Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/978C99F109F4BDA1A39540870319AF5A1798DF00.cer
File:                     978C99F109F4BDA1A39540870319AF5A1798DF00.cer (raw, json)
Hash identifier:          sKjuA9RYe24afVbdR2YlJPFNAkPlK/hLoG4nZeVoKCc=
Subject key identifier:   97:8C:99:F1:09:F4:BD:A1:A3:95:40:87:03:19:AF:5A:17:98:DF:00
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       167E3A1E1CE4C1230F155CFC424BE14E6D61CF44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/93uqARYdh5sFDibDC6WGdGao4uh4mAdjSyCNXSTopZ5V/1/978C99F109F4BDA1A39540870319AF5A1798DF00.mft
caRepository:             rsync://rpki-repo.registro.br/repo/93uqARYdh5sFDibDC6WGdGao4uh4mAdjSyCNXSTopZ5V/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 13:04:39 +0000
Certificate not after:    Fri 06 Mar 2026 13:09:39 +0000
Subordinate resources:    AS: 265914
                          IP: 131.196.164.0/22
                          IP: 2804:3fc8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:7e:3a:1e:1c:e4:c1:23:0f:15:5c:fc:42:4b:e1:4e:6d:61:cf:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 13:04:39 2025 GMT
            Not After : Mar  6 13:09:39 2026 GMT
        Subject: CN=978C99F109F4BDA1A39540870319AF5A1798DF00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:38:3d:76:45:86:b1:b9:07:a2:5e:20:d1:ef:
                    8d:c7:2e:96:02:a6:f9:c1:a1:0f:5f:0d:21:91:0a:
                    f9:7a:bf:0b:4b:e5:99:e6:a1:cf:2f:92:c1:c4:4e:
                    a2:42:ec:49:dc:31:da:f1:b0:7b:59:f3:d2:1e:32:
                    e1:c3:19:ff:3c:e8:fa:f3:11:71:f1:f4:3a:9b:d9:
                    4c:3c:3d:1c:47:af:e4:f6:df:0b:d8:80:36:74:bb:
                    24:e2:91:28:b8:21:25:50:73:18:6a:b1:0f:2d:c7:
                    6b:55:0b:ac:f2:af:38:78:ab:64:34:39:35:a5:72:
                    dc:2e:84:d6:4e:09:52:41:9c:e2:56:2c:a6:8b:e4:
                    40:5f:a6:53:d1:e9:3b:45:05:46:25:36:e8:49:a7:
                    d3:ca:84:26:58:08:7a:9e:c9:73:cd:99:29:71:e6:
                    88:97:a9:76:8a:75:af:b7:81:43:37:c8:03:12:e8:
                    b2:6e:0f:7b:48:11:38:c1:d8:ef:86:b9:58:70:60:
                    c7:08:27:33:d3:49:0c:70:31:4a:97:e3:75:4f:5e:
                    19:9a:f8:88:04:42:8a:e0:4d:78:4c:28:98:98:d5:
                    00:b9:bd:e9:9d:6b:ca:2b:98:c0:f8:8c:b5:fe:c4:
                    87:50:34:4e:f9:46:a4:d5:70:ca:50:9e:9d:38:c4:
                    d3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:8C:99:F1:09:F4:BD:A1:A3:95:40:87:03:19:AF:5A:17:98:DF:00
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/93uqARYdh5sFDibDC6WGdGao4uh4mAdjSyCNXSTopZ5V/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/93uqARYdh5sFDibDC6WGdGao4uh4mAdjSyCNXSTopZ5V/1/978C99F109F4BDA1A39540870319AF5A1798DF00.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.164.0/22
                IPv6:
                  2804:3fc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265914

    Signature Algorithm: sha256WithRSAEncryption
         d9:95:d5:29:25:32:f4:42:fb:32:0f:4a:fe:9e:d0:5b:6d:ba:
         4c:23:17:66:0b:25:ad:24:36:f9:cd:ed:e1:75:15:ed:30:89:
         6f:40:7c:f4:f2:3e:40:50:f4:42:a4:a4:db:81:bc:4a:e9:29:
         40:14:cc:05:92:66:8d:44:bc:c9:af:cf:f8:a0:c7:16:d2:8e:
         8e:e5:7d:7a:96:19:54:eb:2b:68:79:08:4c:db:43:cf:45:11:
         67:b4:3f:8c:ce:e1:b7:8d:0b:e8:3c:3d:aa:d7:1f:ef:78:94:
         59:36:b1:70:23:ed:79:5a:d1:df:ed:f9:db:57:54:08:b2:fa:
         2c:d4:b1:41:43:db:58:af:31:d4:a0:9c:33:9c:d9:a7:ef:4d:
         f9:30:e6:07:13:1d:2e:6b:1a:9b:88:99:83:a9:f2:04:13:90:
         4c:ce:54:48:dc:ed:87:4e:df:10:a1:80:8f:d7:2f:e4:e0:d9:
         3f:ca:8a:70:2f:4b:18:89:d2:a9:77:be:87:1b:35:cd:55:15:
         b0:18:c4:3c:fa:cd:46:96:4e:b7:17:c2:04:d1:7e:26:48:56:
         09:6c:de:a5:10:ba:98:6c:39:10:3f:a2:97:51:ba:a6:41:94:
         36:1f:48:83:e2:c1:c5:20:cc:16:04:ec:ae:ac:4d:b6:51:9d:
         55:05:ef:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 00:29:17 2025 by rpki-client