Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.cer
File:                     578D34CF76BA5E5EEFCC4F2B657185989703AE74.cer (raw, json)
Hash identifier:          rKKuAqhejEc7YgxjD4asQvwzZMszdRTBF524EVckvsU=
Subject key identifier:   57:8D:34:CF:76:BA:5E:5E:EF:CC:4F:2B:65:71:85:98:97:03:AE:74
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5D2D0155147E58EF8425F5CC99DCDD83B0C9CA03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 11:47:39 +0000
Certificate not after:    Thu 05 Mar 2026 11:52:39 +0000
Subordinate resources:    AS: 266296
                          IP: 170.79.92.0/22
                          IP: 2804:359c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:2d:01:55:14:7e:58:ef:84:25:f5:cc:99:dc:dd:83:b0:c9:ca:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 11:47:39 2025 GMT
            Not After : Mar  5 11:52:39 2026 GMT
        Subject: CN=578D34CF76BA5E5EEFCC4F2B657185989703AE74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:06:c6:8c:1f:9c:b7:9f:32:8f:b1:7c:0f:a9:
                    ff:aa:85:7f:ce:95:dc:fe:45:d9:71:98:1e:5e:65:
                    4b:e7:63:e8:42:35:60:11:d2:59:74:40:b0:78:72:
                    3e:e5:90:9a:60:a7:b8:4e:5f:a6:d7:33:b4:3a:45:
                    3a:f4:63:97:1c:99:72:03:3f:22:cc:1c:af:60:b9:
                    05:99:5e:ea:d9:1d:45:8d:e7:fa:8c:56:a1:04:13:
                    a5:41:93:44:95:bc:6b:1b:3a:01:41:f2:92:2d:75:
                    fa:30:e9:af:59:a8:d2:b0:d0:fc:6a:5b:44:c0:5b:
                    c8:4d:01:3e:bb:5f:f6:57:70:e6:cc:bf:88:63:85:
                    82:73:42:47:38:8d:a6:a1:b9:31:c1:ce:b1:7f:d4:
                    8a:3d:2d:4b:2e:e4:7f:72:c6:66:d8:b6:b3:d8:f4:
                    c8:d7:66:26:db:4f:ca:fa:8f:35:32:18:22:1e:d5:
                    1b:7a:a6:b7:67:87:1c:2e:2c:1e:97:93:ac:82:25:
                    a9:11:24:42:b3:a9:16:0f:dc:3f:b9:34:27:2a:fd:
                    c0:d4:0a:97:16:1f:05:34:df:5f:1d:da:a9:75:c2:
                    c3:b5:0a:c4:02:79:f0:81:a9:ec:07:80:2d:2c:32:
                    e6:aa:48:cf:64:81:c0:b0:b6:05:37:1d:ce:85:7c:
                    01:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:8D:34:CF:76:BA:5E:5E:EF:CC:4F:2B:65:71:85:98:97:03:AE:74
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AAE5udLpTP1kJ3V4dToWZ9MY4zLk6XfzEMTa8CMBXs4X/1/578D34CF76BA5E5EEFCC4F2B657185989703AE74.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.92.0/22
                IPv6:
                  2804:359c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266296

    Signature Algorithm: sha256WithRSAEncryption
         2a:5f:2e:df:e4:4f:46:4b:c4:c8:9d:9d:46:2e:d5:86:88:c2:
         41:b3:48:a3:e5:04:cc:68:85:e5:fb:d2:34:fb:a7:00:c9:c6:
         b2:e2:5f:ab:05:52:f4:60:9d:17:68:5f:28:d8:4e:9d:90:0b:
         0d:e1:f1:42:a4:02:f4:c1:c6:17:de:92:7a:9d:c3:cf:a5:e8:
         5c:5d:c8:69:70:77:bb:96:91:ce:51:45:a7:d7:86:6e:ff:98:
         4a:a9:36:1b:9a:b1:b3:a7:4e:4d:f6:29:db:8b:d0:85:0f:26:
         9b:d1:da:9a:d5:2d:1b:d9:eb:6d:3e:b0:64:86:1a:f2:96:ab:
         c4:34:36:2b:52:5e:f8:69:4a:3c:62:a6:fc:6a:85:f1:57:1b:
         61:ab:82:30:7e:92:88:bb:09:ae:70:bc:b5:16:98:3d:98:b0:
         d7:04:ae:93:36:ae:c4:82:3b:5f:91:5d:f8:80:83:75:08:8d:
         ce:ec:07:50:90:13:dd:35:6d:f7:ca:9a:e8:6e:e3:3c:fc:ca:
         7d:03:67:f1:64:1a:46:b4:11:48:c3:a1:c1:0e:56:82:ae:d9:
         ec:2c:0a:ab:50:89:ec:16:c1:c3:4f:96:b6:91:cc:3a:7f:f5:
         03:10:19:14:d1:1a:e1:6f:54:e0:bc:f2:64:7a:28:58:8b:22:
         b1:0c:31:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:19:16 2025 by rpki-client