Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/91BF6A310C0A2267BBE55468ED38EDDAB9BDAC96.cer
File:                     91BF6A310C0A2267BBE55468ED38EDDAB9BDAC96.cer (raw, json)
Hash identifier:          xS0O6XjMcFbsEzjM5V7JBJtY5gDFLhv4GUT90InOvn8=
Subject key identifier:   91:BF:6A:31:0C:0A:22:67:BB:E5:54:68:ED:38:ED:DA:B9:BD:AC:96
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7FC4D50324A69EB34B11F65DF3D3431BD4661933
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CB9XD6HpbtuWwnUjbU5AVckxxkC1RazPV1Nsez6QuJhL/0/91BF6A310C0A2267BBE55468ED38EDDAB9BDAC96.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CB9XD6HpbtuWwnUjbU5AVckxxkC1RazPV1Nsez6QuJhL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Dec 2024 14:22:52 +0000
Certificate not after:    Thu 18 Dec 2025 14:27:52 +0000
Subordinate resources:    AS: 271631
                          IP: 201.218.188.0/23
                          IP: 2804:7e8c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c4:d5:03:24:a6:9e:b3:4b:11:f6:5d:f3:d3:43:1b:d4:66:19:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 19 14:22:52 2024 GMT
            Not After : Dec 18 14:27:52 2025 GMT
        Subject: CN=91BF6A310C0A2267BBE55468ED38EDDAB9BDAC96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:25:6f:7f:4f:a0:95:a3:8b:b4:5a:ce:a3:ad:
                    75:40:cc:5b:d7:a5:ba:b2:19:7c:8c:b8:a2:55:e1:
                    c3:d7:97:c7:78:6c:41:3d:98:59:02:5b:99:9e:70:
                    77:83:02:5c:f6:dd:40:a6:c4:1f:b0:20:87:81:45:
                    1d:4c:b6:38:4a:40:0b:da:10:7e:1c:cf:d1:a9:20:
                    22:3b:30:12:fc:4f:d5:99:be:a7:7b:92:c3:b0:c5:
                    60:07:84:2b:2e:06:d2:f9:b0:f3:9e:60:64:b4:92:
                    b4:55:d4:52:8b:b0:61:d4:67:6f:68:9c:94:df:d8:
                    04:a0:bc:3d:78:a5:f4:b1:e0:40:26:66:05:69:bb:
                    97:29:30:6e:26:41:3c:25:ad:46:96:ac:46:24:8f:
                    c4:6c:14:81:2e:7f:93:f0:42:45:55:1c:58:72:0b:
                    59:e0:ca:cb:1c:65:78:73:7d:68:5f:ab:9c:12:89:
                    ec:f5:11:66:d3:9a:2d:82:00:2f:50:56:93:22:9d:
                    ad:91:b8:59:10:6d:f8:4d:7e:8e:36:43:f3:3f:27:
                    10:8e:53:32:e3:8e:4b:66:1c:8e:70:aa:20:a2:8d:
                    5e:3f:32:18:fc:cc:d0:10:97:34:2f:9a:21:79:44:
                    9b:3a:33:22:e3:dc:e3:e5:66:a9:14:53:ab:df:a9:
                    e1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:BF:6A:31:0C:0A:22:67:BB:E5:54:68:ED:38:ED:DA:B9:BD:AC:96
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CB9XD6HpbtuWwnUjbU5AVckxxkC1RazPV1Nsez6QuJhL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CB9XD6HpbtuWwnUjbU5AVckxxkC1RazPV1Nsez6QuJhL/0/91BF6A310C0A2267BBE55468ED38EDDAB9BDAC96.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.218.188.0/23
                IPv6:
                  2804:7e8c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271631

    Signature Algorithm: sha256WithRSAEncryption
         9a:36:d6:73:81:50:51:fb:1d:3d:90:30:ce:78:9b:1d:3c:c5:
         44:d5:c2:61:11:e1:0d:d1:f4:fe:90:65:b3:33:fb:f3:e7:10:
         62:3c:cf:13:19:8f:16:ea:3b:0a:56:b2:e7:16:4f:aa:8a:ce:
         fb:39:ca:1d:dd:12:9a:0c:07:d5:46:06:9c:9d:fc:c7:11:70:
         10:ba:07:8f:0e:e9:98:09:38:11:76:b4:47:72:e9:9f:74:e5:
         dd:d5:f7:09:3e:f1:b8:04:f7:1a:30:43:af:1f:5d:c3:2f:ea:
         45:a5:db:65:13:92:7d:55:61:3f:f2:40:b8:f5:e7:59:52:ed:
         dd:9a:07:20:69:d8:90:04:8a:22:d3:db:a1:c5:7d:18:3c:c1:
         f4:dc:9d:66:04:fc:6f:84:0e:68:29:e7:32:8a:d6:16:6f:d2:
         64:18:a8:1f:4e:f2:e8:86:7d:48:b6:8f:c8:cd:c5:54:23:5f:
         41:e3:09:d7:78:af:be:df:52:1a:ce:32:a1:d9:2f:03:81:b1:
         06:f8:49:91:5a:f6:73:5f:ae:22:11:9a:83:15:ff:0c:23:5f:
         5b:78:82:88:1c:20:70:ad:19:32:ec:fc:3d:e5:34:1c:e3:88:
         c7:25:64:eb:03:bb:9c:e0:c5:66:9e:1a:7d:15:2c:83:c9:6e:
         9e:60:10:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:42 2025 by rpki-client