Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/71A9785A05015A538367B1A697FA540C829A2888.cer
File:                     71A9785A05015A538367B1A697FA540C829A2888.cer (raw, json)
Hash identifier:          I7Pje+fXbC1CqXCdUMZ26GytX/nAP/5p/ySsnnkG7Y4=
Subject key identifier:   71:A9:78:5A:05:01:5A:53:83:67:B1:A6:97:FA:54:0C:82:9A:28:88
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       68050FC1B700D2EBE7FE1125279DA8C553D5135D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/71A9785A05015A538367B1A697FA540C829A2888.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Mar 2025 20:04:03 +0000
Certificate not after:    Thu 19 Mar 2026 20:09:03 +0000
Subordinate resources:    AS: 266094
                          IP: 45.5.112.0/22
                          IP: 2804:3a88::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:05:0f:c1:b7:00:d2:eb:e7:fe:11:25:27:9d:a8:c5:53:d5:13:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 20 20:04:03 2025 GMT
            Not After : Mar 19 20:09:03 2026 GMT
        Subject: CN=71A9785A05015A538367B1A697FA540C829A2888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:42:3b:8d:1d:18:fc:7c:49:8c:15:aa:bb:3c:
                    2b:eb:17:5e:3d:1b:bf:b4:e2:06:45:1b:d6:00:95:
                    84:15:c9:3e:b2:da:6f:68:aa:6a:21:13:7d:0a:88:
                    ea:51:db:15:29:fe:76:d4:a2:1a:6c:67:10:fd:51:
                    a9:75:fc:bf:cb:7a:64:70:2b:bd:65:99:03:1c:99:
                    71:c4:6d:ed:2f:42:9e:10:6f:bf:4b:a1:2c:aa:31:
                    5d:3f:a3:fd:29:d4:c9:08:7c:3e:01:63:88:39:c6:
                    40:fd:74:10:ab:a5:b2:7f:f1:07:ca:32:ae:71:50:
                    15:45:73:4c:9b:a9:d4:a1:ae:18:59:04:31:6e:02:
                    20:ec:40:ac:82:5e:6f:25:79:f8:e5:ed:d3:6c:9f:
                    33:3d:19:50:07:9e:3a:38:b2:4a:9e:f4:63:5c:c5:
                    67:da:da:7b:a6:1f:1a:98:fd:0e:ba:ff:69:dc:80:
                    82:c6:fd:f9:55:fa:e1:cb:0c:18:0f:86:de:1b:c9:
                    9b:c4:e1:33:ad:b3:ba:5b:b6:8e:04:de:64:bb:93:
                    4b:8c:e6:5c:06:08:c9:03:ae:ae:e2:02:32:68:aa:
                    00:35:36:03:13:29:d6:7e:1e:30:f4:42:76:7f:3e:
                    8c:c4:b0:b4:44:91:e3:e8:52:e0:65:be:ab:ed:d7:
                    0d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:A9:78:5A:05:01:5A:53:83:67:B1:A6:97:FA:54:0C:82:9A:28:88
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/71A9785A05015A538367B1A697FA540C829A2888.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.112.0/22
                IPv6:
                  2804:3a88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266094

    Signature Algorithm: sha256WithRSAEncryption
         bd:ca:fa:69:5b:66:12:3d:33:79:9e:c4:ed:7f:15:d5:39:a4:
         28:3e:48:25:0b:17:ee:06:a8:82:90:23:95:cc:f6:26:0f:f2:
         8e:ea:98:64:b4:a8:c9:36:59:74:79:87:9c:51:26:df:c4:f0:
         78:a3:d8:d8:9f:37:cd:05:ca:84:9f:18:b6:33:78:0b:b4:90:
         5c:01:d0:cc:b7:34:53:a7:f9:3f:12:f1:67:59:b5:41:7f:a7:
         2a:f7:cb:6b:f8:8d:14:45:22:4a:fb:88:23:de:0a:94:47:95:
         83:be:b6:a9:2a:cc:7d:00:37:dd:6e:ef:04:b1:51:42:ca:bb:
         bc:af:f4:04:8a:59:3a:09:ea:e6:fa:a4:a4:ec:91:04:93:88:
         6e:c2:8c:db:14:95:89:26:79:51:bb:2c:2a:b3:61:4b:c1:a5:
         13:fa:96:d1:4a:eb:28:45:cc:87:4a:c9:57:62:e8:a9:d0:fb:
         bb:66:9d:9d:8b:3d:47:3f:68:3d:b1:29:7d:b1:de:aa:e3:c2:
         93:20:1d:14:69:d6:5c:96:7d:29:73:9e:ad:39:7e:10:76:4d:
         71:f3:0f:6d:69:5b:6b:6a:98:df:c3:38:5d:0e:fe:c3:10:15:
         0f:e5:23:44:ad:68:dd:6a:d0:ba:69:99:b0:ea:e9:a9:27:73:
         e6:4e:c7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:00 2025 by rpki-client