Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/95D5107C3F975DC279B2EE7748B02AB010470E6D.cer
File:                     95D5107C3F975DC279B2EE7748B02AB010470E6D.cer (raw, json)
Hash identifier:          oT64zjyStcrlryI+qDKZtGgRV2cF5zSuwk8fDUZmTG0=
Subject key identifier:   95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       229BBE30C32534A53E78E7A2C2E461DD00188544
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 19 Mar 2025 18:20:24 +0000
Certificate not after:    Wed 18 Mar 2026 18:25:24 +0000
Subordinate resources:    AS: 269183
                          IP: 45.181.108.0/22
                          IP: 2804:60ac::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:9b:be:30:c3:25:34:a5:3e:78:e7:a2:c2:e4:61:dd:00:18:85:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 19 18:20:24 2025 GMT
            Not After : Mar 18 18:25:24 2026 GMT
        Subject: CN=95D5107C3F975DC279B2EE7748B02AB010470E6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:45:8c:cc:0c:94:6c:0a:41:f0:d9:cd:c4:0c:
                    1f:ab:d3:7b:fd:78:f7:4c:0d:0f:6e:65:ab:f7:84:
                    93:8b:3e:58:06:86:73:1e:43:f0:26:76:24:46:ce:
                    2a:1f:6f:c3:56:63:7a:25:6b:dd:5c:f4:86:b3:7d:
                    43:64:67:d2:cc:b4:d8:6b:cb:ff:21:02:7b:55:b4:
                    8a:a2:5f:29:c0:c9:4b:38:5b:cf:c7:48:48:d8:4b:
                    d5:c9:e9:74:88:49:9a:65:46:ea:56:fc:f4:c9:10:
                    ed:52:62:f9:83:15:d9:18:9e:ca:0b:3d:55:21:bc:
                    fb:69:a4:bf:85:13:34:fa:49:45:af:80:74:b0:20:
                    e9:6b:c1:75:9a:f4:c2:e3:3f:05:80:a2:fb:b2:f3:
                    fe:fc:cc:3e:f7:2d:8a:a7:7b:4f:57:3a:7b:92:eb:
                    2d:d5:97:af:53:fd:b8:b7:83:06:19:ee:25:e5:4b:
                    2a:fb:9f:a6:10:e8:e9:5f:31:fb:e2:6e:32:65:fa:
                    78:b3:fd:39:c7:9c:33:f5:6d:03:8a:af:db:5b:d7:
                    3e:e5:0c:d8:de:1c:b5:8a:8a:06:94:c2:14:da:a1:
                    7d:41:9a:f0:cd:67:64:b8:91:34:0a:eb:d0:d6:59:
                    e1:0c:45:08:32:69:f6:76:c4:5b:37:82:7c:67:c3:
                    03:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:D5:10:7C:3F:97:5D:C2:79:B2:EE:77:48:B0:2A:B0:10:47:0E:6D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7sJP6q1KTLVYtm34UGcrxFSRwVzkyqW7EesNveYHEbDb/0/95D5107C3F975DC279B2EE7748B02AB010470E6D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.108.0/22
                IPv6:
                  2804:60ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269183

    Signature Algorithm: sha256WithRSAEncryption
         26:6e:af:94:9a:2a:26:6b:78:67:74:79:d8:00:27:7e:ef:b4:
         56:51:eb:be:91:8a:a0:fe:7c:b0:64:43:cf:39:64:f4:bc:ee:
         cd:94:87:db:4a:d2:9a:93:14:59:85:90:eb:7d:04:78:aa:bb:
         62:4f:fe:d3:cd:9b:f1:60:03:36:5b:33:0f:04:3e:ce:d5:2c:
         1c:1d:5c:ad:01:1a:1d:93:0d:fe:ef:10:2b:b0:30:04:68:ab:
         10:2d:45:e4:1f:b7:55:3e:5a:67:8f:97:b7:7f:d8:07:e4:f4:
         23:fa:e1:0e:73:bd:0c:ef:52:46:32:6f:64:b5:17:eb:64:42:
         aa:8e:53:0d:95:ca:bb:3d:0d:89:f6:89:ba:8c:19:75:e2:bc:
         c8:23:3a:8c:3c:1a:80:39:fb:c7:6f:30:d6:11:f9:9b:cb:a0:
         88:6a:d5:30:b7:46:86:57:34:a6:c1:21:1f:82:81:3c:82:6e:
         39:b9:17:1d:a3:41:17:3f:ca:c4:bf:37:bd:fe:d6:95:83:a8:
         1e:82:81:9d:68:ab:62:48:d6:ab:ff:2f:09:14:29:82:9f:78:
         11:98:fe:e7:be:b1:11:6a:50:96:f9:2c:2b:a0:45:53:85:bd:
         2e:4a:e0:1e:90:86:45:f2:4b:c1:23:12:88:0f:53:cf:1e:aa:
         81:5b:af:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:27:51 2025 by rpki-client