Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/733F4B034A3788745713B6F81B211FD8957CF1EE.cer
File:                     733F4B034A3788745713B6F81B211FD8957CF1EE.cer (raw, json)
Hash identifier:          fwO2fllY1zISYrOKukVsUHVZP6B5PX5ZcjQzIsGrj4Y=
Subject key identifier:   73:3F:4B:03:4A:37:88:74:57:13:B6:F8:1B:21:1F:D8:95:7C:F1:EE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       223739909AFE2E1449661B116E770AA15163D03B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 23:06:47 +0000
Certificate not after:    Fri 06 Mar 2026 23:11:47 +0000
Subordinate resources:    AS: 265265
                          IP: 168.0.196.0/22
                          IP: 2804:2d30::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:37:39:90:9a:fe:2e:14:49:66:1b:11:6e:77:0a:a1:51:63:d0:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 23:06:47 2025 GMT
            Not After : Mar  6 23:11:47 2026 GMT
        Subject: CN=733F4B034A3788745713B6F81B211FD8957CF1EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:33:af:eb:19:98:97:c4:6d:5a:64:1d:fe:26:
                    c3:9e:aa:b6:7d:89:fb:2f:16:16:0b:6a:fe:3f:66:
                    49:4f:27:9b:5c:f3:59:4f:f2:d3:e7:52:15:ce:24:
                    17:3c:58:57:09:74:63:2e:e8:f8:08:05:91:f4:39:
                    f2:77:4f:f8:06:c3:47:25:d5:37:0d:e7:ad:79:8c:
                    85:63:1c:67:e4:88:88:a7:59:e4:b2:29:7d:07:58:
                    ca:6c:04:2a:a3:8f:a7:62:da:cb:51:b5:25:bb:b5:
                    bd:a7:ec:77:ad:ee:7a:2e:fe:54:96:b3:c6:26:45:
                    fe:56:a1:17:79:b8:57:43:be:72:a1:cf:67:8e:ba:
                    56:4b:68:48:fb:34:21:87:2a:7f:f0:6c:a2:6c:08:
                    1a:49:6c:4b:ae:9a:ce:d0:f7:a5:f0:8f:50:f7:cb:
                    11:30:fa:88:d2:af:bd:9e:52:a8:c9:2f:fe:30:f7:
                    b4:1c:6e:ac:f4:c7:81:fe:f4:74:ce:97:ab:08:9d:
                    76:da:a2:4c:3a:61:45:45:59:f1:c7:c0:07:2e:c6:
                    d4:2a:b0:99:25:f1:fe:12:7d:1f:fe:9e:bb:ba:d7:
                    0b:96:c4:64:22:39:0d:11:47:6d:7e:3d:f6:d1:34:
                    9a:4a:22:46:dc:97:df:1f:4e:cd:92:4b:00:d1:4a:
                    8c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                73:3F:4B:03:4A:37:88:74:57:13:B6:F8:1B:21:1F:D8:95:7C:F1:EE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ByCxDjvqHw87NiHDgvmYw3AxF9csyng5thtZNYXhvXJs/1/733F4B034A3788745713B6F81B211FD8957CF1EE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.196.0/22
                IPv6:
                  2804:2d30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265265

    Signature Algorithm: sha256WithRSAEncryption
         0a:04:93:67:a3:12:ef:af:66:0a:42:5d:6c:f4:58:06:b7:06:
         7e:b3:f0:4a:9d:ca:6f:03:ae:39:de:89:e7:93:f6:9c:ee:fd:
         85:a6:49:23:15:7d:e8:2a:8a:bb:17:ed:64:14:c9:2b:33:aa:
         24:b9:ca:46:c0:e1:50:4e:2f:89:85:87:a0:c7:66:8f:08:9a:
         eb:f7:cf:40:20:0a:4c:e0:d6:91:3d:87:84:e4:f5:4c:f8:29:
         3d:d8:f1:7a:9b:f4:3d:f5:96:58:dd:60:53:7c:20:39:a4:1f:
         77:eb:a1:38:46:2e:6d:c6:da:a2:4f:6f:b0:87:0d:dd:a7:5f:
         cd:38:25:d9:e0:37:4b:27:9e:4c:67:68:1d:36:c1:24:6a:97:
         52:3d:94:d7:6a:8a:01:dc:5b:d0:d3:5b:06:7e:93:db:09:ae:
         c0:ae:42:3f:ea:75:02:7a:4b:a8:f3:69:ff:6e:ae:85:8d:26:
         f0:ab:68:41:20:03:05:6e:21:c3:23:e1:84:e0:4b:7d:49:76:
         7c:09:61:a5:76:1f:c0:f9:6e:c1:c4:de:46:67:d6:37:3b:a5:
         75:2c:cd:3f:0b:a3:11:ce:b5:0f:e8:de:ed:28:6c:6b:4e:bf:
         67:eb:9d:c9:0d:16:07:ad:9c:b5:bb:3c:7c:e3:00:8f:38:8e:
         76:52:43:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:32:25 2025 by rpki-client