Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
File:                     8204A8F62764E655E183BB09417B0875F11B3A7D.cer (raw, json)
Hash identifier:          B8bSVa3cRPhp5b/TRatajxgYbeHJl8qnJYfIW3B7cPo=
Subject key identifier:   82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       43C95BF8B56DAC257EF1F517B76F8C948C2E6AC2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 09:43:57 +0000
Certificate not after:    Thu 05 Mar 2026 09:48:57 +0000
Subordinate resources:    AS: 52913
                          IP: 167.249.4.0/22
                          IP: 170.150.76.0/22
                          IP: 170.246.164.0/22
                          IP: 177.23.168.0/21
                          IP: 179.127.40.0/21
                          IP: 190.109.80.0/22
                          IP: 2804:1088::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c9:5b:f8:b5:6d:ac:25:7e:f1:f5:17:b7:6f:8c:94:8c:2e:6a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 09:43:57 2025 GMT
            Not After : Mar  5 09:48:57 2026 GMT
        Subject: CN=8204A8F62764E655E183BB09417B0875F11B3A7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0e:d4:2c:11:0f:dd:1d:c9:05:46:e6:df:d9:
                    6e:2a:0c:30:12:6d:48:2f:19:e4:60:81:6a:ff:ee:
                    02:e7:98:0f:38:c4:e9:8c:6c:25:05:2d:77:f5:37:
                    d2:ec:1b:40:2a:25:0d:39:e1:ff:f0:49:01:ba:e2:
                    2f:c4:fa:e5:94:87:c3:71:bf:81:eb:34:d3:cf:a3:
                    96:d5:4a:25:a3:65:25:38:d9:38:e4:31:3a:c9:82:
                    c1:5e:0b:72:fd:0b:c2:bb:7e:41:d0:8e:3c:b1:81:
                    d8:4b:63:ae:5c:d0:84:45:03:86:76:a3:c7:92:94:
                    6d:57:73:ec:a5:3e:64:a9:d5:ad:98:ad:1f:32:47:
                    2e:6e:b4:6e:a8:af:bd:dd:91:00:c4:17:14:1c:04:
                    33:41:41:b8:3c:4a:b0:1f:da:f0:1e:81:d5:84:57:
                    2f:7c:cb:b5:ea:7a:6d:d7:55:34:27:34:4d:60:8d:
                    a5:10:fc:fa:3b:e2:b1:85:d0:a4:ca:07:84:89:8b:
                    6f:a0:bf:b6:9a:48:5b:05:b5:02:ce:e3:a9:f1:04:
                    62:0c:15:6b:98:69:26:cd:ae:88:f4:4b:c8:ce:6b:
                    3a:36:83:9b:bd:c6:a3:b1:e1:f4:46:a8:b9:a1:d5:
                    69:5b:47:52:13:65:40:c7:00:8a:06:4b:a7:21:12:
                    d9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.4.0/22
                  170.150.76.0/22
                  170.246.164.0/22
                  177.23.168.0/21
                  179.127.40.0/21
                  190.109.80.0/22
                IPv6:
                  2804:1088::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52913

    Signature Algorithm: sha256WithRSAEncryption
         16:ff:fc:b1:49:e4:00:00:19:d8:db:d0:52:f7:64:b7:e4:72:
         7a:8b:15:cd:69:5e:3a:f6:e3:b9:51:06:1f:22:5e:f6:48:cb:
         e6:fb:d4:32:d5:b1:37:cb:33:a4:2e:1b:1c:14:24:aa:0d:14:
         dd:d1:de:95:f4:95:2f:24:f6:89:f2:28:4c:6d:f6:dc:7c:af:
         8a:aa:66:bd:44:33:dc:79:48:04:af:b2:06:b2:66:8b:24:eb:
         23:b0:8b:1c:af:85:33:01:65:22:67:9e:58:85:1a:c3:b2:fd:
         73:a6:15:5b:cc:25:e7:26:f7:34:14:cc:51:1b:22:fc:8a:26:
         40:87:51:4e:61:92:96:e8:9b:1b:84:5b:ef:b1:de:37:19:45:
         bd:b4:4a:53:f4:e5:38:2c:da:a1:83:52:e7:ad:66:5c:ce:7e:
         7c:59:2d:8f:a7:f3:12:cd:3a:49:5b:56:2e:68:ba:3e:8b:07:
         c5:55:33:c4:b7:ca:51:f2:d0:03:76:99:ee:5e:70:0d:50:92:
         79:b4:ee:42:49:5a:0a:5c:0d:0b:a0:54:b4:67:15:6a:56:8d:
         94:7e:b2:e2:ff:31:e1:ba:17:5e:f7:42:6c:0b:7d:78:90:4d:
         7f:b7:8e:4d:14:4e:08:7d:ca:3a:ef:d2:d0:cd:42:ae:94:d2:
         21:b7:a9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:40:10 2025 by rpki-client