Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/70178983C4174154F25B2BDB5C4454AE61F25EF8.cer
File:                     70178983C4174154F25B2BDB5C4454AE61F25EF8.cer (raw, json)
Hash identifier:          naYNc122x3caz8YLqgn+P0AByHHdfI8gB6zeBd1L38o=
Subject key identifier:   70:17:89:83:C4:17:41:54:F2:5B:2B:DB:5C:44:54:AE:61:F2:5E:F8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2F838E00EE895D7168051A1C836137203E562B2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/1/70178983C4174154F25B2BDB5C4454AE61F25EF8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 22:34:24 +0000
Certificate not after:    Thu 05 Mar 2026 22:39:24 +0000
Subordinate resources:    AS: 266134
                          IP: 45.6.124.0/22
                          IP: 2804:3b30::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:83:8e:00:ee:89:5d:71:68:05:1a:1c:83:61:37:20:3e:56:2b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 22:34:24 2025 GMT
            Not After : Mar  5 22:39:24 2026 GMT
        Subject: CN=70178983C4174154F25B2BDB5C4454AE61F25EF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3f:aa:43:cd:19:a1:56:98:2e:e9:89:2e:75:
                    1a:a1:fb:21:ae:0d:ea:0d:b6:85:a9:64:a8:59:df:
                    63:bb:30:af:24:59:af:a8:af:f7:48:d2:0f:34:8d:
                    92:28:6f:e8:69:5c:59:89:1c:7e:4f:5e:4b:0e:86:
                    44:6a:d3:31:63:d4:fd:cd:97:54:79:59:47:6e:50:
                    15:1d:be:a4:cc:d5:26:03:20:cd:40:7e:63:c7:94:
                    e3:4f:35:ca:9d:87:0d:ac:30:9a:87:48:86:06:7f:
                    61:b6:7f:38:5c:93:c9:a2:27:b5:29:97:65:98:6f:
                    46:61:7f:df:78:d5:26:c0:ee:1d:69:9b:4b:ed:32:
                    ed:ca:bf:fc:cd:16:61:fd:19:50:d4:7a:c1:c6:f5:
                    96:a7:bd:5f:38:52:6c:a7:43:20:2f:ed:0f:a8:21:
                    a4:2b:b8:8e:6b:9d:a1:5a:e3:7f:fb:94:e7:79:3d:
                    90:ad:fd:48:83:ec:c8:ad:bb:ac:a6:ac:2c:e9:e7:
                    e0:cf:ee:16:d7:c5:3a:60:b0:71:d4:03:4e:25:e4:
                    dc:9f:65:87:ba:96:7a:22:52:7f:de:eb:76:88:d2:
                    63:22:52:66:c5:59:79:ba:51:1f:5d:72:3f:9f:02:
                    c2:c0:a6:b9:35:7c:ca:e9:02:99:93:45:ae:ee:5a:
                    72:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                70:17:89:83:C4:17:41:54:F2:5B:2B:DB:5C:44:54:AE:61:F2:5E:F8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GxLWfdVMdaQb3WXmSHkijRW5dJUXJzHURRhXbSd9yn95/1/70178983C4174154F25B2BDB5C4454AE61F25EF8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.124.0/22
                IPv6:
                  2804:3b30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266134

    Signature Algorithm: sha256WithRSAEncryption
         61:ae:67:30:31:54:d8:ce:00:8e:f9:0d:ea:7f:17:10:84:4f:
         4e:5f:36:22:7c:c5:52:80:77:28:29:7e:12:a3:25:92:58:11:
         23:12:a5:6b:b0:d7:12:63:0c:39:87:0d:af:1b:43:64:d0:55:
         7a:c7:92:82:17:47:84:eb:3d:ef:b2:97:aa:e8:f8:f1:8f:7b:
         45:24:4d:4f:c6:53:f5:fc:30:a8:fd:ba:fa:ac:08:5f:42:09:
         25:b6:80:bb:3e:98:8d:ee:35:72:95:ec:9b:40:7d:34:53:92:
         57:b5:6b:bf:6e:f8:d1:ef:01:8f:68:b3:a8:01:60:09:1f:13:
         6d:29:12:bf:f5:47:12:0b:e8:37:97:33:a7:f8:be:c7:ba:b2:
         21:1c:4a:96:ee:db:f5:ab:15:12:f1:52:12:09:d4:87:ef:f1:
         c5:c6:6e:27:0d:9b:8a:24:75:eb:37:f3:5e:a6:14:7c:e4:d8:
         4d:04:2a:b2:6c:45:59:e4:02:74:47:7f:c1:40:bc:11:c9:df:
         b3:34:90:a7:e1:d8:a9:8a:8b:84:a2:e1:77:3d:63:70:8a:1a:
         9a:12:02:91:73:2d:c7:3a:2d:30:5c:a4:fd:f5:b0:70:9a:d4:
         b3:ac:78:67:d4:9a:b2:48:ea:39:8c:9e:49:bf:52:3f:9f:a2:
         b9:a6:16:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:34:46 2025 by rpki-client