Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/961C10291E95158CF12D8EAA6CC5D0B05DE85838.cer
File:                     961C10291E95158CF12D8EAA6CC5D0B05DE85838.cer (raw, json)
Hash identifier:          W1v5bWsi3d4ovE+DURVavO/8IKYsywDr2Ewe54kDrL8=
Subject key identifier:   96:1C:10:29:1E:95:15:8C:F1:2D:8E:AA:6C:C5:D0:B0:5D:E8:58:38
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6228AACB548783C30D0F94609727CF3B29822CAF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/1/961C10291E95158CF12D8EAA6CC5D0B05DE85838.mft
caRepository:             rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 02:44:17 +0000
Certificate not after:    Fri 06 Mar 2026 02:49:17 +0000
Subordinate resources:    AS: 266973
                          IP: 45.225.228.0/22
                          IP: 2804:462c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:28:aa:cb:54:87:83:c3:0d:0f:94:60:97:27:cf:3b:29:82:2c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 02:44:17 2025 GMT
            Not After : Mar  6 02:49:17 2026 GMT
        Subject: CN=961C10291E95158CF12D8EAA6CC5D0B05DE85838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:35:94:8c:f2:b7:4a:11:eb:1c:31:c5:6d:20:
                    8e:c6:3d:19:68:8c:dd:59:ac:b3:60:35:6f:18:90:
                    e4:56:02:6e:ef:06:b2:6c:f6:da:ba:5c:5e:c9:2d:
                    34:a7:63:f9:c9:66:59:ba:f0:5d:d2:65:6a:a4:72:
                    1a:f6:6c:bd:dc:62:c4:8c:37:93:8c:c8:7c:7a:e7:
                    8e:ae:02:83:5c:2e:7c:9b:93:c3:fb:9a:b1:bb:bf:
                    44:96:ad:c7:ae:e4:77:26:a4:58:c1:55:17:8c:1b:
                    80:2b:4d:a8:26:e4:3a:b4:f7:e4:f5:d1:ca:1c:0e:
                    57:60:cc:b4:19:b0:e7:ab:32:a9:55:a6:1e:24:6f:
                    a4:6a:81:4b:22:27:ea:5c:ed:47:fd:b6:3c:95:d2:
                    63:9f:8d:e2:f4:17:96:c9:23:5a:d0:99:2a:82:ae:
                    d2:16:63:00:44:3a:67:cc:6d:c9:cb:b3:43:30:b8:
                    87:30:3b:d4:9c:28:da:b2:50:d5:18:bf:e7:b5:55:
                    0e:10:44:24:c1:5e:b4:6b:42:41:59:3f:3e:e1:9f:
                    92:d3:03:be:6a:e4:fc:3e:45:c3:76:68:df:2e:b9:
                    0d:ed:29:b8:cc:a7:0d:30:1f:9c:09:9f:cb:c0:52:
                    1d:4b:ef:4f:25:ee:bb:ee:17:e9:a8:c4:c1:2e:f6:
                    41:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                96:1C:10:29:1E:95:15:8C:F1:2D:8E:AA:6C:C5:D0:B0:5D:E8:58:38
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/RBceUgC3SBgwgeZFWQ96iwkHjfKFn2zeJp8vipxkuJv/1/961C10291E95158CF12D8EAA6CC5D0B05DE85838.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.228.0/22
                IPv6:
                  2804:462c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266973

    Signature Algorithm: sha256WithRSAEncryption
         84:49:01:3c:5f:d8:bd:57:b6:ce:ef:af:2a:7d:b1:cf:80:3a:
         fd:9b:4f:df:b2:03:40:76:de:d5:fe:00:79:93:11:2d:ed:87:
         b1:b0:6e:b8:96:4f:57:54:84:ca:22:e6:ea:f5:01:8f:eb:1e:
         6b:58:3f:60:fa:f4:2f:60:ba:46:d7:60:21:d5:c1:42:c0:91:
         c5:62:a2:b7:95:20:3f:26:2d:c2:c3:9d:57:96:00:c4:60:44:
         fd:13:72:8c:0e:96:ef:d9:75:36:ed:c3:63:64:aa:41:0b:08:
         81:ec:d0:57:da:8f:dc:b0:b9:8f:67:70:03:12:14:f2:a1:5c:
         d3:f9:51:b5:63:5b:67:41:00:fc:76:7c:c4:d6:77:63:73:a4:
         b0:1c:14:a7:bc:0a:05:a5:21:f7:05:63:83:13:9c:0f:b7:33:
         38:82:11:4f:51:03:a7:10:6d:e4:c4:5f:4e:1e:9d:d3:66:af:
         30:fa:ba:45:4b:8b:6c:80:9e:c9:ee:3c:dd:af:5d:8d:03:64:
         46:18:f2:f5:99:90:a6:df:18:f3:be:75:20:a3:31:43:77:9a:
         94:36:69:fb:94:f1:23:0e:b4:69:16:81:df:90:20:e7:2c:2b:
         b7:cb:0e:ce:42:1b:9a:2f:d3:06:d7:01:1f:16:f7:6c:51:0d:
         c6:a7:6a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:05:36 2025 by rpki-client