Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8D4C41093F9C1CEA8DFF560B0F664B94298AD57E.cer
File:                     8D4C41093F9C1CEA8DFF560B0F664B94298AD57E.cer (raw, json)
Hash identifier:          fuqazwTvzvLoE28llHL5JTNRGs0qKl4ywcRq2AMuuuw=
Subject key identifier:   8D:4C:41:09:3F:9C:1C:EA:8D:FF:56:0B:0F:66:4B:94:29:8A:D5:7E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6B4B4ABB30075E6FF020F4DFFBAA25FE46126991
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/8D4C41093F9C1CEA8DFF560B0F664B94298AD57E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Mar 2025 18:28:16 +0000
Certificate not after:    Fri 20 Mar 2026 18:33:16 +0000
Subordinate resources:    AS: 271552
                          IP: 181.232.216.0/22
                          IP: 2804:7d4c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4b:4a:bb:30:07:5e:6f:f0:20:f4:df:fb:aa:25:fe:46:12:69:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 21 18:28:16 2025 GMT
            Not After : Mar 20 18:33:16 2026 GMT
        Subject: CN=8D4C41093F9C1CEA8DFF560B0F664B94298AD57E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8a:9a:bc:6c:48:71:0a:be:fc:99:da:94:28:
                    0e:30:8d:fb:42:03:f8:ee:cd:e6:48:35:45:fe:f9:
                    b9:d3:f1:b9:8e:db:74:ce:0b:11:4f:60:8d:93:7b:
                    ff:b2:56:24:c0:9b:af:c3:85:1b:23:b7:f7:96:c8:
                    92:43:2e:03:d9:8b:58:ab:bb:6d:b1:4e:a1:71:30:
                    ed:37:87:50:a3:f1:dc:f2:e9:21:ad:86:f1:b5:03:
                    5a:51:89:42:93:c6:a3:41:22:41:6d:b0:90:7b:71:
                    2f:30:cd:47:12:63:e4:89:43:72:41:4f:0b:21:95:
                    61:3c:c7:00:b7:17:4e:1f:4a:d4:4e:ba:80:9a:34:
                    7b:13:28:f8:5e:60:d0:ad:0b:ab:3b:49:14:7f:fc:
                    4a:f1:07:78:ee:44:f0:cc:73:47:98:48:5c:8f:8f:
                    e2:d6:ef:37:1b:5e:af:96:f5:49:88:63:01:dc:15:
                    0e:80:8c:fb:dd:91:b3:ff:7d:60:34:4e:ad:48:04:
                    dc:ae:45:08:6f:ef:ba:f4:4d:17:fa:75:6e:1c:91:
                    38:98:c7:51:8f:87:61:ff:40:7b:a0:de:e1:f1:4a:
                    2b:eb:b7:6f:f2:20:39:d3:3a:37:ff:63:01:5c:bd:
                    33:4e:24:ce:ec:63:29:d9:51:62:ea:8a:dc:dd:49:
                    56:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:4C:41:09:3F:9C:1C:EA:8D:FF:56:0B:0F:66:4B:94:29:8A:D5:7E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6rcBPsLmhMt2qirk8fwvn51iHDGSVxnuUs1Affg1asLF/0/8D4C41093F9C1CEA8DFF560B0F664B94298AD57E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.216.0/22
                IPv6:
                  2804:7d4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271552

    Signature Algorithm: sha256WithRSAEncryption
         11:ea:99:a9:0b:ab:2b:40:13:aa:cf:f8:84:2a:cd:14:43:00:
         b0:bd:f4:f8:96:b8:d1:d6:41:65:2a:cc:f1:81:1c:11:01:cf:
         1e:b4:09:ea:32:ac:bf:b1:4c:c2:3d:b4:2f:ac:e2:a9:b7:82:
         52:70:19:3d:da:6d:1f:a9:f1:df:3a:26:5b:c1:e0:48:e9:09:
         e1:f4:e5:09:d9:ab:d8:a8:65:4b:02:fb:31:e2:be:ea:21:c1:
         d3:bc:25:59:81:7f:3d:36:e8:a3:1a:53:a5:d6:64:ef:fc:97:
         cc:5e:64:5e:29:3a:c3:52:d5:0b:bd:06:f4:a5:37:ed:a7:92:
         88:82:9e:6a:f2:df:81:d3:61:2a:40:9c:5b:36:ef:ba:28:f3:
         d1:00:8a:c1:87:13:a3:1f:42:f2:26:b6:a6:4c:10:b4:c7:a0:
         05:e8:49:fd:72:a3:be:48:f3:a4:cc:a7:1a:5a:be:42:4c:18:
         1e:9e:9b:bd:03:a9:43:ab:2c:0d:43:73:17:dc:bd:16:53:be:
         46:eb:99:7c:45:73:68:ed:00:38:0e:13:4b:ee:75:40:25:5f:
         3c:bc:c0:0c:05:a6:1a:43:ee:80:0a:0e:78:d0:9d:c7:35:a7:
         03:89:3c:df:35:dd:6f:97:34:93:f0:d6:94:9c:f4:d6:54:ac:
         6c:95:2c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:11:57 2025 by rpki-client