Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5B30401B7A78E4981FFCF1713F815FEFB784222E.cer
File:                     5B30401B7A78E4981FFCF1713F815FEFB784222E.cer (raw, json)
Hash identifier:          sV0m+th5TK/0TCXqAYbAmQS5m+O4qezPW7FG5sqsSLs=
Subject key identifier:   5B:30:40:1B:7A:78:E4:98:1F:FC:F1:71:3F:81:5F:EF:B7:84:22:2E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       37AD904C072038BC7DF21A04A1ED5CD77761C5D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7h3T8795y6nSRtVumAU3JnZsBbhq7C7yQqPpgR7Tg7zY/0/5B30401B7A78E4981FFCF1713F815FEFB784222E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7h3T8795y6nSRtVumAU3JnZsBbhq7C7yQqPpgR7Tg7zY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 31 Jan 2025 18:56:12 +0000
Certificate not after:    Fri 30 Jan 2026 19:01:12 +0000
Subordinate resources:    AS: 267161
                          IP: 45.230.136.0/22
                          IP: 2804:490c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ad:90:4c:07:20:38:bc:7d:f2:1a:04:a1:ed:5c:d7:77:61:c5:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 31 18:56:12 2025 GMT
            Not After : Jan 30 19:01:12 2026 GMT
        Subject: CN=5B30401B7A78E4981FFCF1713F815FEFB784222E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:78:98:c8:ae:d8:23:2e:53:0a:55:47:47:c2:
                    d1:e8:9f:31:e3:9e:62:03:d3:75:dc:0f:39:ee:91:
                    41:de:bf:62:7b:48:a4:71:21:af:e3:f7:76:0b:d9:
                    d0:b8:f8:1c:cc:16:84:10:8e:a8:71:c2:58:99:50:
                    83:f1:57:63:2c:09:87:af:ff:d8:af:07:61:1e:43:
                    74:19:6e:87:5c:fd:ca:56:25:54:bf:17:6d:69:3b:
                    9a:ec:64:31:d6:4c:6a:30:29:7e:f6:55:ba:00:bd:
                    0b:54:48:4f:a4:b5:7a:f5:de:3b:7d:75:e8:90:9b:
                    e3:a7:36:8a:b0:de:73:c9:cc:2b:6c:50:d8:e3:4d:
                    55:76:ed:d1:77:05:6f:22:13:df:c2:6a:83:8b:96:
                    91:44:99:bb:1c:31:89:36:bb:79:1b:12:41:b3:5a:
                    76:26:33:63:25:58:56:88:f6:18:4c:22:e1:bb:fd:
                    c4:c6:02:af:47:57:c2:17:84:f5:34:dc:28:34:8a:
                    8c:ec:24:44:cc:12:ab:fd:ca:d1:0f:fb:78:85:55:
                    09:e0:e0:e4:17:fa:17:85:ae:7e:8d:e5:53:a7:5b:
                    f2:eb:a4:b4:5b:2c:95:22:44:4d:35:f1:9e:76:08:
                    b8:11:22:7b:3e:06:04:9a:01:f5:be:00:ef:af:68:
                    db:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5B:30:40:1B:7A:78:E4:98:1F:FC:F1:71:3F:81:5F:EF:B7:84:22:2E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7h3T8795y6nSRtVumAU3JnZsBbhq7C7yQqPpgR7Tg7zY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7h3T8795y6nSRtVumAU3JnZsBbhq7C7yQqPpgR7Tg7zY/0/5B30401B7A78E4981FFCF1713F815FEFB784222E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.136.0/22
                IPv6:
                  2804:490c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267161

    Signature Algorithm: sha256WithRSAEncryption
         0c:a7:11:9c:7d:76:47:3c:0c:c6:aa:75:c6:13:d1:c5:ec:44:
         2b:44:cb:0f:37:2d:74:a3:2c:b8:f6:e8:e2:a4:a3:10:e8:af:
         71:73:c2:19:da:37:61:fa:15:f4:7b:1e:9e:f9:b4:e5:e7:11:
         ed:45:ec:a1:92:fd:a6:36:81:bc:d7:4a:07:19:d1:29:d6:fd:
         ef:ac:04:38:c5:25:12:9a:37:48:00:4e:b4:d1:e1:b5:78:e3:
         bd:75:98:16:23:41:5c:45:90:de:0a:bc:48:04:58:2d:6b:23:
         28:c0:b6:75:4c:e2:34:5a:20:ae:21:20:51:5f:e5:f5:c9:3b:
         df:0f:d0:c1:95:9e:de:67:18:15:64:e1:9c:02:cc:98:75:fc:
         9b:30:ae:af:a2:59:89:03:fc:67:04:5b:31:f9:d1:45:42:7e:
         c2:20:19:93:e3:7b:c7:eb:81:78:72:1d:ef:84:41:d7:ff:a3:
         8e:f2:33:be:bd:0b:4c:4c:e8:1e:ef:a0:3b:dd:24:3f:2e:6c:
         11:69:f5:49:7b:00:fc:15:c3:2c:b2:a5:26:f6:5a:ba:89:e9:
         5f:5a:e4:b1:d1:0d:05:ed:ea:f1:a8:08:20:72:e5:a9:e6:64:
         03:96:7a:45:c9:e8:46:bb:94:a1:16:bf:05:08:4f:06:33:e1:
         35:ff:3e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:00 2025 by rpki-client