Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/59C244038ED88595EC22E2B1EA066AE712A58F17.cer
File:                     59C244038ED88595EC22E2B1EA066AE712A58F17.cer (raw, json)
Hash identifier:          FU2PmMAE1nRTddFIRrA19QphrkPGDpdTrWNtCA43spc=
Subject key identifier:   59:C2:44:03:8E:D8:85:95:EC:22:E2:B1:EA:06:6A:E7:12:A5:8F:17
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       53560C7A0418F7CD069D05DB5A3E7F2EDABF242F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/1/59C244038ED88595EC22E2B1EA066AE712A58F17.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 09:15:35 +0000
Certificate not after:    Fri 06 Mar 2026 09:20:35 +0000
Subordinate resources:    AS: 268245
                          IP: 45.236.204.0/22
                          IP: 2804:4e30::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:56:0c:7a:04:18:f7:cd:06:9d:05:db:5a:3e:7f:2e:da:bf:24:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 09:15:35 2025 GMT
            Not After : Mar  6 09:20:35 2026 GMT
        Subject: CN=59C244038ED88595EC22E2B1EA066AE712A58F17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2e:b9:14:ee:bd:d6:4a:9b:35:57:d8:59:3d:
                    57:c6:f3:e5:08:95:82:7c:7e:1c:a5:61:11:f3:7e:
                    16:93:47:a5:ad:6d:95:95:fd:b8:45:92:81:77:dd:
                    12:2c:bc:2e:b7:6b:94:29:61:23:95:ad:f9:2c:60:
                    f3:f5:96:df:00:5f:fc:f6:a7:02:91:f4:c6:30:a2:
                    07:06:44:ef:2b:d5:c0:38:10:0b:48:16:1c:be:ab:
                    23:45:c6:cd:45:83:e6:ae:b2:91:b6:de:ba:4d:86:
                    fe:bb:64:c2:bc:19:95:54:5d:91:2a:6f:7e:67:d0:
                    fe:8a:99:03:f7:52:be:9f:22:75:39:0f:bc:c3:70:
                    0a:83:12:05:2b:0e:c0:1e:66:3b:70:96:28:09:f4:
                    84:93:a3:c8:94:7f:c3:6c:73:c8:d5:1c:c2:84:34:
                    07:52:8e:92:5c:12:75:87:18:7a:68:df:90:77:10:
                    49:c1:cd:64:d2:1a:49:3d:e7:08:a3:38:65:33:77:
                    be:bd:36:f9:c2:bb:03:ea:54:b0:6e:b1:6b:d2:c9:
                    8d:8e:3d:3c:6d:52:f6:29:30:ad:1b:1d:07:38:3b:
                    c9:74:eb:84:9a:10:c6:41:0e:0c:ed:6d:83:31:cd:
                    5b:05:77:c5:12:46:81:9e:33:ce:98:ab:ba:3f:0a:
                    aa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                59:C2:44:03:8E:D8:85:95:EC:22:E2:B1:EA:06:6A:E7:12:A5:8F:17
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hgt4jWNLaeDGCmnLrn6NKycdjd6dVJtVX8HuN8hyZAza/1/59C244038ED88595EC22E2B1EA066AE712A58F17.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.204.0/22
                IPv6:
                  2804:4e30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268245

    Signature Algorithm: sha256WithRSAEncryption
         ab:2c:c8:24:f0:de:40:59:80:5b:82:64:cd:d0:99:bc:0a:cb:
         33:6b:e1:c2:45:08:6c:27:88:f7:9f:8a:3c:e9:d7:87:68:33:
         eb:eb:94:bb:5f:78:68:92:9f:29:79:e1:31:a2:d3:fa:12:9b:
         92:39:8a:f5:8f:97:d2:07:3c:56:d9:0f:b8:db:f7:86:0c:dc:
         62:b6:ea:5f:63:48:24:cd:a3:90:23:d8:62:5c:17:9e:27:5e:
         b0:d3:d1:e9:02:a5:d3:85:d5:94:c0:a6:98:b5:34:80:86:10:
         35:23:99:e0:38:52:9d:38:32:95:d2:2f:24:e3:be:66:7b:05:
         6b:45:45:b9:15:c7:11:48:07:2f:c6:da:50:d6:6c:a9:7f:77:
         be:78:22:a5:20:a8:f4:14:0b:d4:4d:08:4c:2a:fc:e6:0b:b6:
         1c:73:16:80:b1:fb:4e:33:cc:ec:e1:ca:4d:a3:fd:53:d8:2d:
         be:bc:75:f0:cf:10:bf:2a:ca:ea:49:8c:19:02:5e:91:18:13:
         9d:4a:20:49:91:58:24:d1:d2:05:c3:c3:1a:67:7b:42:06:f2:
         a2:c3:fc:17:9d:5f:3e:cc:80:85:8b:ce:dc:1c:1a:45:92:86:
         e6:27:51:aa:4a:c4:02:cc:bc:d3:23:44:ee:8a:b9:eb:ea:75:
         b0:aa:2f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:00:57 2025 by rpki-client