Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/68896B9A803F401F71FCF845C4E94131201E4D39.cer
File:                     68896B9A803F401F71FCF845C4E94131201E4D39.cer (raw, json)
Hash identifier:          VaNmqHvBAFNq7fSja0fUNiCBSFssUz3GbwUoP4Lr6Pc=
Subject key identifier:   68:89:6B:9A:80:3F:40:1F:71:FC:F8:45:C4:E9:41:31:20:1E:4D:39
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       42DCB4C5A2557BFF949DE4F673614530D45F09BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/68896B9A803F401F71FCF845C4E94131201E4D39.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Feb 2025 18:22:46 +0000
Certificate not after:    Thu 12 Feb 2026 18:27:46 +0000
Subordinate resources:    AS: 262899
                          IP: 45.165.128.0/22
                          IP: 2804:554c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:dc:b4:c5:a2:55:7b:ff:94:9d:e4:f6:73:61:45:30:d4:5f:09:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 13 18:22:46 2025 GMT
            Not After : Feb 12 18:27:46 2026 GMT
        Subject: CN=68896B9A803F401F71FCF845C4E94131201E4D39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4a:7a:10:80:f1:98:1a:ba:11:ad:5e:3c:55:
                    7b:b9:f8:cd:f2:78:b6:d7:33:4f:c6:03:6e:5c:c4:
                    15:82:b4:10:92:f2:ad:43:dd:22:6d:ed:b7:b8:e5:
                    3f:bc:99:cc:50:93:99:0d:03:9e:c8:0c:5e:7d:e7:
                    ca:7d:9d:1c:a3:a4:bc:9c:02:84:d7:8b:46:f2:a3:
                    d4:1c:9b:91:b0:11:78:a4:63:98:3b:c5:b6:eb:72:
                    f9:18:93:39:7c:17:e8:71:70:b3:79:cb:10:7c:6e:
                    4b:da:78:52:21:59:74:08:46:26:ea:a9:2e:36:bc:
                    f2:99:a4:43:31:b0:40:f4:ad:be:82:68:e1:45:f2:
                    bd:a4:a1:0b:dd:0a:ee:74:08:65:7f:f6:53:63:eb:
                    eb:ba:6c:4d:28:e7:e4:ed:b7:dc:54:cb:bd:9c:9c:
                    c8:9f:ec:e8:21:5b:6c:6b:08:f4:62:75:c0:55:60:
                    e2:c7:81:2f:d1:68:68:6d:8b:24:5f:46:08:7e:1e:
                    56:6e:6a:e8:a7:b8:76:ea:a3:25:4f:c4:89:7b:ca:
                    43:30:6f:9e:57:1b:0b:25:45:38:7d:7b:4a:a1:dc:
                    86:19:05:d4:2c:b1:0d:9e:1f:6a:d4:d5:6c:4d:ca:
                    87:1a:86:ce:6c:87:17:90:8b:eb:5a:e6:03:5a:58:
                    2f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                68:89:6B:9A:80:3F:40:1F:71:FC:F8:45:C4:E9:41:31:20:1E:4D:39
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/68896B9A803F401F71FCF845C4E94131201E4D39.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.128.0/22
                IPv6:
                  2804:554c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262899

    Signature Algorithm: sha256WithRSAEncryption
         2f:f2:89:7c:71:82:87:3f:a5:db:46:c7:a8:68:74:df:ed:f4:
         b5:a3:b5:ed:01:3e:63:8b:dc:06:d4:f9:75:eb:55:c6:61:d3:
         69:47:ba:85:2d:4a:3f:9b:b9:97:a7:dc:bf:48:f5:31:dc:7a:
         e2:f6:7d:d6:3f:54:ba:da:b4:55:b3:c1:08:ad:f8:62:9a:98:
         8c:04:8b:a0:ea:23:38:a8:76:e9:bf:17:2c:ce:c3:5b:0a:28:
         0e:87:d0:b2:62:cf:90:3e:c8:5f:5c:43:54:ec:13:31:61:74:
         cf:fb:85:6e:f1:04:19:c4:11:1f:f0:f9:10:12:a8:87:5f:2d:
         6b:d4:8b:00:7e:54:e5:df:56:5b:bb:00:d8:97:b7:e6:45:a0:
         b9:c8:2a:f3:d0:13:5a:54:3d:5e:98:4f:e6:36:a2:f0:b0:70:
         99:b0:dd:f4:cb:13:b5:a5:48:04:83:cd:80:f7:3f:51:d4:68:
         56:14:7c:c7:62:d4:c9:89:ec:5b:6a:53:4d:47:7b:6b:81:2f:
         b2:d1:7d:c3:69:ed:5b:37:c6:dc:0a:fe:2b:99:f0:ea:1d:15:
         3e:ac:ad:49:af:4b:d1:6d:c6:33:d5:25:1c:f2:c0:94:b7:7c:
         7b:20:1b:ab:1f:cd:dd:85:2f:36:ac:fb:78:14:c2:a5:9a:6d:
         c5:c4:93:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:39 2025 by rpki-client