Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer
File:                     9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.cer (raw, json)
Hash identifier:          IIr9vtoavP2vC9xBvgJNEXWZdYjAXU9I0r03uC3HHeA=
Subject key identifier:   9A:CE:5B:81:BA:45:88:A9:05:8E:32:F7:85:90:ED:4A:BF:EB:29:BA
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5BD17335CDADC22CF9D97B416FE4CD2F7F087196
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 02 Feb 2025 02:34:08 +0000
Certificate not after:    Sun 01 Feb 2026 02:39:08 +0000
Subordinate resources:    AS: 268380
                          IP: 45.239.192.0/22
                          IP: 2804:504c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d1:73:35:cd:ad:c2:2c:f9:d9:7b:41:6f:e4:cd:2f:7f:08:71:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  2 02:34:08 2025 GMT
            Not After : Feb  1 02:39:08 2026 GMT
        Subject: CN=9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:86:9a:6a:ef:fc:67:71:8e:b2:8c:23:75:33:
                    46:be:6e:fa:4c:4a:53:83:75:a7:7f:6d:f1:05:26:
                    ab:18:d3:4f:bf:10:4a:86:64:ef:45:95:e9:ae:48:
                    f7:a1:8d:d9:03:18:6d:f9:26:17:3a:1b:55:6d:e8:
                    3d:fe:5c:11:0b:cd:a1:f1:f0:f5:8d:12:54:c8:6e:
                    bb:6a:05:63:3b:17:cb:bb:13:87:a1:f7:a7:13:02:
                    4a:8e:97:9f:7d:88:da:b2:a9:5c:7b:e3:6f:3f:f0:
                    92:86:8d:e5:10:dc:35:b9:61:a7:5f:2a:3e:18:9c:
                    62:f7:af:3b:29:c5:5f:4b:c0:23:d5:1f:da:55:5a:
                    eb:9b:69:15:20:df:5f:16:72:76:be:2e:0e:9e:70:
                    bf:d2:92:77:96:1a:cd:d9:6e:1e:82:00:6b:96:39:
                    3e:c2:e9:f1:ee:60:6f:92:e3:fe:73:e2:ce:19:b3:
                    ad:e8:03:91:48:d2:0c:60:32:4c:fb:da:6d:bb:8c:
                    f3:4e:8b:c1:33:49:b7:0f:28:b4:02:66:bb:42:43:
                    c3:b0:fd:6d:77:37:36:71:be:5e:e5:0a:5a:a1:90:
                    69:18:28:2d:d4:5d:cb:cb:ea:23:9f:eb:06:21:42:
                    6e:73:0c:5e:90:05:50:c2:d5:d1:e7:e4:0a:9e:3e:
                    82:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9A:CE:5B:81:BA:45:88:A9:05:8E:32:F7:85:90:ED:4A:BF:EB:29:BA
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gzuxud1b4ucsaKYsiCzWTzyuKDzX7h1jV61AoQY3n9rr/0/9ACE5B81BA4588A9058E32F78590ED4ABFEB29BA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.192.0/22
                IPv6:
                  2804:504c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268380

    Signature Algorithm: sha256WithRSAEncryption
         bd:21:38:ae:a7:16:00:11:10:9c:c5:ed:13:ae:9e:59:a4:bc:
         24:f9:66:aa:58:c9:b7:e3:5b:9f:18:74:42:d5:6a:bd:01:4b:
         94:2b:e2:d7:d9:c0:dd:1a:0b:43:7f:1d:2f:14:7e:54:40:df:
         56:c3:bf:da:af:f5:8d:25:6b:cc:49:c4:54:c1:f6:44:5b:fc:
         91:6d:e1:3a:ef:ed:de:38:9b:78:ab:1f:53:b8:59:22:70:61:
         9d:e7:02:5d:dc:8f:ec:0c:d7:f6:18:1a:7d:f4:00:d9:65:54:
         ea:e5:62:94:83:a2:6b:0b:3f:c3:1f:89:10:67:98:a1:06:c5:
         10:2b:af:6e:9d:2c:d6:e7:07:4e:c6:81:76:e0:bf:20:f6:cc:
         52:66:5e:56:2b:02:0a:10:bf:d1:5a:7d:90:c2:e8:b3:c4:e8:
         36:93:25:4c:22:ef:c8:68:2b:c6:26:a1:9e:b3:6c:86:06:0e:
         a6:f8:f4:84:ae:42:b0:a1:5f:8b:b7:17:7a:cd:1e:f4:33:55:
         84:70:83:5b:19:88:6f:76:8a:60:5d:28:b1:1d:3f:e7:b0:49:
         bd:fd:32:5f:a0:c2:27:f0:f4:5e:0f:c2:a7:33:94:2a:6a:0e:
         d8:be:83:95:b0:88:8c:41:db:13:ba:50:a3:0e:94:ec:b3:a6:
         3a:50:a8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:28:05 2025 by rpki-client