Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/732EA81E89F9014022336353D197E582CE4BFBEB.cer
File:                     732EA81E89F9014022336353D197E582CE4BFBEB.cer (raw, json)
Hash identifier:          PmT9hdee2+yA970qWfdieG4JVfr7hDEa0IjeXnKd00U=
Subject key identifier:   73:2E:A8:1E:89:F9:01:40:22:33:63:53:D1:97:E5:82:CE:4B:FB:EB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5DFC713B76AA3DDB56904CEA51407DCBDD4C7A36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/732EA81E89F9014022336353D197E582CE4BFBEB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Dec 2024 19:21:10 +0000
Certificate not after:    Tue 09 Dec 2025 19:26:10 +0000
Subordinate resources:    AS: 266343
                          IP: 170.239.4.0/22
                          IP: 2804:365c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:fc:71:3b:76:aa:3d:db:56:90:4c:ea:51:40:7d:cb:dd:4c:7a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 10 19:21:10 2024 GMT
            Not After : Dec  9 19:26:10 2025 GMT
        Subject: CN=732EA81E89F9014022336353D197E582CE4BFBEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:92:0f:45:ff:ed:83:ad:6f:c4:9f:f6:a8:24:
                    e1:8c:bd:6d:1a:dc:87:6a:e3:31:4f:fe:f6:a2:ff:
                    80:e6:ba:bd:cd:40:34:16:dc:6e:c5:3a:03:70:10:
                    ff:68:97:eb:8e:0a:54:ba:76:70:41:be:72:d3:9e:
                    f6:0b:7e:47:39:ce:e0:71:a8:3f:49:fd:aa:dc:ce:
                    93:36:cf:1a:d5:af:a4:20:7d:5e:54:12:92:2e:6e:
                    b0:ce:d7:76:1a:d8:d6:6b:e3:87:08:fb:87:13:47:
                    1e:4d:71:fa:48:a2:5d:fb:9c:4c:a3:69:09:af:55:
                    6d:f7:8d:b7:ab:b3:2e:da:2a:af:6e:34:b9:81:48:
                    b3:ed:bb:13:cc:60:0e:cb:b8:11:e2:10:a1:21:fc:
                    c9:3d:14:af:ea:3d:6f:8b:34:d1:58:14:c9:ec:eb:
                    2a:b5:6c:5b:dc:ca:81:c2:8c:27:c6:0b:6f:f4:da:
                    fd:9c:01:f7:1f:fc:e0:45:b1:05:79:39:b3:ac:37:
                    14:84:00:9c:46:0e:49:df:63:5e:7c:1b:56:06:08:
                    64:87:58:6c:9f:a8:15:5c:eb:3b:df:11:12:a3:66:
                    04:39:1b:d6:3e:51:50:67:82:89:77:b9:92:f6:00:
                    89:45:a9:63:cd:e0:bf:a0:5f:21:46:18:b6:a5:dc:
                    66:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                73:2E:A8:1E:89:F9:01:40:22:33:63:53:D1:97:E5:82:CE:4B:FB:EB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/732EA81E89F9014022336353D197E582CE4BFBEB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.4.0/22
                IPv6:
                  2804:365c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266343

    Signature Algorithm: sha256WithRSAEncryption
         10:97:e8:ae:eb:d7:9d:fe:a6:2c:ca:fd:55:a8:50:89:e2:8f:
         99:17:6d:72:b9:90:36:2d:6d:25:47:64:16:aa:b6:cf:75:c7:
         44:a5:09:7a:00:cf:10:68:2a:6f:7d:47:22:97:0a:8f:21:cf:
         03:d6:a9:cf:e3:9c:cc:71:d0:83:1f:a6:b6:e4:0e:d0:91:75:
         01:29:03:63:ff:2b:6c:0f:7c:fc:c3:af:00:c2:08:81:e5:5a:
         b5:ff:1b:7c:78:80:53:6e:f2:d2:73:ec:49:44:16:c8:7d:79:
         be:59:38:0f:cc:7a:06:28:bb:16:26:8b:56:92:03:6e:3a:4d:
         7a:f4:ed:4f:f2:d6:32:56:b2:dd:29:5e:53:90:4f:9f:58:b8:
         c7:98:fc:28:48:d8:fc:48:6d:67:67:01:78:ba:1d:71:86:08:
         cc:57:11:fe:9a:9c:a5:fe:e2:0f:e2:f0:d6:d0:f8:7d:34:8d:
         47:1d:05:dd:e0:a3:3f:84:f6:a1:a4:90:32:f1:bb:21:cc:bb:
         65:b6:64:eb:d9:b2:a1:dd:31:d6:a7:23:03:51:7a:e4:ec:ce:
         18:79:8e:91:d3:76:96:9d:52:81:5e:94:4b:8f:6c:86:16:be:
         a5:82:5d:38:60:a4:22:b5:a0:ae:33:30:b6:0a:db:52:77:f2:
         90:b1:8e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:48:09 2025 by rpki-client