Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/513CE4A81796F944497410B832C764D2FEF2E43A.cer
File:                     513CE4A81796F944497410B832C764D2FEF2E43A.cer (raw, json)
Hash identifier:          dMhOSK78tWIVpcwyvXMyn0gzUg0bG/qHNE2FmorWbB0=
Subject key identifier:   51:3C:E4:A8:17:96:F9:44:49:74:10:B8:32:C7:64:D2:FE:F2:E4:3A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6D9A691F90848B8547EA8E8BE9FC5FFE3847ECBD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/513CE4A81796F944497410B832C764D2FEF2E43A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Nov 2024 08:49:01 +0000
Certificate not after:    Fri 28 Nov 2025 08:54:01 +0000
Subordinate resources:    AS: 264344
                          IP: 138.94.36.0/22
                          IP: 138.185.84.0/22
                          IP: 2804:2674::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9a:69:1f:90:84:8b:85:47:ea:8e:8b:e9:fc:5f:fe:38:47:ec:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 29 08:49:01 2024 GMT
            Not After : Nov 28 08:54:01 2025 GMT
        Subject: CN=513CE4A81796F944497410B832C764D2FEF2E43A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:92:9b:aa:36:91:df:ef:42:a4:c9:77:7a:72:
                    6c:39:85:ad:44:ce:05:c7:43:b7:be:fb:c9:1d:04:
                    f9:56:9d:07:15:48:86:3e:71:f4:a0:51:1d:e8:df:
                    10:11:6a:01:62:3c:b6:a3:5a:0a:19:68:31:9f:9a:
                    dd:13:fe:5a:f5:51:95:6f:e4:95:c2:d5:c4:4c:3b:
                    24:60:66:27:4c:b2:74:ac:f4:cc:1f:27:5b:6b:78:
                    c9:b0:ef:01:92:e8:f8:04:6f:bb:03:5f:7e:7d:58:
                    8e:65:db:27:2c:5f:99:88:4e:78:9b:c6:6c:7a:30:
                    c7:d2:82:f0:53:f2:b8:f7:e0:96:14:7b:a9:3a:de:
                    fd:63:f9:96:4f:ea:d9:b9:1b:6c:4b:ba:48:c4:c9:
                    56:89:23:05:f3:db:de:03:c5:4d:12:f9:2b:24:61:
                    ca:39:99:40:f0:86:ec:66:ce:df:b8:f0:bf:74:69:
                    df:90:14:f3:f6:b3:2f:3e:6f:1b:32:dc:4f:7a:fc:
                    da:7a:1d:1a:dd:54:8d:0a:24:2b:cc:e5:7b:7c:e1:
                    5b:6e:a2:9f:89:d3:34:9c:c0:fe:6a:f6:87:17:f3:
                    eb:8b:9c:d1:22:7d:87:12:4d:43:36:05:98:da:1a:
                    bd:dd:e6:00:7e:0b:dd:13:c6:bb:de:5c:1e:77:bc:
                    18:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:3C:E4:A8:17:96:F9:44:49:74:10:B8:32:C7:64:D2:FE:F2:E4:3A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/513CE4A81796F944497410B832C764D2FEF2E43A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.36.0/22
                  138.185.84.0/22
                IPv6:
                  2804:2674::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264344

    Signature Algorithm: sha256WithRSAEncryption
         12:34:fa:a9:60:ff:1c:cd:c6:21:1f:a1:08:e8:85:2d:b1:95:
         f1:0f:1b:3c:74:4e:4b:4c:64:31:23:38:f2:54:61:c8:70:32:
         e1:f4:96:46:c6:e8:de:ae:e9:21:4f:df:84:31:ce:65:26:e3:
         0b:88:a0:df:25:4c:16:be:4e:c6:f1:7c:68:4c:78:f6:e0:51:
         b4:09:ed:78:5a:a4:11:99:47:4f:4e:b8:bb:43:a9:be:23:43:
         61:15:e7:39:ff:52:cc:3d:ec:ac:79:de:f7:8d:e9:0b:b5:d3:
         cc:b8:90:01:a5:32:e5:0a:fd:6f:36:b8:d2:54:72:27:af:63:
         b7:0a:b6:a5:22:d0:bd:51:79:5c:4d:6b:05:1c:f8:8d:f9:0e:
         6f:cc:9b:a1:bb:5c:2f:a4:f9:34:dc:36:d6:fb:71:83:8f:29:
         dd:3f:f8:87:47:7f:5d:be:3d:29:bb:30:2d:47:c7:a1:0a:f0:
         a6:f9:2a:e1:1c:1f:af:25:6f:50:3c:d8:16:37:1f:ee:37:46:
         ae:f4:f5:5a:eb:5e:65:1e:32:4e:a5:cc:dd:ee:d1:77:92:28:
         e4:e5:40:33:aa:cc:92:f7:6c:50:39:de:87:89:c5:40:4c:bb:
         1b:fc:84:94:7c:a7:b8:cb:4d:23:b0:bc:9e:32:98:38:28:af:
         cd:3d:17:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:09 2025 by rpki-client