Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/56D283C6C96F8CDFF19FF9397DC907E8E53346E8.cer
File:                     56D283C6C96F8CDFF19FF9397DC907E8E53346E8.cer (raw, json)
Hash identifier:          Ua8QQ1tVZPRcKH63w/12sMOFxyXRbgtXstfnre7QQqw=
Subject key identifier:   56:D2:83:C6:C9:6F:8C:DF:F1:9F:F9:39:7D:C9:07:E8:E5:33:46:E8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       629EB5B37F2106ADD928A77D05AD2DEA41614C2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/56D283C6C96F8CDFF19FF9397DC907E8E53346E8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Feb 2025 20:00:07 +0000
Certificate not after:    Tue 24 Feb 2026 20:05:07 +0000
Subordinate resources:    AS: 264442
                          IP: 131.221.192.0/22
                          IP: 2804:1ea8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9e:b5:b3:7f:21:06:ad:d9:28:a7:7d:05:ad:2d:ea:41:61:4c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 25 20:00:07 2025 GMT
            Not After : Feb 24 20:05:07 2026 GMT
        Subject: CN=56D283C6C96F8CDFF19FF9397DC907E8E53346E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fd:8f:e2:f9:5c:69:a7:63:58:da:c7:37:d8:
                    7f:fc:8b:7a:7d:78:71:69:36:17:b2:d5:46:c0:d3:
                    48:0f:c0:99:01:d0:f4:95:be:f6:1a:61:48:af:64:
                    48:b7:ec:95:1f:7b:95:d3:68:c7:cf:ce:01:c0:5c:
                    24:94:40:65:0a:39:04:59:cd:40:6f:aa:11:2a:e5:
                    c1:c1:04:44:20:e5:d3:8f:12:ac:7d:cb:f0:00:c8:
                    a7:ae:e1:ff:05:d8:e1:5e:c4:45:2d:c9:29:2e:64:
                    ca:1a:88:74:4a:40:f2:0a:7c:46:23:61:87:84:e2:
                    33:eb:28:81:e4:36:54:cc:b3:d5:48:b3:c3:86:d6:
                    2b:15:2a:f6:a7:87:11:6d:61:eb:6e:bc:aa:58:b5:
                    d4:3b:0f:5a:cb:7b:ad:6a:99:84:da:b9:c0:b9:1b:
                    28:00:32:88:6d:72:6f:21:fe:20:0b:ec:bc:7b:92:
                    89:8d:ca:07:d6:40:74:c2:c9:b4:4c:a4:d0:07:a5:
                    60:3b:db:f7:77:82:aa:bf:e6:37:88:86:ac:1d:e3:
                    fe:2c:b7:66:9c:b8:1a:08:e1:65:4e:e2:d4:09:76:
                    7d:20:2b:d7:de:e9:88:ef:1a:58:7c:1e:52:4f:40:
                    1b:be:a3:ce:da:25:ed:ff:ec:9d:6e:f2:0d:db:29:
                    5a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:D2:83:C6:C9:6F:8C:DF:F1:9F:F9:39:7D:C9:07:E8:E5:33:46:E8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7MDC4TTPB1Fu9V3qGgL7DEo5kfHrYCNLtPxir1V2cAuM/0/56D283C6C96F8CDFF19FF9397DC907E8E53346E8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.192.0/22
                IPv6:
                  2804:1ea8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264442

    Signature Algorithm: sha256WithRSAEncryption
         4b:1c:97:e8:a3:ea:2f:a9:ae:f4:c7:54:71:38:d7:21:3a:92:
         c1:92:fe:ef:fe:4d:23:9c:47:ff:1c:c8:c2:bc:b9:7c:7a:6b:
         51:cb:b3:09:b5:20:f6:f2:5a:e7:79:25:00:68:51:fa:4c:97:
         73:55:54:39:c4:05:22:da:b8:e2:be:38:57:ac:d1:3a:a7:2c:
         d2:85:64:f9:6f:2b:a6:9c:d5:ce:5e:52:1e:33:43:29:2e:b2:
         7d:38:2a:51:25:95:77:bb:56:51:ad:dd:b3:f8:80:a5:dc:1f:
         ad:e0:cd:62:a8:0f:1f:10:fc:99:04:1d:ab:bf:c1:9b:da:d1:
         2e:42:ae:d6:93:04:b0:e8:57:ab:2e:17:e8:8a:57:ff:81:86:
         96:1c:af:d3:99:0c:d7:b0:f0:f2:b3:bb:df:54:17:50:ab:84:
         9e:56:ed:f6:ef:e2:d4:bd:6a:28:16:de:9f:b4:c2:48:91:8f:
         85:53:7d:11:cf:15:a1:ad:ea:d4:8f:5b:8e:4c:c9:91:87:89:
         9b:08:1f:c3:2a:86:6e:2c:ee:04:07:b6:1d:44:1f:08:f9:9f:
         1c:2a:dd:e5:9f:d4:3f:a9:dd:2c:2a:e2:27:74:f2:d6:e6:7e:
         dd:26:71:96:b7:55:47:20:9e:a4:9f:19:bf:a2:ba:91:85:d2:
         73:be:d3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:40 2025 by rpki-client