Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5068952903F5F17C21FA5B2EC1BE472DF306072C.cer
File:                     5068952903F5F17C21FA5B2EC1BE472DF306072C.cer (raw, json)
Hash identifier:          5D3qA7aTAL6QOrIsSd08kz0RCYAYNBe26cUtukQSTHs=
Subject key identifier:   50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       05180202C3FA3CB9B0D2C98A470E252B854DB887
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 19 Mar 2025 22:38:35 +0000
Certificate not after:    Wed 18 Mar 2026 22:43:35 +0000
Subordinate resources:    AS: 266289
                          IP: 170.79.0.0/22
                          IP: 2804:357c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:18:02:02:c3:fa:3c:b9:b0:d2:c9:8a:47:0e:25:2b:85:4d:b8:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 19 22:38:35 2025 GMT
            Not After : Mar 18 22:43:35 2026 GMT
        Subject: CN=5068952903F5F17C21FA5B2EC1BE472DF306072C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:44:ca:b4:97:d9:7c:46:69:04:db:d9:db:df:
                    98:fd:c2:b4:8f:5c:a1:20:9e:fb:a3:3d:dc:27:c0:
                    04:98:df:d8:50:60:a7:b2:47:30:7c:2e:84:bd:84:
                    98:8e:ad:36:dd:57:c1:69:87:2f:d0:b5:39:59:11:
                    c7:87:7f:85:3a:87:65:22:a2:a8:49:02:fc:be:06:
                    1b:09:d5:c2:63:d3:82:6a:7c:a3:e5:c1:87:c0:fb:
                    5e:97:d3:91:4a:95:90:29:a1:f2:12:5c:4f:bf:a8:
                    dd:c6:dc:a2:9b:d4:cf:b7:bb:a9:18:b7:d8:0b:31:
                    61:a8:db:db:b3:ea:97:c2:f9:12:ed:67:34:d8:cf:
                    d6:d5:10:79:8d:9c:5a:11:10:4f:0c:b5:83:a2:41:
                    91:ff:1d:f5:a3:bf:fb:01:cb:21:80:28:03:c6:f1:
                    45:ee:31:dd:d2:15:ba:3c:33:eb:0e:fc:ab:bc:be:
                    91:dc:32:96:98:1b:17:31:10:f8:9c:93:6c:9a:4c:
                    75:e4:e3:34:4b:50:a5:1b:c9:11:68:c7:2e:66:d0:
                    0d:82:ac:84:0a:ac:2e:59:5e:db:d2:dc:4b:d8:7a:
                    7e:51:b7:95:38:ce:75:ee:ad:a2:1f:1a:38:53:5a:
                    b7:fb:94:e4:d4:f3:0b:7c:0b:6d:de:e5:a3:99:a3:
                    8b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                50:68:95:29:03:F5:F1:7C:21:FA:5B:2E:C1:BE:47:2D:F3:06:07:2C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cj5o69KYGkwfXPop4wHNBS5itULCxRPYtizrZKDuhuHW/0/5068952903F5F17C21FA5B2EC1BE472DF306072C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.0.0/22
                IPv6:
                  2804:357c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266289

    Signature Algorithm: sha256WithRSAEncryption
         25:1f:ac:be:f8:4d:44:5f:05:42:4c:f5:c9:23:05:ac:62:97:
         28:c1:a0:e5:85:72:53:3c:5f:0d:46:99:41:e6:16:1d:b9:97:
         78:93:ac:9e:bc:ac:e8:53:d1:f9:97:cc:d3:65:80:37:08:48:
         ca:50:b9:50:c9:e3:9b:76:2d:86:16:29:43:01:b1:48:63:75:
         69:6a:37:4c:f7:93:cd:78:6d:09:82:8a:9e:ba:2a:95:84:c7:
         9e:d7:e5:5d:0a:6f:79:d3:cc:fc:f0:c7:3f:ca:80:a2:c0:3f:
         fd:ca:83:10:d4:99:66:2c:42:32:f8:96:ab:0f:9e:59:51:67:
         76:c7:f2:49:f2:8f:3b:9b:ae:fc:07:97:ca:e3:ce:d8:8d:e4:
         ad:50:65:29:84:15:5b:67:ac:a3:fb:44:3b:99:00:bc:12:bc:
         d0:18:09:d2:21:3a:30:65:14:a5:2d:bc:4f:b4:54:fb:5d:26:
         94:66:7f:e6:a7:22:33:a8:24:c8:42:32:c9:32:e0:03:a4:c5:
         5a:17:c1:e9:ae:fd:18:a7:e8:f0:6b:57:82:18:20:36:c3:fd:
         f4:fa:f6:e9:92:6d:46:bb:fb:52:5e:a3:82:c3:20:d4:5f:ed:
         ba:f5:30:99:c3:e9:0b:d3:c9:7e:8a:b8:36:4d:82:3f:db:24:
         79:d0:9f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:51 2025 by rpki-client