Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5705E4372A8B28EB99913B22E4D866ED49A551A4.cer
File:                     5705E4372A8B28EB99913B22E4D866ED49A551A4.cer (raw, json)
Hash identifier:          sY/h6iaAabKLqEBPqfBJaqw26M/jv6gdunOkZGEiiiU=
Subject key identifier:   57:05:E4:37:2A:8B:28:EB:99:91:3B:22:E4:D8:66:ED:49:A5:51:A4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4445A577C9B0932E7243167A688107558D61F120
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/2/5705E4372A8B28EB99913B22E4D866ED49A551A4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Mar 2025 01:55:00 +0000
Certificate not after:    Tue 24 Mar 2026 02:00:00 +0000
Subordinate resources:    AS: 269640
                          IP: 45.190.68.0/22
                          IP: 2804:67a0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:45:a5:77:c9:b0:93:2e:72:43:16:7a:68:81:07:55:8d:61:f1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 25 01:55:00 2025 GMT
            Not After : Mar 24 02:00:00 2026 GMT
        Subject: CN=5705E4372A8B28EB99913B22E4D866ED49A551A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cc:91:8a:e0:9a:bc:01:21:20:79:b7:c5:ec:
                    71:c2:33:28:22:43:d8:03:e3:0b:bb:5c:1a:26:91:
                    fe:23:7c:e3:5b:67:09:80:17:0f:01:3e:06:86:b8:
                    6a:fc:6d:5b:e0:c9:5d:29:d6:75:14:bb:9f:9e:e2:
                    00:81:ef:53:55:64:03:c7:43:2c:ba:4b:ed:8f:22:
                    02:c1:7b:2a:d0:ad:fa:a3:6a:81:4e:fa:5c:e4:30:
                    6c:34:a5:9e:be:54:32:81:88:4d:9a:40:2e:86:09:
                    50:29:b3:56:99:1f:8b:15:91:7f:53:4e:03:6b:dd:
                    5f:c7:3d:0a:fd:53:7d:17:da:31:1e:31:17:fb:91:
                    55:3d:a1:7d:e3:79:9c:6d:81:84:c7:b9:2b:f3:5e:
                    9e:e8:a2:d8:da:17:08:67:62:6a:36:5a:04:df:e0:
                    2d:50:1b:6b:25:63:1b:dd:cb:1e:cd:2b:99:de:24:
                    72:23:1a:f1:1c:16:a9:6c:8d:01:ea:81:6d:27:31:
                    f2:75:92:a6:a9:c8:6d:e7:60:1e:40:e9:f4:93:4b:
                    53:43:d7:51:86:f3:cb:59:8a:72:e0:6e:af:cd:45:
                    a4:65:d9:88:cc:1b:af:9d:d1:48:cf:8c:2f:a2:15:
                    90:e6:aa:fc:97:29:67:8f:37:08:5a:c2:00:c4:6c:
                    3b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:05:E4:37:2A:8B:28:EB:99:91:3B:22:E4:D8:66:ED:49:A5:51:A4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A3uPy2vKawxLSvQgredYqK93UwgQ9EbfUbE8r2aVihp3/2/5705E4372A8B28EB99913B22E4D866ED49A551A4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.68.0/22
                IPv6:
                  2804:67a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269640

    Signature Algorithm: sha256WithRSAEncryption
         82:c4:a1:76:10:bb:f1:42:9c:58:12:0f:47:e0:be:31:49:1f:
         f9:b7:26:a0:a9:e9:ff:e9:40:1a:1f:9e:5b:5d:22:58:ce:7c:
         bc:94:48:50:29:0a:6d:b2:c9:b7:ce:26:8d:05:8d:9e:52:bf:
         d1:bb:58:c9:31:e3:7d:5a:a0:c1:f1:74:e3:66:3c:10:10:97:
         96:e6:8d:6f:ba:5e:6b:f1:14:07:6c:59:fc:1b:cb:5d:bf:7c:
         0c:d7:d9:d3:a0:78:a2:c0:9f:0e:1d:47:bf:24:96:6c:51:be:
         a6:26:3f:6c:8e:be:5b:19:d6:47:31:53:dc:90:19:ab:40:ca:
         b1:fb:d3:44:d6:ba:f8:87:0c:29:e8:cf:0e:af:76:36:82:1a:
         e6:68:7e:d6:2a:ab:7a:cd:22:83:79:32:c9:d7:21:49:4b:32:
         69:3e:9a:09:60:ca:14:c3:53:a7:05:68:93:86:09:a8:93:e8:
         45:e6:ef:b0:f9:7e:bb:74:c8:e8:e5:86:de:95:f6:ee:c3:8e:
         29:2a:d1:e3:99:e0:c3:b8:04:f5:53:72:0c:63:81:1f:b6:c6:
         48:d8:7d:d2:b4:47:62:18:9e:bb:40:94:ff:4c:05:3d:ad:f6:
         e8:04:79:51:ee:ef:6e:eb:77:a4:ae:e3:0c:60:79:1b:51:65:
         8a:05:df:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:37:16 2025 by rpki-client