Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/51A41F1275FF94CC496816F994B49E1F6B638B92.cer
File:                     51A41F1275FF94CC496816F994B49E1F6B638B92.cer (raw, json)
Hash identifier:          qzxDfOgyzfGKQoQ5iJGMvE3YM73j5LCYqH5kT5fiBgc=
Subject key identifier:   51:A4:1F:12:75:FF:94:CC:49:68:16:F9:94:B4:9E:1F:6B:63:8B:92
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5EBE9177A39D3211C56AED19CE174C042E34F8D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/51A41F1275FF94CC496816F994B49E1F6B638B92.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Jan 2025 20:05:07 +0000
Certificate not after:    Wed 28 Jan 2026 20:10:07 +0000
Subordinate resources:    AS: 265174
                          IP: 167.249.204.0/22
                          IP: 2804:2bc4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:be:91:77:a3:9d:32:11:c5:6a:ed:19:ce:17:4c:04:2e:34:f8:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 29 20:05:07 2025 GMT
            Not After : Jan 28 20:10:07 2026 GMT
        Subject: CN=51A41F1275FF94CC496816F994B49E1F6B638B92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e8:d3:54:88:f2:bb:30:28:df:2a:15:7b:a6:
                    8f:f5:f7:d9:92:aa:9b:f9:26:b1:47:ab:53:0c:b6:
                    21:ea:67:ff:fe:ff:2d:06:05:56:90:fa:c4:16:a5:
                    ba:37:ab:75:35:9c:29:7e:71:71:7c:06:65:2e:fa:
                    7e:4e:45:59:f7:31:fc:7d:59:d6:a2:48:28:5e:eb:
                    7b:25:17:2e:14:26:e1:c7:29:37:ea:eb:b7:97:d7:
                    22:22:8c:46:d6:d1:e6:b2:58:27:62:6b:29:c5:19:
                    50:48:a7:2f:af:6d:22:0a:fd:b2:77:79:60:50:20:
                    18:a8:02:56:be:14:33:3c:47:46:25:11:6a:a6:78:
                    d1:e8:a9:3e:3a:84:50:a7:07:31:fe:3c:a9:c9:42:
                    cf:69:8b:ae:e1:e7:62:3e:27:72:88:74:0c:76:96:
                    e3:38:4b:d6:03:a4:fd:24:7f:f0:5c:ed:47:b7:3f:
                    73:98:04:1d:40:b0:3f:f1:e4:59:54:d3:95:d5:91:
                    81:a3:22:b1:f9:a4:09:9e:da:ad:b1:d6:bf:90:70:
                    47:c7:4e:58:01:46:08:89:0d:61:7e:b1:8b:9f:07:
                    7d:36:aa:77:cb:2c:75:2f:31:00:da:bd:76:9b:ba:
                    26:0c:25:0e:13:d6:6d:bb:d0:08:8b:70:83:56:9b:
                    10:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:A4:1F:12:75:FF:94:CC:49:68:16:F9:94:B4:9E:1F:6B:63:8B:92
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FaNJvs8SbMQHzDGYiheJmYKXFjgWpQfTkdQZ2wr8PJW4/0/51A41F1275FF94CC496816F994B49E1F6B638B92.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.204.0/22
                IPv6:
                  2804:2bc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265174

    Signature Algorithm: sha256WithRSAEncryption
         c4:a0:89:f1:b4:3a:f8:6d:de:8e:56:71:94:7e:af:21:73:4c:
         56:04:7b:d4:04:f6:87:da:f4:4e:18:b5:a0:c6:f7:28:fd:72:
         4b:62:71:1a:cb:87:c7:78:a1:e2:15:73:a4:37:45:6d:76:78:
         60:e8:08:7c:fa:9d:7f:f5:ff:73:bc:05:0f:bb:e8:8e:02:59:
         d8:6d:55:5b:8e:40:5f:b8:bc:0e:a9:83:9a:82:3e:c5:85:20:
         cb:90:14:72:ba:af:a2:dc:17:9e:7c:05:45:58:fc:79:b3:76:
         bc:7c:da:34:70:c3:e8:76:b7:7c:29:c8:cf:4a:12:88:f1:77:
         c1:63:ca:be:c6:21:4f:a6:af:03:e7:b9:76:c6:f1:4b:c8:79:
         2a:ab:43:13:67:af:a8:41:67:f8:d7:86:1b:7a:32:96:26:95:
         d1:6f:ae:99:f9:18:e5:a0:85:32:22:d6:8e:13:67:df:1a:63:
         a4:9f:d9:55:b0:64:ad:28:fd:f1:6e:55:10:b6:ef:1f:78:61:
         bf:67:56:03:1a:a3:3e:65:49:db:b8:68:cc:b6:01:be:0d:6c:
         2b:1b:ba:a6:92:b6:8e:57:c9:42:bc:ef:a5:b3:13:cb:4e:2a:
         ff:0d:52:d4:fb:ac:37:a2:58:ff:27:71:fd:4d:19:aa:8e:f1:
         5a:e6:02:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:20 2025 by rpki-client