Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/933EF944BDE41ACCC61571758CD69E6024787A7A.cer
File:                     933EF944BDE41ACCC61571758CD69E6024787A7A.cer (raw, json)
Hash identifier:          RLRUJbEWeJFdDkvXfD2GSyhbhceP5QuY22k7GGzTxwI=
Subject key identifier:   93:3E:F9:44:BD:E4:1A:CC:C6:15:71:75:8C:D6:9E:60:24:78:7A:7A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5759A4CC7213A6006B4DBBE8AC9C8114C18215F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/0/933EF944BDE41ACCC61571758CD69E6024787A7A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Mar 2025 16:18:17 +0000
Certificate not after:    Fri 27 Mar 2026 16:23:17 +0000
Subordinate resources:    AS: 273747
                          IP: 2804:8ba8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:59:a4:cc:72:13:a6:00:6b:4d:bb:e8:ac:9c:81:14:c1:82:15:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 28 16:18:17 2025 GMT
            Not After : Mar 27 16:23:17 2026 GMT
        Subject: CN=933EF944BDE41ACCC61571758CD69E6024787A7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6d:c4:dd:12:5d:9f:1d:c2:e1:16:12:88:f9:
                    b4:ee:bb:7c:f5:4a:7c:8a:56:0b:a3:16:b9:9b:a4:
                    36:45:4c:6d:43:f8:e5:17:f6:88:c6:12:88:4f:38:
                    95:f5:75:4f:29:3c:23:e2:3a:a6:5e:89:a9:0d:b5:
                    fc:44:dd:7e:ae:87:ae:c2:ea:95:75:f5:e6:b5:c8:
                    f6:d2:37:d2:2a:73:5e:30:22:e6:6f:b1:61:1f:84:
                    35:d5:b9:d0:2f:6f:f3:fc:5b:c4:3a:01:78:91:62:
                    66:3f:58:e6:45:a8:4e:69:97:7b:db:ea:d5:b7:99:
                    ac:8f:b2:e9:25:fc:81:83:6c:e3:2c:99:c9:ce:2c:
                    77:b0:7e:7d:10:ed:2e:bb:8e:59:aa:7b:72:5e:d7:
                    7f:bc:6c:a7:ec:d9:f3:96:f8:1c:e8:ab:6a:79:55:
                    99:a6:2a:e1:d3:17:14:4e:e4:0b:39:14:8f:5d:09:
                    35:0a:08:64:15:eb:ae:ef:f6:49:af:79:00:5c:c0:
                    13:11:45:c9:25:c2:90:6a:8f:ac:ce:0c:c5:89:05:
                    3c:11:f5:c9:e2:90:07:b5:89:fb:2a:93:3d:b4:dd:
                    d3:88:e7:e8:37:9c:af:0f:5e:ae:20:db:0d:42:c4:
                    6d:cf:d9:23:a9:ab:e8:c4:64:29:38:97:df:9d:39:
                    0f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                93:3E:F9:44:BD:E4:1A:CC:C6:15:71:75:8C:D6:9E:60:24:78:7A:7A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HSuzjanEE9zndkbZKDb4K3tfGmVc3sVxN9eDkkTsPqNL/0/933EF944BDE41ACCC61571758CD69E6024787A7A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ba8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273747

    Signature Algorithm: sha256WithRSAEncryption
         62:f4:ed:3c:ad:65:d2:39:42:fc:a5:14:05:2a:47:52:50:bb:
         be:b6:42:e4:a1:dd:ba:df:39:20:a2:b4:ab:6c:0a:6d:c5:60:
         f8:3f:b8:0e:52:96:8b:ac:02:22:25:63:84:20:c6:6c:49:21:
         58:2d:5e:51:8b:90:9c:91:10:37:02:bf:c3:df:a3:9a:67:ea:
         d5:3d:12:48:3c:cd:d9:30:ff:c5:90:97:0a:7b:1e:21:0d:7a:
         c1:37:ee:9e:ad:61:30:35:55:dd:95:99:80:d6:31:03:af:e3:
         a2:4c:f9:e0:35:82:10:fb:3a:29:93:fc:a5:ab:9e:bd:02:26:
         71:fe:bb:22:84:42:a6:ae:e8:4a:5a:f3:ae:d9:fa:98:8f:63:
         d4:1e:ad:d0:3a:f4:65:eb:8a:af:93:69:d8:65:17:9e:50:66:
         eb:58:b0:cc:0d:66:d7:47:95:7a:9c:cf:8a:bc:a3:da:19:d1:
         c4:77:17:88:d4:51:63:fb:81:d0:2a:7d:03:13:9b:36:50:de:
         5f:4e:36:24:cc:2b:d6:00:35:f5:e8:b6:99:11:cd:a3:30:1e:
         f1:6e:83:d1:af:49:1a:2c:ef:bf:1d:6c:a9:69:13:ec:f3:46:
         e3:70:d1:c5:b0:67:fe:8c:7c:ab:29:07:ea:57:d3:ea:b9:f1:
         68:1b:ea:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:51 2025 by rpki-client