Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8CE0D131E429E2C41648BC875D900D7A21A1F1C3.cer
File:                     8CE0D131E429E2C41648BC875D900D7A21A1F1C3.cer (raw, json)
Hash identifier:          ps/bumOlZkE/u7mLeYQs8h+P7j5yUi6NLs4by0G8y3U=
Subject key identifier:   8C:E0:D1:31:E4:29:E2:C4:16:48:BC:87:5D:90:0D:7A:21:A1:F1:C3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       52B70B4971B49F1B221BDABBB617670212A93054
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/8CE0D131E429E2C41648BC875D900D7A21A1F1C3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Jan 2025 12:22:34 +0000
Certificate not after:    Wed 28 Jan 2026 12:27:34 +0000
Subordinate resources:    AS: 266304
                          IP: 170.79.200.0/22
                          IP: 2804:35c0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b7:0b:49:71:b4:9f:1b:22:1b:da:bb:b6:17:67:02:12:a9:30:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 29 12:22:34 2025 GMT
            Not After : Jan 28 12:27:34 2026 GMT
        Subject: CN=8CE0D131E429E2C41648BC875D900D7A21A1F1C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7a:1b:df:4f:32:d6:45:0a:92:d8:5a:8b:42:
                    61:15:aa:72:29:6f:97:29:6f:03:8e:b0:bc:3e:f4:
                    8e:31:9c:75:d0:70:57:ea:01:f1:b2:f0:05:56:d7:
                    71:2d:96:fe:66:a9:cc:c6:9b:23:66:ca:38:24:bb:
                    d1:3b:99:10:97:c7:72:63:ef:d2:77:61:fc:12:8a:
                    a5:b8:76:00:c2:8c:ff:b3:19:47:29:0d:09:25:d6:
                    8b:7a:ae:b8:68:a9:3f:6b:97:af:8a:c5:34:89:75:
                    d6:8c:ea:c0:60:2d:70:b9:06:e9:02:a1:a5:de:57:
                    6c:8d:67:f6:1d:0b:e5:7f:ff:3b:22:a9:d6:d7:aa:
                    ea:06:a6:f8:a3:38:ba:06:f9:ca:5b:2b:a5:ca:01:
                    1f:14:fe:7a:1b:dd:08:e5:bd:fa:e1:55:4d:84:33:
                    7c:46:bf:cc:cc:55:2f:90:6a:4c:58:ae:18:cf:1c:
                    9e:e7:6c:9b:3b:ee:13:52:61:d4:2d:fc:a6:98:05:
                    4b:45:5b:db:2a:97:eb:21:ed:a9:52:50:6c:e0:35:
                    2a:f8:ff:4b:6d:e4:a6:e0:35:3c:e1:47:21:e7:56:
                    d2:7e:1c:60:cb:ca:2f:03:cb:06:51:3d:fb:20:5a:
                    45:c9:48:6f:45:be:73:6c:5f:ed:98:da:99:cb:76:
                    f6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8C:E0:D1:31:E4:29:E2:C4:16:48:BC:87:5D:90:0D:7A:21:A1:F1:C3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2tHiuxqo6nbwZtqCAqKx2DbU76vrHWUX1BbZPF5E8jfB/0/8CE0D131E429E2C41648BC875D900D7A21A1F1C3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.200.0/22
                IPv6:
                  2804:35c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266304

    Signature Algorithm: sha256WithRSAEncryption
         69:3c:a0:9c:d6:ec:05:09:36:6e:87:59:ba:65:d2:f8:5c:3c:
         00:a8:63:e3:64:5e:5f:92:51:6e:c0:d3:75:48:fb:21:12:b7:
         ba:0d:d3:fc:5e:45:cf:c5:dd:d0:18:96:37:98:17:2a:2d:8c:
         92:f6:12:26:68:c9:bb:f5:25:0b:84:02:3b:dc:48:91:b3:98:
         a2:5c:f6:e6:31:10:a6:ac:17:27:54:fa:ed:5b:7b:b2:62:23:
         0b:0b:d4:f9:1f:62:e0:32:ce:2a:0b:ab:4f:f7:7e:b4:94:0f:
         e9:ae:00:74:08:14:64:ee:b3:e8:12:b7:ee:c5:4b:10:4c:e4:
         58:f4:40:4c:06:8d:b8:2d:1a:14:0c:17:39:f4:dc:32:f8:3b:
         2a:34:9f:9b:2b:1b:80:63:8b:22:67:8f:34:2c:06:1c:d0:26:
         98:52:46:97:04:41:4c:9d:ae:52:e9:8e:d3:25:94:dd:f2:00:
         5c:ff:5c:99:3a:23:54:57:73:69:b3:d3:70:e5:5f:68:aa:a1:
         8f:d5:b0:e9:f5:97:4c:43:69:8d:4a:6a:9c:ae:b4:a8:df:b5:
         d7:84:ff:93:24:77:60:19:5a:7f:ea:c3:b7:29:83:86:02:09:
         fa:88:54:6f:7d:22:d2:b8:4c:d4:ba:b1:ea:c3:46:97:04:33:
         50:c6:86:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:51:34 2025 by rpki-client