Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/82EFEBD2E8C6B5C92B4F79898BEFA6DA7DD51663.cer
File:                     82EFEBD2E8C6B5C92B4F79898BEFA6DA7DD51663.cer (raw, json)
Hash identifier:          GO9neK0odZchiVC9+hQ0ts+mbxNj7W9TLrQHeXpu26s=
Subject key identifier:   82:EF:EB:D2:E8:C6:B5:C9:2B:4F:79:89:8B:EF:A6:DA:7D:D5:16:63
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5B82A9EF1B851600D017DF1AC5DED5F6C77547A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/1/82EFEBD2E8C6B5C92B4F79898BEFA6DA7DD51663.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 11:34:39 +0000
Certificate not after:    Fri 06 Mar 2026 11:39:39 +0000
Subordinate resources:    AS: 269238
                          IP: 45.182.208.0/22
                          IP: 2804:6180::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:82:a9:ef:1b:85:16:00:d0:17:df:1a:c5:de:d5:f6:c7:75:47:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 11:34:39 2025 GMT
            Not After : Mar  6 11:39:39 2026 GMT
        Subject: CN=82EFEBD2E8C6B5C92B4F79898BEFA6DA7DD51663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f1:eb:8b:78:f7:b9:82:db:6f:8f:19:5d:01:
                    4a:fe:66:c3:30:81:50:93:9c:5d:11:ba:c8:76:10:
                    0a:28:e0:ae:b2:ec:9b:99:78:bb:f9:b7:21:71:a9:
                    e8:0e:b5:29:5f:8d:db:f0:b1:18:35:00:64:aa:20:
                    ff:41:32:01:82:65:f8:c5:44:20:6a:69:cf:01:91:
                    2d:3c:73:25:05:0d:e9:27:75:7b:94:e8:2f:e9:93:
                    c2:56:1c:80:5a:01:a5:ce:87:1a:1b:98:a9:ab:6d:
                    b0:a6:7a:91:e0:c3:91:b6:0e:40:2c:fc:9c:be:77:
                    8e:66:fa:f7:b7:b5:ac:1d:98:c3:57:e0:9e:fc:8d:
                    8c:d8:16:3f:a2:9c:58:2c:f4:46:ea:03:d8:c6:08:
                    39:d0:af:f2:49:e6:3c:cf:73:67:5c:21:97:5b:fc:
                    06:27:21:9d:a2:7e:35:6b:f4:61:5b:8e:93:74:f8:
                    a5:6b:09:72:34:58:0a:ea:35:fe:4a:d5:23:58:c6:
                    37:10:b7:47:8a:45:81:a4:41:de:73:c2:ff:72:2c:
                    5d:31:0f:46:d4:36:bd:6f:5b:34:2d:68:6c:fe:fc:
                    b1:1d:3e:0d:93:0e:01:86:06:1e:fc:da:94:fc:80:
                    c2:d5:ab:29:ac:bb:21:9c:00:0c:a6:89:9d:24:d6:
                    93:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                82:EF:EB:D2:E8:C6:B5:C9:2B:4F:79:89:8B:EF:A6:DA:7D:D5:16:63
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/1/82EFEBD2E8C6B5C92B4F79898BEFA6DA7DD51663.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.208.0/22
                IPv6:
                  2804:6180::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269238

    Signature Algorithm: sha256WithRSAEncryption
         40:d8:e3:50:18:28:f2:f9:73:f8:ca:bb:40:23:de:78:33:ed:
         66:da:b4:e3:58:14:45:6c:94:10:ac:9f:d4:cf:0e:17:f1:1b:
         c8:34:7a:b5:53:49:44:44:bc:29:59:0a:98:94:1a:f4:be:d3:
         cf:fa:c7:19:1f:49:7f:c1:fb:3a:c9:d9:50:2e:40:d5:68:4b:
         9d:31:fb:f8:70:8e:4d:14:72:9f:ff:64:b7:e9:0e:61:59:76:
         85:f8:08:08:d4:70:f9:0f:50:3a:39:75:49:d0:f1:72:7d:d8:
         70:8d:5d:3d:82:30:04:27:5d:d6:17:c6:38:b3:0f:04:01:d0:
         e2:bb:b9:36:d0:6a:23:90:d0:3f:ab:59:7f:f5:74:94:d9:58:
         b9:73:cb:ad:ce:06:32:58:0c:2c:e3:e0:49:3e:c8:7f:ba:79:
         09:d9:34:7b:61:c6:bb:f2:13:3e:53:59:4f:42:7b:d8:40:8d:
         64:41:9b:74:79:95:cd:0c:d5:c9:3a:1f:6a:78:5f:e9:79:45:
         5b:bf:90:de:ac:16:98:b2:0e:d7:b9:8c:26:af:3b:ff:e4:21:
         9a:a8:3d:e4:12:36:a1:72:0c:81:e2:9b:b3:3a:fb:51:64:6b:
         06:32:e8:b2:52:e1:b8:18:dd:aa:d9:cf:96:85:5b:6c:f4:93:
         e8:5c:cd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:25 2025 by rpki-client