Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer
File:                     8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.cer (raw, json)
Hash identifier:          JjkLQ1vT0OGeSHEHkw05twZvfe53LlHRF8gmVJSTKwg=
Subject key identifier:   8B:8B:4E:1F:32:9B:88:F7:0D:E3:5D:A3:30:FC:1F:9C:A2:B9:20:84
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2AA49408C096589A61501F8D24C55482397CA933
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft
caRepository:             rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 14:17:50 +0000
Certificate not after:    Fri 06 Mar 2026 14:22:50 +0000
Subordinate resources:    AS: 271623
                          IP: 138.121.36.0/22
                          IP: 2804:7e6c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a4:94:08:c0:96:58:9a:61:50:1f:8d:24:c5:54:82:39:7c:a9:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 14:17:50 2025 GMT
            Not After : Mar  6 14:22:50 2026 GMT
        Subject: CN=8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c7:4c:54:da:cb:56:20:f8:11:96:c9:5e:53:
                    7e:79:79:68:61:b2:30:14:1e:c4:36:f1:2c:63:dd:
                    ae:2f:4b:4c:78:26:7c:aa:5f:f3:64:87:30:1f:21:
                    3a:9b:af:e0:8e:1f:92:e2:2d:cf:c4:7b:b4:d8:58:
                    52:3c:c5:de:04:54:1b:1f:24:ab:eb:9f:47:80:26:
                    72:1b:85:8e:98:07:26:79:1c:c1:cd:eb:ac:95:13:
                    4b:8b:aa:30:1c:9c:80:ec:29:92:f4:9b:74:af:1a:
                    a1:28:53:dd:2e:26:e1:2c:2d:0f:f6:cb:89:a3:e0:
                    99:41:58:8e:a2:d1:1c:c3:a3:60:53:22:3d:ba:a0:
                    e3:05:53:08:7a:71:b7:bc:07:b7:c6:9b:7e:2f:56:
                    ee:c2:d7:60:c5:47:08:b0:6e:c7:d1:0b:44:98:ef:
                    46:83:a6:b5:71:f4:d4:ac:98:01:6f:c6:56:85:0b:
                    4d:bd:6e:b5:a1:4a:97:47:6f:12:b8:d7:1c:a0:62:
                    99:50:28:38:b8:e4:59:c3:c9:f8:af:36:a4:70:c9:
                    63:77:ea:0c:ef:ff:7b:be:d6:43:fe:3c:b5:09:59:
                    2e:ff:8c:81:52:7c:5a:fd:a0:8a:0f:7f:89:8a:11:
                    c9:02:40:3c:38:c4:42:db:7f:a7:70:1c:dd:bb:36:
                    46:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8B:8B:4E:1F:32:9B:88:F7:0D:E3:5D:A3:30:FC:1F:9C:A2:B9:20:84
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/1/8B8B4E1F329B88F70DE35DA330FC1F9CA2B92084.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.36.0/22
                IPv6:
                  2804:7e6c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271623

    Signature Algorithm: sha256WithRSAEncryption
         69:86:46:79:8c:2c:a4:dd:6e:55:b3:86:eb:45:a6:fa:94:47:
         31:d5:19:eb:86:b8:7b:10:1d:02:38:5c:5d:0e:0c:ad:99:47:
         0d:8f:5c:e4:5b:3a:1a:50:83:0f:cf:a8:18:5d:81:a1:e7:37:
         58:c3:fa:eb:4d:42:ea:35:78:37:e6:32:a6:f3:12:b4:75:dc:
         03:b1:7e:e3:3e:20:c7:73:c5:c1:33:75:d9:45:24:49:09:64:
         c1:bc:71:ff:08:2d:88:01:d6:0a:13:47:1f:b2:b2:02:ce:22:
         3a:4e:e4:19:b2:51:26:63:f4:61:48:5a:1f:44:f6:53:fd:b9:
         54:d1:d2:6c:7b:bf:04:85:9c:b6:3a:94:fd:21:5f:cb:39:a2:
         7f:0e:66:ed:4e:58:91:23:51:99:f5:5d:59:78:ae:b6:fd:e7:
         72:6d:d3:e9:76:42:cb:12:82:0f:29:37:df:10:0d:98:af:da:
         39:d0:e1:1b:52:45:8a:02:d6:c7:19:22:b6:dc:49:7c:d6:b8:
         1f:e2:84:fb:3f:c3:8e:98:ce:50:0e:ab:eb:ed:f6:dc:3a:80:
         67:d5:3f:7c:37:99:a4:7f:46:3c:1d:bd:e0:2d:1d:8c:75:6e:
         73:f5:23:2a:dd:f4:bd:ab:b9:d3:01:bb:68:4b:ce:af:32:eb:
         33:84:d4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:47 2025 by rpki-client