Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/5D8A1B37681AFE732ED6AC89D4689CCD1E07A56D.cer
File:                     5D8A1B37681AFE732ED6AC89D4689CCD1E07A56D.cer (raw, json)
Hash identifier:          cIueW3XZGZTFNy8xfBhfBKDw+XauL16VS2Gm4+cljlQ=
Subject key identifier:   5D:8A:1B:37:68:1A:FE:73:2E:D6:AC:89:D4:68:9C:CD:1E:07:A5:6D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6CA9572716AA554ED18C588862EECEA924780688
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/1/5D8A1B37681AFE732ED6AC89D4689CCD1E07A56D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:21 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:21 +0000
Subordinate resources:    AS: 263359
                          IP: 191.37.128.0/21
                          IP: 2804:14ec::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a9:57:27:16:aa:55:4e:d1:8c:58:88:62:ee:ce:a9:24:78:06:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:21 2025 GMT
            Not After : Mar  4 18:40:21 2026 GMT
        Subject: CN=5D8A1B37681AFE732ED6AC89D4689CCD1E07A56D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0d:e4:f0:64:47:d0:55:d1:19:16:b2:25:19:
                    05:10:7b:21:eb:3f:46:b7:6e:a2:99:10:e2:a8:37:
                    f6:d3:c3:f0:61:19:b5:0b:2b:a6:5d:a9:65:ac:f2:
                    1c:84:e1:d4:45:3e:ac:5d:8d:e8:ee:ff:f0:c9:a2:
                    f6:36:3a:98:74:15:7b:e0:69:7b:72:c3:34:de:2d:
                    00:ed:77:8d:f6:ec:a5:cc:a2:03:1c:16:e9:bb:fa:
                    88:1d:90:10:a6:e1:c0:a7:a6:29:ab:28:e0:e4:4f:
                    64:8f:75:a3:0d:47:cb:4e:ff:0e:c4:86:27:fd:67:
                    21:32:a6:5e:b5:42:36:a1:ab:4f:fa:c0:5a:46:3a:
                    8a:a4:49:cb:7b:bd:f6:45:d1:84:2d:58:d9:38:67:
                    ea:1e:34:5a:05:b2:92:6d:d1:bb:77:9b:b9:84:9f:
                    59:0a:fb:12:5f:f9:dc:92:ce:4c:d9:00:37:a3:3c:
                    e5:8b:dd:d3:3e:82:fb:52:81:67:4b:c0:95:e8:b6:
                    e1:52:01:e3:9e:48:6a:fc:51:18:68:2d:7c:65:5a:
                    b4:6f:90:10:bc:15:37:75:91:e3:9b:10:46:0e:b3:
                    6c:b4:36:7a:4c:88:65:cb:96:dc:a2:6d:c5:f5:81:
                    96:92:60:07:83:2e:f9:10:07:8b:af:4a:df:bb:e7:
                    b7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5D:8A:1B:37:68:1A:FE:73:2E:D6:AC:89:D4:68:9C:CD:1E:07:A5:6D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/1/5D8A1B37681AFE732ED6AC89D4689CCD1E07A56D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.128.0/21
                IPv6:
                  2804:14ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263359

    Signature Algorithm: sha256WithRSAEncryption
         75:86:0d:f1:1f:32:9c:32:4f:4f:f7:a2:28:39:10:43:d6:b9:
         18:0a:19:52:33:26:25:6f:f8:34:f5:b1:8e:fa:9b:fa:d0:93:
         71:a7:b6:9a:cf:e4:84:61:0f:4d:22:e5:03:62:51:70:7b:39:
         e4:0c:68:6a:5f:f7:4c:b9:d3:4a:d9:35:8e:0d:ad:55:78:73:
         b5:a8:76:73:cc:1d:c7:63:ec:d3:e5:14:96:fa:2f:88:4f:2d:
         04:88:d8:24:5c:5a:e4:1a:86:37:80:27:94:3f:80:01:e2:ad:
         ca:33:a9:73:99:56:46:7e:b8:d2:1e:78:80:40:35:07:f9:21:
         79:4d:fa:a5:7a:b4:9f:0d:2c:da:f9:38:c3:cf:89:dc:c6:ae:
         15:8f:be:b6:60:0d:cc:69:b1:8b:6f:86:e3:4d:cc:84:44:c4:
         e4:78:fc:b0:ec:84:a3:24:f7:97:d9:c4:87:2b:ae:66:d8:9b:
         71:c9:02:01:71:91:19:11:11:53:b6:93:b0:85:b8:34:9a:70:
         ce:8f:9a:87:1d:9e:9f:79:b3:6d:fd:c9:8e:48:46:34:86:b5:
         f0:a9:4b:6d:88:81:77:65:fa:f1:55:67:3a:aa:ab:f3:d3:a1:
         31:e0:d7:cc:dc:e4:ff:88:e6:1d:f8:d7:da:f2:27:c1:95:4e:
         b2:6e:e5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:55:25 2025 by rpki-client