Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5B02344955F090AA9E94D77E6A51E3ED2C7509E6.cer
File:                     5B02344955F090AA9E94D77E6A51E3ED2C7509E6.cer (raw, json)
Hash identifier:          5uzxB2SKLhg4zkd41ySaKoANPssDBsnCSVs950fvOfs=
Subject key identifier:   5B:02:34:49:55:F0:90:AA:9E:94:D7:7E:6A:51:E3:ED:2C:75:09:E6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       573AE1D2E7A425E4E33CB8F8F224102455CCC65F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/0/5B02344955F090AA9E94D77E6A51E3ED2C7509E6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 12:25:25 +0000
Certificate not after:    Wed 04 Mar 2026 12:30:25 +0000
Subordinate resources:    AS: 272414
                          IP: 2804:80d0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3a:e1:d2:e7:a4:25:e4:e3:3c:b8:f8:f2:24:10:24:55:cc:c6:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 12:25:25 2025 GMT
            Not After : Mar  4 12:30:25 2026 GMT
        Subject: CN=5B02344955F090AA9E94D77E6A51E3ED2C7509E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:33:0b:bb:62:b5:33:46:5a:f0:5c:c8:89:41:
                    60:de:7c:27:94:93:0f:ac:d5:64:ad:d6:71:4b:fa:
                    66:cb:b7:5b:eb:23:20:dd:9b:8a:8e:03:c8:38:32:
                    d5:32:aa:a2:5c:37:18:bb:f5:73:8f:1d:a0:2e:b5:
                    ea:af:3c:75:7a:bd:56:49:94:2c:88:3f:31:ef:19:
                    3c:84:f6:aa:e1:2c:82:0c:0e:d5:e5:5f:db:36:6a:
                    be:61:95:8e:3a:46:57:4e:a1:6b:af:b7:8e:45:6b:
                    e0:67:13:94:8d:91:13:86:e5:e2:e8:f3:e0:10:c9:
                    b3:c4:8e:2b:76:f9:b0:85:d5:fc:e3:bf:21:9f:a0:
                    59:2e:3a:cd:a7:ce:dc:31:4d:b1:27:4f:d6:8f:f8:
                    45:e3:58:69:72:dc:6f:68:ce:65:f4:ed:46:ab:1e:
                    39:c7:3a:a8:90:32:8c:b8:39:80:7e:2d:53:ab:78:
                    33:77:5f:ba:89:3c:76:39:2c:27:d3:19:cc:52:be:
                    22:1b:7a:27:ad:33:42:4b:7e:35:d3:46:d0:c7:b5:
                    9f:02:a2:be:97:cc:a7:07:db:ca:09:5c:0e:ae:5e:
                    3b:b1:b9:12:fc:7a:e0:45:e8:80:b7:57:75:3d:b3:
                    d1:11:36:a3:e4:f8:a2:4c:a0:68:9c:ba:c7:06:25:
                    dd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5B:02:34:49:55:F0:90:AA:9E:94:D7:7E:6A:51:E3:ED:2C:75:09:E6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CVViHahprc4XodXv4zS6kqjBVX1H6KxGDd2AGxGqoZZK/0/5B02344955F090AA9E94D77E6A51E3ED2C7509E6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:80d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272414

    Signature Algorithm: sha256WithRSAEncryption
         2b:ef:a7:47:48:c0:42:2e:d4:e1:13:b5:07:cc:26:b5:1d:1b:
         36:34:da:cd:e4:2a:b4:a1:4a:bd:6f:b4:69:64:4f:d0:5c:b9:
         0d:a3:26:12:2d:6c:bb:71:3c:59:e2:0e:6c:79:3d:f7:ef:c8:
         09:dd:b0:2e:f1:2f:14:38:33:c4:4b:32:42:2c:37:e1:f2:19:
         27:33:a8:5a:e7:7f:a3:f7:53:4f:0a:24:46:d8:07:19:df:dc:
         b9:a4:d1:5c:dd:ac:9f:5f:db:07:4a:9e:97:bb:b5:1d:05:ad:
         f4:64:6f:38:4e:1f:d8:a3:86:88:18:d5:6c:fc:40:b6:a0:0b:
         07:42:ff:c5:58:1f:0e:cf:9f:36:fe:30:5c:e8:8d:c5:87:76:
         72:df:cd:95:5a:85:7b:14:98:eb:26:41:fa:7b:ab:d2:d3:a5:
         ce:e4:1b:2a:ec:34:b2:b8:f5:f9:65:84:0c:a5:9b:66:79:04:
         e4:7c:dd:88:5b:35:27:4f:8a:a9:34:c8:23:53:2e:18:bb:32:
         39:2a:52:ff:d9:c7:f0:a4:10:73:ea:2d:75:d2:be:e1:d9:63:
         70:a3:25:df:aa:27:31:1c:11:04:03:9b:5d:c6:16:6d:1f:de:
         68:9c:20:92:f6:44:4c:a6:65:00:5d:ea:6e:4a:61:42:6e:4b:
         a6:a9:45:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:55:21 2025 by rpki-client