Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
File:                     4FEB85108E86A307A90034950C74C7A6630768F6.cer (raw, json)
Hash identifier:          ZZybzzCsSaQcmVd6B2vWFv+AzKij9+qW/mpcDwlvszI=
Subject key identifier:   4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5DBC74124B4686B965A80FCC94A46845495D203B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 14:37:25 +0000
Certificate not after:    Fri 06 Mar 2026 14:42:25 +0000
Subordinate resources:    AS: 61901
                          IP: 170.254.52.0/22
                          IP: 191.5.64.0/21
                          IP: 2804:1370::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:bc:74:12:4b:46:86:b9:65:a8:0f:cc:94:a4:68:45:49:5d:20:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 14:37:25 2025 GMT
            Not After : Mar  6 14:42:25 2026 GMT
        Subject: CN=4FEB85108E86A307A90034950C74C7A6630768F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:bc:5d:71:60:12:b4:4a:83:e4:62:6c:9b:
                    ba:ca:11:dc:de:03:91:b7:73:bc:c4:89:52:20:98:
                    df:9c:d1:3c:cd:bb:f7:19:e3:2a:b9:aa:ec:69:17:
                    e3:2b:3d:50:75:08:af:e8:3a:89:e9:78:9b:6e:cf:
                    c1:7a:b0:02:4f:d2:79:44:47:55:37:cd:e2:1d:fb:
                    cf:92:f5:4c:ca:f5:02:83:ef:df:cd:10:5d:d5:45:
                    5e:ea:52:ab:7e:26:74:c8:94:5b:06:71:c3:a4:53:
                    8a:65:35:7d:70:8a:d2:5b:78:d5:52:bb:dc:0d:f1:
                    9b:e0:d3:f8:6e:12:1d:eb:02:7e:8a:11:e2:91:59:
                    03:aa:75:99:34:08:7f:4e:b0:76:99:6b:8d:3a:71:
                    9b:84:5c:88:50:73:5f:5e:de:96:66:05:24:32:5f:
                    32:6b:b2:e1:70:cb:37:97:f4:8a:bc:8b:74:1e:14:
                    c9:09:b1:10:86:bc:92:87:17:c5:f8:df:32:81:20:
                    07:1b:be:92:f7:cb:57:43:6f:c3:ec:40:00:9d:d7:
                    ad:4c:80:59:49:98:c7:f8:4c:4f:e4:0d:af:50:36:
                    61:60:8f:a5:5d:11:0c:76:bc:c9:de:4d:e3:14:5c:
                    f2:5c:da:34:d3:2b:89:d5:ba:4e:cb:48:d9:bd:d8:
                    56:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.52.0/22
                  191.5.64.0/21
                IPv6:
                  2804:1370::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61901

    Signature Algorithm: sha256WithRSAEncryption
         a1:49:18:d6:8c:df:16:2e:07:3b:c3:2b:b2:e6:40:3b:e8:17:
         0f:71:07:54:12:de:66:d9:5b:d1:33:12:d2:12:b9:6f:3c:7d:
         35:b6:4d:3c:5c:7b:76:36:50:22:f1:a5:31:ec:c4:27:67:e6:
         2f:c0:cd:a9:d7:d8:56:6c:f0:76:6b:c2:75:c0:43:fb:77:6b:
         e2:43:82:82:16:e8:c4:1d:3c:c9:23:e5:75:66:70:51:bf:6a:
         d3:ae:41:42:17:b6:9e:18:6f:73:9a:d2:98:08:c2:7a:25:ba:
         53:7a:24:47:25:1a:c5:d8:84:36:cd:0f:2e:35:01:ab:ab:56:
         1e:29:e9:c1:4b:d1:94:fd:0b:75:5b:16:19:27:57:fc:cd:ed:
         96:da:f6:1f:ea:a1:4a:8f:19:53:28:fa:bb:00:79:d2:17:20:
         79:35:02:78:23:09:f2:04:ca:17:9b:0f:4e:73:ba:98:b9:01:
         2d:6e:4b:a4:5a:34:f2:36:94:f6:34:cf:41:b6:56:19:bd:fd:
         85:8b:6e:da:11:58:40:35:f4:d8:cc:3e:79:6b:8d:05:c0:a1:
         99:bb:59:df:9d:ef:be:4e:cd:7b:1f:7a:8f:ef:47:5b:c3:4e:
         fd:30:9f:f9:02:1d:9d:05:20:9f:94:16:5d:9a:f7:03:ee:5a:
         e1:38:ef:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:48:22 2025 by rpki-client