Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/64024652CD71CE0D3988DAA5555337E88EA6AE45.cer
File:                     64024652CD71CE0D3988DAA5555337E88EA6AE45.cer (raw, json)
Hash identifier:          V+auOSrCaa9S3iYgVGg1aPCDGWAqGCZObccaKWsa68g=
Subject key identifier:   64:02:46:52:CD:71:CE:0D:39:88:DA:A5:55:53:37:E8:8E:A6:AE:45
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5A04E52FC776EF51AB20CA6C00974FDD45D81F2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/64024652CD71CE0D3988DAA5555337E88EA6AE45.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Jan 2025 11:39:50 +0000
Certificate not after:    Fri 16 Jan 2026 11:44:50 +0000
Subordinate resources:    AS: 266466
                          IP: 170.83.16.0/22
                          IP: 2804:3844::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:04:e5:2f:c7:76:ef:51:ab:20:ca:6c:00:97:4f:dd:45:d8:1f:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 17 11:39:50 2025 GMT
            Not After : Jan 16 11:44:50 2026 GMT
        Subject: CN=64024652CD71CE0D3988DAA5555337E88EA6AE45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a9:cf:0a:0f:04:b6:4d:0c:26:e6:7f:28:bc:
                    89:7e:3d:2f:c7:27:cb:b7:fc:af:0a:1a:5b:98:ea:
                    ea:49:86:50:00:84:ed:ac:93:af:15:33:28:b6:5a:
                    30:9e:f2:e9:30:59:7a:d6:28:c8:29:cd:0e:c6:f1:
                    38:cb:ec:50:06:31:b3:1a:3f:da:57:47:10:73:ff:
                    d0:c3:aa:2d:30:71:ab:cf:d6:e0:65:a5:5d:51:59:
                    11:bc:4b:50:43:af:cb:e1:84:22:17:92:f5:d3:5b:
                    36:78:6e:18:df:da:a0:c4:2d:e4:60:d3:72:9c:57:
                    1a:62:af:bd:a7:e6:ef:e8:92:5b:e5:f7:18:95:c9:
                    cd:0a:4b:70:be:30:4a:a8:37:7e:6a:73:64:a1:89:
                    a8:55:d3:36:60:5f:7a:56:8b:b3:17:84:e3:04:6f:
                    8a:52:eb:7f:bf:55:cc:c7:fb:22:5a:a7:f8:95:a5:
                    4b:64:0e:d4:b3:22:84:84:c5:f2:d8:ae:a5:a1:a1:
                    c2:99:e2:2c:be:f6:41:03:66:a1:44:a7:e2:c7:a8:
                    d9:75:22:61:7e:34:dd:1a:80:37:38:be:b0:50:b7:
                    7a:9a:54:0b:3c:d3:a5:fb:09:56:d0:4c:01:64:7d:
                    6a:fa:a5:42:bc:6a:6d:e3:d4:2e:48:b0:5d:59:14:
                    a9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:02:46:52:CD:71:CE:0D:39:88:DA:A5:55:53:37:E8:8E:A6:AE:45
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/64024652CD71CE0D3988DAA5555337E88EA6AE45.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.16.0/22
                IPv6:
                  2804:3844::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266466

    Signature Algorithm: sha256WithRSAEncryption
         a1:1a:0b:77:fb:c0:01:ec:e8:3d:04:ab:a8:ca:7f:6e:49:c8:
         58:b2:73:3a:e5:3e:d4:58:c0:97:15:16:2f:40:3c:9c:dd:0f:
         83:c4:bb:49:d1:11:fd:b1:ee:2b:b8:7e:8b:7f:54:b2:da:74:
         15:fd:0e:e3:8c:d6:ce:da:07:65:4d:a8:1a:53:d2:6c:17:51:
         18:59:79:0c:87:67:2a:a4:68:f8:30:ad:67:58:26:c8:df:59:
         2b:21:c1:e6:ea:2f:e5:18:5b:92:d1:38:15:20:f1:2c:9f:5c:
         dc:c3:79:6b:57:23:fd:48:cc:12:26:ef:d0:1f:df:e7:5a:59:
         92:5a:ba:94:c6:f7:3f:0c:6f:74:93:00:50:9a:87:d3:6f:3c:
         84:5c:b3:70:41:53:15:d3:63:60:88:78:65:d0:f1:cd:2e:01:
         15:97:c3:af:63:6b:32:9c:98:14:d5:f2:6d:40:5a:94:e4:a3:
         a3:ce:5e:c7:61:cb:12:00:5b:07:af:85:97:16:e5:2f:b7:db:
         fa:fd:0f:7c:87:32:29:39:01:09:a9:11:99:0e:f3:dc:46:6a:
         23:6e:c8:d0:79:b4:05:04:52:e7:bf:18:6d:21:1a:84:3e:cb:
         c1:ce:65:b5:25:53:2b:b0:22:05:35:ef:78:63:75:40:08:85:
         3e:be:9b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:13:54 2025 by rpki-client