:77:51:0a:c2:8e:2f:9b:29:
                    48:30:aa:dd:44:80:59:9f:11:40:2d:51:b9:47:76:
                    63:97:d5:ae:e0:f5:6d:5c:01:6d:7f:e8:b6:e5:a4:
                    21:a1:1d:e2:f6:6e:cd:91:42:31:04:c5:a0:57:4b:
                    3e:d8:f8:a0:92:6a:e9:7b:86:bf:d0:03:b3:de:f4:
                    ae:5e:b1:d1:c9:18:b2:83:79:f6:ec:f0:5c:41:bd:
                    fb:b5:a7:17:0e:c2:93:1a:e4:bc:77:9c:c4:de:c4:
                    ff:07:3f:ed:c3:9a:a7:9c:e4:ab:9f:c7:4f:e7:54:
                    2b:06:d5:f4:b6:95:9d:55:be:36:f1:eb:16:2f:9a:
                    42:83:17:8d:41:66:e5:1e:c8:3c:83:67:a6:3b:25:
                    77:68:ea:e4:c2:2e:fa:4f:83:ee:3e:6c:68:41:91:
                    74:b2:ab:56:74:25:84:be:1c:11:0d:bf:07:3b:fa:
                    28:ae:65:aa:ae:32:72:b3:ca:ef:d9:95:c3:12:30:
                    22:d5:4c:95:bd:1e:28:60:7f:7c:c3:05:05:f7:3c:
                    11:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:03:FC:A4:2E:E0:F2:A7:F7:B0:60:24:6F:07:60:9C:3A:36:3D:11
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/4F03FCA42EE0F2A7F7B060246F07609C3A363D11.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.0.0/22
                IPv6:
                  2804:5cb0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268924

    Signature Algorithm: sha256WithRSAEncryption
         40:36:9d:3d:08:8e:dc:5f:92:e9:59:5f:39:83:03:a6:27:8b:
         ac:ab:ad:94:0c:0e:3b:ea:d5:00:8d:6a:b4:3a:86:cd:a4:e5:
         11:cd:7a:07:5b:fc:3e:23:19:3b:a8:4b:f6:10:df:d5:d1:48:
         f5:c5:f1:72:6b:38:7e:9e:42:75:39:12:1b:f7:79:62:d8:2f:
         0f:85:3c:3f:e5:48:b9:d5:eb:0c:8c:44:05:16:4f:1d:cc:d5:
         42:f4:98:9d:32:dc:c5:0b:da:45:b6:82:a3:93:89:f5:77:96:
         5e:9d:7e:05:59:a8:e5:b0:60:d9:c3:42:1b:05:93:e3:13:82:
         72:f0:a3:82:c1:4d:dc:62:27:8d:9e:17:93:bd:8e:19:af:bc:
         89:6e:47:93:58:a1:0e:c8:68:53:29:d4:32:73:d1:df:4e:85:
         99:f7:3e:20:f1:9a:ba:f5:e5:6b:32:15:e9:6f:d2:3a:ac:74:
         3e:01:0a:73:75:be:d6:ec:06:29:7a:06:f0:b6:c2:72:e7:08:
         ef:53:02:a8:d4:1a:ec:d7:69:ec:f6:01:57:ad:d8:29:17:ed:
         39:a0:29:0b:8c:62:cc:1a:62:47:f3:17:d8:56:a2:4f:77:76:
         c4:d2:cc:0d:28:2b:e3:1f:07:27:8b:29:4c:b6:9f:fd:10:f0:
         92:6f:86:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:23:47 2025 by rpki-client