Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8663247D8136C6B4962E7AFD2A8510373EEEE3B2.cer
File:                     8663247D8136C6B4962E7AFD2A8510373EEEE3B2.cer (raw, json)
Hash identifier:          rHHGDi/y7GdfuYqJClzDBSLNBNQ973IOVeUvmsf/Xl0=
Subject key identifier:   86:63:24:7D:81:36:C6:B4:96:2E:7A:FD:2A:85:10:37:3E:EE:E3:B2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7962887060AEFF2939F213AE8A53EC07DD4C516B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/8663247D8136C6B4962E7AFD2A8510373EEEE3B2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Mar 2025 11:39:19 +0000
Certificate not after:    Tue 24 Mar 2026 11:44:19 +0000
Subordinate resources:    AS: 268512
                          IP: 45.161.184.0/22
                          IP: 2804:5258::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:62:88:70:60:ae:ff:29:39:f2:13:ae:8a:53:ec:07:dd:4c:51:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 25 11:39:19 2025 GMT
            Not After : Mar 24 11:44:19 2026 GMT
        Subject: CN=8663247D8136C6B4962E7AFD2A8510373EEEE3B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:25:17:be:5e:23:b8:06:a0:12:0b:cb:63:87:
                    47:d1:49:e0:75:b5:af:91:5d:20:88:17:a5:b2:b1:
                    3f:b4:f7:ca:77:0c:d7:c2:53:12:cb:2b:b1:8b:88:
                    45:51:18:21:48:af:4b:5c:62:3f:42:5e:2d:50:1e:
                    31:5b:35:8c:af:03:38:2a:c5:91:49:66:07:30:d4:
                    bc:e7:91:6b:88:80:f4:f5:d8:f2:5f:91:d9:51:9e:
                    4c:01:20:65:90:63:f1:4c:1a:ee:a1:16:1a:fb:22:
                    e0:fb:b8:20:d0:29:86:65:d2:64:10:c6:8c:6d:20:
                    f9:7b:47:3f:4e:68:47:14:d4:c0:70:f0:3c:38:f3:
                    6b:99:e5:36:58:b1:9f:86:2e:8b:d2:41:9b:fa:30:
                    32:94:e3:38:b7:cb:04:47:e4:18:47:70:2d:68:90:
                    d8:78:d1:d5:68:d1:3a:f1:3f:ea:7a:ad:cd:ed:a5:
                    9b:9d:27:4d:49:97:1c:ed:43:de:b1:6c:6f:af:19:
                    80:13:13:69:34:e4:64:88:d1:e2:da:1a:ae:41:2f:
                    f1:5a:08:69:f7:8f:bd:26:56:1d:45:25:c7:94:ab:
                    75:3b:a1:d2:f8:16:a2:cf:95:2c:5b:df:02:da:ad:
                    d8:c5:5d:b6:aa:b2:a8:c0:ee:fc:3f:c8:2e:67:4e:
                    f5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:63:24:7D:81:36:C6:B4:96:2E:7A:FD:2A:85:10:37:3E:EE:E3:B2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/8663247D8136C6B4962E7AFD2A8510373EEEE3B2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.184.0/22
                IPv6:
                  2804:5258::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268512

    Signature Algorithm: sha256WithRSAEncryption
         35:cc:f2:3a:bd:e4:f9:90:17:0a:2c:9e:b3:91:10:e2:c2:3b:
         07:f4:26:b1:ea:93:9d:00:29:40:08:89:86:ab:8d:e9:ae:56:
         66:00:ee:af:76:64:43:17:61:aa:e5:31:0b:09:b0:86:42:8c:
         db:bd:8e:bb:16:90:1a:ab:cf:4a:08:c1:8b:95:42:04:d3:6f:
         32:34:31:16:ef:1a:48:7e:c2:eb:b0:f0:a9:82:8c:25:14:f9:
         42:bd:ba:56:cb:0d:f4:67:3a:5a:14:55:58:e8:94:5a:a3:25:
         98:cb:dd:fe:86:1a:19:de:f2:2a:24:fb:ca:4c:4a:d1:2c:d4:
         5b:f4:f8:e4:27:d9:d9:d0:c1:d1:a0:59:0e:d1:57:7c:c8:7a:
         d1:66:46:e0:5e:23:34:a1:50:ee:0b:b2:b7:5a:1e:96:21:6d:
         fa:02:e8:0e:a6:4d:e3:10:5d:71:3f:47:e9:8a:05:a6:f8:c1:
         c3:47:c8:b2:aa:72:94:4f:28:12:4f:6e:92:75:39:39:dc:da:
         0b:3b:58:3a:ae:b8:9b:37:4e:d9:b3:2d:c0:88:58:e2:7b:cd:
         64:31:4e:a7:79:21:45:20:be:ce:41:6b:f0:76:2d:32:97:61:
         a6:db:b3:94:9f:f2:f0:b9:77:0b:32:2d:03:18:05:dd:bf:3d:
         3e:ba:ee:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:50:27 2025 by rpki-client