Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/56E2633BEDCACB64712CAE6AD2E5EE65CACA2161.cer
File:                     56E2633BEDCACB64712CAE6AD2E5EE65CACA2161.cer (raw, json)
Hash identifier:          JNFOshs6hJvLJNMhLp2L8uS9QzJs5SStmSR81rekQ84=
Subject key identifier:   56:E2:63:3B:ED:CA:CB:64:71:2C:AE:6A:D2:E5:EE:65:CA:CA:21:61
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       03F063E027E3A147BD1F6E25BB53B7E7BAFDFC3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/56E2633BEDCACB64712CAE6AD2E5EE65CACA2161.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 18 Dec 2024 00:52:44 +0000
Certificate not after:    Wed 17 Dec 2025 00:57:44 +0000
Subordinate resources:    AS: 266304
                          IP: 170.79.200.0/22
                          IP: 2804:35c0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f0:63:e0:27:e3:a1:47:bd:1f:6e:25:bb:53:b7:e7:ba:fd:fc:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 18 00:52:44 2024 GMT
            Not After : Dec 17 00:57:44 2025 GMT
        Subject: CN=56E2633BEDCACB64712CAE6AD2E5EE65CACA2161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:da:13:b4:5e:e6:d5:04:82:06:ef:6b:bf:7d:
                    fe:6c:e6:4f:82:91:e7:9f:d0:b9:5e:c1:af:2b:bf:
                    45:e3:f5:d8:e8:70:90:6d:26:a4:e9:db:57:4c:32:
                    da:b6:1f:42:76:e5:f4:fb:e5:4c:cc:3a:8b:ac:12:
                    43:c9:cb:c5:2b:db:73:2d:e0:5d:95:ae:b0:7c:e5:
                    dc:ee:61:ea:bf:29:b7:ee:bf:7e:d3:f0:5d:f1:ed:
                    3f:62:35:f2:c7:9e:4f:9f:b4:29:a0:05:29:51:a2:
                    31:0e:c7:ac:b1:61:5c:37:69:ca:ec:f5:38:c0:f3:
                    c2:ff:0b:69:e8:4e:3a:43:65:d8:d3:a3:2c:2f:28:
                    20:e4:08:77:e8:22:30:db:57:91:34:85:e3:a4:ff:
                    26:18:6a:c0:e9:84:06:b6:33:39:29:03:36:26:3d:
                    6b:ca:1f:1b:95:94:9d:08:55:23:df:cb:5d:8f:e1:
                    d1:78:49:66:c1:bd:8f:ab:05:70:e5:ca:e2:82:b2:
                    27:42:0e:59:c2:49:99:32:cb:fb:8b:53:c1:54:4c:
                    7f:28:88:fb:3d:9a:83:57:96:fc:a1:bd:75:1e:37:
                    c5:36:e0:3f:ba:be:de:61:35:de:0b:2e:65:94:a6:
                    ee:c7:bd:7f:28:23:d7:7c:e8:cb:96:33:26:31:e8:
                    11:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                56:E2:63:3B:ED:CA:CB:64:71:2C:AE:6A:D2:E5:EE:65:CA:CA:21:61
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/56E2633BEDCACB64712CAE6AD2E5EE65CACA2161.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.200.0/22
                IPv6:
                  2804:35c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266304

    Signature Algorithm: sha256WithRSAEncryption
         60:9a:bf:c3:62:ee:5f:bd:25:64:45:2e:b3:fa:cc:4f:de:f6:
         58:ab:4a:38:0c:0c:35:10:33:99:41:11:69:a7:66:21:a5:0d:
         12:93:50:34:65:8c:a0:f9:4f:11:37:28:97:a4:cb:6a:e7:43:
         77:6f:75:77:0a:22:2c:89:3f:b5:64:e8:0e:64:d7:8a:33:33:
         04:65:ad:6b:67:33:c3:fc:e8:48:18:9f:73:f1:8a:34:cc:38:
         a7:6c:93:e0:a3:c1:fe:93:e6:ad:53:75:a6:e1:6e:7d:0a:7b:
         bd:ae:af:9d:2a:f3:6d:1e:74:a1:46:34:f3:25:c7:fa:f0:2e:
         9e:86:f6:23:4b:c8:27:53:2d:6b:66:d0:f8:2e:3c:65:0e:b5:
         59:e8:41:fc:9f:ff:9e:65:6e:de:68:fe:6c:ae:99:9d:ec:17:
         63:34:6f:d2:3d:08:ba:8a:ca:b8:9a:e2:39:61:f7:ff:24:82:
         82:3b:9d:20:b7:e1:9d:02:27:15:ec:9b:4c:a9:6f:1c:c4:3b:
         59:66:75:84:26:d9:5e:3f:2c:2f:37:65:9d:b0:42:ba:38:79:
         39:47:b0:5a:12:38:86:83:96:55:a0:5a:a3:89:92:df:c1:7a:
         9c:a7:a7:a9:35:5d:20:eb:69:ec:bf:29:f5:37:16:04:9e:64:
         2a:b8:df:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:16 2025 by rpki-client