Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.cer
File:                     57C950BD274ED8EA04B2AF337313BFE612E66E95.cer (raw, json)
Hash identifier:          l7OtnXEehkaY5G0716+G8FdLlakMjzP10RSbOFlx0jo=
Subject key identifier:   57:C9:50:BD:27:4E:D8:EA:04:B2:AF:33:73:13:BF:E6:12:E6:6E:95
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       384D497B41D7F7F6991A2B0C82496BDB0C57AB20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.mft
caRepository:             rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 02:56:15 +0000
Certificate not after:    Fri 06 Mar 2026 03:01:15 +0000
Subordinate resources:    AS: 267258
                          IP: 45.232.108.0/22
                          IP: 2804:4ab4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4d:49:7b:41:d7:f7:f6:99:1a:2b:0c:82:49:6b:db:0c:57:ab:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 02:56:15 2025 GMT
            Not After : Mar  6 03:01:15 2026 GMT
        Subject: CN=57C950BD274ED8EA04B2AF337313BFE612E66E95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:b0:f6:1d:ce:87:28:39:36:73:00:f1:c8:
                    ca:05:2c:96:70:4b:e9:83:0a:a1:58:52:d3:1f:bd:
                    a5:f4:93:a5:dd:31:3a:e3:f3:cd:97:00:64:c3:35:
                    cd:20:ed:7d:fd:4e:a2:44:27:20:27:ad:c9:24:ee:
                    9a:8c:47:d5:05:94:d3:33:22:e2:9a:14:a5:fd:c1:
                    df:96:2e:b7:be:ef:24:fd:0c:6d:21:76:d2:c6:4b:
                    b1:31:19:07:e9:09:3c:63:1e:0e:d1:75:e9:ce:b8:
                    80:b2:59:46:6c:29:38:c5:b2:3a:12:d4:d8:cb:e3:
                    95:b1:dc:5e:ec:9f:ae:1e:fc:00:50:8a:ea:42:fe:
                    44:1f:a3:3c:29:50:68:0b:3b:13:88:5a:59:9b:cb:
                    1b:10:58:eb:f8:4f:35:7d:8e:40:2c:bc:bb:da:ec:
                    6a:1b:d9:ec:e5:91:91:1b:03:d0:4d:c6:1e:44:74:
                    64:da:3f:3a:01:6a:43:cf:7b:48:5b:cf:21:97:64:
                    32:63:2b:0a:21:ef:5a:c1:bf:97:06:fd:b6:83:d7:
                    6b:be:1f:8c:a9:0b:ee:68:67:22:34:ab:eb:9e:0d:
                    6d:f6:48:7f:ce:55:2f:d5:29:a2:84:c0:6f:ca:f2:
                    4c:ef:52:4d:08:b8:c9:6f:ce:13:f4:c8:b3:24:92:
                    1c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:C9:50:BD:27:4E:D8:EA:04:B2:AF:33:73:13:BF:E6:12:E6:6E:95
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/46D4XksWeXJFgHm8kVs4aVmqAHqQQdnTZY4xrek7MzGh/1/57C950BD274ED8EA04B2AF337313BFE612E66E95.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.108.0/22
                IPv6:
                  2804:4ab4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267258

    Signature Algorithm: sha256WithRSAEncryption
         88:9d:52:22:f7:ed:2a:fd:16:f2:0f:db:77:cd:94:c7:4c:a5:
         ba:ee:97:22:1f:2b:bf:4e:c2:02:cb:84:81:68:64:c3:91:67:
         f3:4f:6d:5b:73:fd:08:bd:ac:ca:43:c5:e3:40:42:63:bf:01:
         03:a4:16:26:ce:ca:15:71:f8:3b:bb:62:35:37:39:83:6d:b8:
         12:ba:ec:12:11:36:99:1b:ad:a6:5c:a8:ea:d0:7e:e9:ed:70:
         57:4c:bc:10:e2:52:76:92:02:69:dc:41:56:1e:0d:25:09:67:
         45:c2:e5:82:9c:f0:34:91:6e:22:3a:bc:95:64:27:93:e6:3e:
         17:13:ba:07:c1:d4:9d:9d:e9:fd:55:10:41:5a:4d:50:b6:3a:
         b6:9b:6b:2f:f9:b3:29:f7:f9:6f:f1:87:f1:e4:31:ec:f4:97:
         6a:35:ee:a9:fb:a2:df:ce:5d:72:70:32:29:a0:e3:9d:62:77:
         76:4a:15:53:8a:96:f6:4d:39:61:7b:41:37:98:39:ae:00:58:
         d6:f5:7e:00:74:e6:17:53:cb:35:8a:99:1c:d1:8f:72:f5:d7:
         23:2d:90:45:84:83:19:c7:ce:6c:67:8b:52:0c:08:3d:5a:5b:
         f1:1a:ea:0b:61:99:7e:8e:08:41:fb:2f:7c:48:21:5c:71:76:
         55:f1:ec:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:44:40 2025 by rpki-client