Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer
File:                     9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.cer (raw, json)
Hash identifier:          HQKT4X7KuBOC85pSsZ99LLwTXeKUTyHxXZP7YeSBAT8=
Subject key identifier:   93:92:D1:DC:A3:77:01:F3:AC:DB:A5:DA:E6:B4:4D:12:5C:28:AE:71
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       46B89A40E15EC2DEBDB8014DA1623B54E3372BFE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 19:03:39 +0000
Certificate not after:    Thu 05 Mar 2026 19:08:39 +0000
Subordinate resources:    AS: 268424
                          IP: 45.161.4.0/22
                          IP: 2804:5100::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b8:9a:40:e1:5e:c2:de:bd:b8:01:4d:a1:62:3b:54:e3:37:2b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 19:03:39 2025 GMT
            Not After : Mar  5 19:08:39 2026 GMT
        Subject: CN=9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:24:06:62:aa:73:99:c9:b0:d8:84:f4:6d:2a:
                    10:48:6d:36:83:10:88:a9:78:0f:6f:31:b4:98:4c:
                    d9:e9:68:19:e0:71:0b:87:7b:d8:7d:23:8e:4d:3e:
                    70:e6:1e:2f:23:64:ef:16:ca:40:7b:4e:44:0f:fa:
                    fa:55:78:a5:0e:57:bb:f1:c9:99:45:cd:19:f0:67:
                    24:8a:61:bb:58:3b:16:67:ba:19:ab:e0:33:d1:1b:
                    4f:85:6f:cf:f7:7d:ab:c4:85:84:64:1f:cc:42:28:
                    c5:50:5a:96:21:20:34:8d:00:ee:e8:75:be:1c:79:
                    e5:d6:52:49:3a:3a:22:d5:2d:37:c1:fc:01:c6:a5:
                    90:16:f9:96:c9:f5:cc:ca:85:4a:78:2c:4c:f6:32:
                    57:80:32:43:bc:9f:1b:17:6f:51:75:32:62:4f:d6:
                    b1:74:6e:c8:98:f4:e0:31:a1:cd:2d:87:fa:f6:ae:
                    10:5b:95:fa:38:5a:a3:80:49:2d:2f:fb:24:fb:82:
                    dd:b1:6f:61:e5:2f:9d:86:44:a6:f1:90:d1:43:27:
                    4d:5e:ec:4d:71:15:0e:f2:85:a0:3e:3b:f0:b1:66:
                    14:f2:e0:cb:f2:73:57:5c:64:a7:0f:ed:44:59:8d:
                    1c:1b:de:7b:24:8d:6b:a5:b7:ae:d9:96:fb:4b:46:
                    e4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                93:92:D1:DC:A3:77:01:F3:AC:DB:A5:DA:E6:B4:4D:12:5C:28:AE:71
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/1/9392D1DCA37701F3ACDBA5DAE6B44D125C28AE71.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.4.0/22
                IPv6:
                  2804:5100::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268424

    Signature Algorithm: sha256WithRSAEncryption
         c3:2b:30:e9:ae:5f:ff:51:f3:ee:9a:82:da:26:d1:38:9c:d6:
         e1:1d:fb:25:c0:fd:f4:eb:71:54:69:9f:fb:59:2f:81:a5:3c:
         c7:bf:38:aa:b6:71:55:90:78:d1:4b:ae:ec:27:65:d0:53:d7:
         0c:47:24:39:b3:9e:59:8a:85:ea:6f:cb:f6:fd:90:15:a9:5d:
         e7:f5:b1:d5:e7:a4:b2:69:c8:d3:ac:8b:b2:ff:de:c7:f2:a1:
         d5:7b:63:31:25:69:45:f6:fe:15:1f:ba:83:9e:f7:e3:a8:a2:
         ef:7b:14:55:24:e7:21:e6:67:25:18:ec:df:e4:55:cc:d0:06:
         91:e2:79:64:e7:b6:3f:7f:77:d5:dd:ee:5a:f8:d8:ce:e4:0f:
         7b:e6:6f:47:7e:66:dc:33:00:ce:43:64:00:06:3a:ce:8f:d7:
         69:1a:10:11:04:83:45:45:b3:b9:73:8c:21:a7:c2:4c:b8:4f:
         9d:1d:ab:8e:79:5f:8d:a1:53:fb:aa:f9:31:48:40:e8:af:21:
         8f:a3:e7:17:ac:d1:da:2d:d5:9e:c7:6f:4a:7f:89:94:ec:43:
         4e:cf:60:73:de:81:8b:54:e6:4d:0f:3c:a6:05:10:68:c8:a4:
         c4:d1:d9:c0:d2:08:94:f8:70:ad:1d:22:c4:50:02:59:25:fd:
         7f:cc:0b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:44:03 2025 by rpki-client