Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5AD2B67D62031233884B53819B977DA9CF164DF9.cer
File:                     5AD2B67D62031233884B53819B977DA9CF164DF9.cer (raw, json)
Hash identifier:          c79abq1lYh7YNi6S6jjSoAxwI8TNzQDzvfsoXMUUDyk=
Subject key identifier:   5A:D2:B6:7D:62:03:12:33:88:4B:53:81:9B:97:7D:A9:CF:16:4D:F9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6831CDD0434769E4EBA8F4DB0689E254BE546869
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/3/5AD2B67D62031233884B53819B977DA9CF164DF9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/3/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Dec 2024 14:27:42 +0000
Certificate not after:    Mon 22 Dec 2025 14:32:42 +0000
Subordinate resources:    AS: 28202
                          IP: 177.44.0.0/17
                          IP: 177.130.128.0/18
                          IP: 179.189.160.0/19
                          IP: 186.216.64.0/18
                          IP: 187.44.0.0/18
                          IP: 187.120.64.0/18
                          IP: 189.91.0.0/19
                          IP: 191.53.0.0/16
                          IP: 191.240.0.0/17
                          IP: 2804:87c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:31:cd:d0:43:47:69:e4:eb:a8:f4:db:06:89:e2:54:be:54:68:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 23 14:27:42 2024 GMT
            Not After : Dec 22 14:32:42 2025 GMT
        Subject: CN=5AD2B67D62031233884B53819B977DA9CF164DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:eb:ba:ad:d8:d2:6e:3a:9b:e3:f0:27:c0:5f:
                    eb:f4:0d:44:9c:35:32:3d:f8:e4:a1:30:08:18:ac:
                    5c:20:b4:e0:ac:fc:79:b8:20:34:04:c1:28:78:9d:
                    4c:53:76:47:9d:73:af:1f:d3:ee:f8:ab:d3:86:97:
                    b7:fe:10:0e:77:1c:07:bf:10:0f:1d:d4:0a:17:14:
                    3c:8f:12:c9:9a:6d:77:06:74:c6:25:84:73:45:8c:
                    6c:d0:e8:67:36:15:be:0b:96:c1:b6:5d:f1:28:6a:
                    b3:ba:2f:9e:af:ed:48:e9:f1:a4:9b:c0:7f:c7:80:
                    44:4b:73:44:e7:6a:60:45:ec:5b:a8:22:e2:83:7e:
                    6a:8c:22:5c:78:67:5b:cf:27:d0:1c:08:e1:6d:e0:
                    12:87:89:3f:ba:fa:54:6c:d2:ce:cb:73:ba:73:9f:
                    fd:d6:31:ec:4d:81:fd:c9:d1:7f:82:cd:5e:68:28:
                    e6:a3:eb:b1:fc:75:4a:61:35:e4:07:91:2a:76:a7:
                    39:5d:2b:9d:cb:1f:92:5f:2b:20:72:83:95:90:70:
                    66:ab:a2:eb:14:0e:0a:d4:21:3e:9c:f0:87:dd:39:
                    a3:5d:f1:f2:1c:dd:45:04:50:34:bb:e4:b2:c5:47:
                    38:8b:c8:3e:49:62:41:a0:a3:18:eb:0e:2a:08:fd:
                    bc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5A:D2:B6:7D:62:03:12:33:88:4B:53:81:9B:97:7D:A9:CF:16:4D:F9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/3/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4dP7NF1Bd3vAzGDcj7vmQVW9fkrAQ7PymP9uxM8BMUWM/3/5AD2B67D62031233884B53819B977DA9CF164DF9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.0.0/17
                  177.130.128.0/18
                  179.189.160.0/19
                  186.216.64.0/18
                  187.44.0.0/18
                  187.120.64.0/18
                  189.91.0.0/19
                  191.53.0.0/16
                  191.240.0.0/17
                IPv6:
                  2804:87c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28202

    Signature Algorithm: sha256WithRSAEncryption
         84:ee:ad:4a:0d:79:30:a1:fe:86:a1:d2:c2:72:07:d7:7c:f3:
         99:fc:c1:5c:09:bf:c9:2f:68:a9:4c:80:e0:f1:b5:1f:a7:37:
         a1:77:81:2c:10:db:bc:5b:12:36:3f:cc:b7:b8:96:99:8d:12:
         e3:59:66:38:19:27:91:4c:ff:1d:8e:dc:0d:44:a8:5d:1e:4d:
         fa:5d:fc:b6:33:bb:a3:79:58:fb:2c:4b:65:04:37:1f:a8:8e:
         08:98:58:fb:9d:1b:1f:94:a4:d7:6f:1f:25:14:3e:f1:c2:b8:
         34:a4:80:c3:e1:93:d9:f8:0c:ac:83:41:b3:c5:44:a0:be:ef:
         36:45:2a:40:fe:73:3c:1a:21:19:c7:c9:24:ee:93:de:ae:d8:
         db:cb:5e:c7:dc:16:85:5b:dd:9a:f0:2a:11:34:3b:b1:8e:24:
         aa:1d:7e:ee:05:ce:ba:22:94:72:62:df:97:af:c1:26:b8:ac:
         23:ce:3b:c5:ba:0d:df:5a:45:3c:43:8e:9f:9c:b5:f1:7f:e1:
         69:fe:75:ba:2a:cd:4f:d8:1a:72:31:b6:8e:83:e0:26:28:7d:
         d9:f3:4a:9f:e0:f9:6f:8c:3b:fd:9d:6c:d6:12:32:ab:59:cf:
         5f:2b:bf:f6:35:6c:33:e9:72:9c:d2:7c:56:a7:1d:b8:69:35:
         59:77:ec:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:12:05 2025 by rpki-client