Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/57E5BC403DFD7B11DBE0DF23ADFB0A0CFE55AEA2.cer
File:                     57E5BC403DFD7B11DBE0DF23ADFB0A0CFE55AEA2.cer (raw, json)
Hash identifier:          OEQzAQF2QkCQmxEqOzAq/9cuhFzX1xHLIEmP3vcpIJw=
Subject key identifier:   57:E5:BC:40:3D:FD:7B:11:DB:E0:DF:23:AD:FB:0A:0C:FE:55:AE:A2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4F31FBBC686B39C453EBD159C8A41AA269660A44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/57E5BC403DFD7B11DBE0DF23ADFB0A0CFE55AEA2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Jan 2025 12:00:18 +0000
Certificate not after:    Thu 08 Jan 2026 12:05:18 +0000
Subordinate resources:    AS: 268665
                          IP: 45.165.0.0/22
                          IP: 2804:54b0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:31:fb:bc:68:6b:39:c4:53:eb:d1:59:c8:a4:1a:a2:69:66:0a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  9 12:00:18 2025 GMT
            Not After : Jan  8 12:05:18 2026 GMT
        Subject: CN=57E5BC403DFD7B11DBE0DF23ADFB0A0CFE55AEA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:37:33:03:d1:b7:87:77:05:7d:37:68:5f:eb:
                    ec:d5:4f:0c:59:41:dd:1d:da:75:b9:05:5d:ca:a3:
                    01:32:4b:2c:e1:97:e9:64:26:d8:ef:80:26:de:34:
                    80:b8:41:4d:e1:40:3e:65:10:88:42:fb:38:aa:01:
                    1e:9b:b8:d9:20:b1:65:a2:89:2c:a1:a7:76:d3:ff:
                    f1:df:ad:d2:11:fb:58:e7:11:52:01:99:dd:94:24:
                    e9:20:e1:fb:43:cc:aa:b9:72:2f:6f:dc:29:ac:0a:
                    0b:9b:65:ca:cf:1a:40:65:02:14:a7:5a:36:c1:e1:
                    dc:a6:0c:44:83:b5:d1:bc:39:59:4f:e8:17:6e:a4:
                    25:65:aa:62:0c:86:8d:fd:74:74:5b:6d:3c:2d:fb:
                    7f:c6:f3:cc:0e:51:8e:83:e8:f8:e4:09:93:60:f0:
                    24:e5:32:c7:f7:02:50:39:5e:60:8b:05:6c:f8:fa:
                    cd:04:9e:a8:25:66:0d:d7:2d:2c:1c:37:f9:41:25:
                    45:a4:ab:9b:7d:e4:70:e0:8d:0c:0b:dc:47:d1:0d:
                    d6:d4:23:a0:7b:ab:c3:53:e2:5e:9c:cb:5e:e5:75:
                    9a:3d:18:d4:39:c3:1f:74:96:68:ee:0e:24:94:bc:
                    aa:ca:ee:a0:f6:55:b1:ec:8e:1a:ac:60:8e:eb:d2:
                    b0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:E5:BC:40:3D:FD:7B:11:DB:E0:DF:23:AD:FB:0A:0C:FE:55:AE:A2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9eSRArVchrLxruBXFLWvUZYpmbrZyXkmkVWgh9AZ2V4W/0/57E5BC403DFD7B11DBE0DF23ADFB0A0CFE55AEA2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.0.0/22
                IPv6:
                  2804:54b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268665

    Signature Algorithm: sha256WithRSAEncryption
         27:66:50:fc:78:dd:e4:39:72:29:c9:b7:13:89:c6:37:e8:2d:
         0c:12:51:2a:4b:21:eb:cb:43:1b:c4:56:9d:ae:42:3c:64:96:
         d1:c4:13:a1:42:df:43:b8:f1:0c:b4:35:ca:11:02:d9:b6:72:
         89:c6:a5:ba:d9:b6:a0:a5:61:9d:5a:8f:28:fa:5e:e3:84:ce:
         9b:3c:d4:97:7c:d3:d7:55:fe:09:d0:e5:e1:fe:cf:dc:9c:00:
         41:02:75:05:13:94:a0:fe:18:1a:60:d6:bd:10:e8:6c:03:41:
         4b:82:36:ec:4b:40:19:df:a4:68:a7:4e:45:19:d0:ea:74:d0:
         b2:e2:f7:6b:e8:49:af:e9:73:e3:f1:5a:26:ce:e5:d7:29:22:
         67:af:ab:5a:48:7f:84:95:6a:4b:9a:fa:17:65:24:31:ab:10:
         f7:21:0f:55:08:35:88:b0:2d:4e:23:79:7e:0e:e6:99:2f:b7:
         07:91:0b:e3:70:05:9a:7f:11:be:81:40:e0:61:81:2d:42:4e:
         8b:7b:94:c6:e4:cd:57:33:bb:ba:69:aa:d8:ef:f1:3f:a8:01:
         5d:2d:f2:a2:5d:f8:bb:ea:05:bd:70:27:59:62:7a:87:9d:47:
         81:e1:da:13:7b:b5:1b:9b:6f:d3:d0:61:fc:25:e1:25:64:cd:
         54:b0:6b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:19:09 2025 by rpki-client