Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9C1E7856C241ECF5872A2E00792054BE423DCD53.cer
File:                     9C1E7856C241ECF5872A2E00792054BE423DCD53.cer (raw, json)
Hash identifier:          xJG0EmQO18EN4XCg7K9/ZW6y8wAR0gDe/B07A4Xbv2U=
Subject key identifier:   9C:1E:78:56:C2:41:EC:F5:87:2A:2E:00:79:20:54:BE:42:3D:CD:53
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1C90719BC90F59635EDA678AAAAA6F04C84E85A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/9C1E7856C241ECF5872A2E00792054BE423DCD53.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Jan 2025 13:59:16 +0000
Certificate not after:    Mon 12 Jan 2026 14:04:16 +0000
Subordinate resources:    AS: 270577
                          IP: 187.94.12.0/22
                          IP: 2804:6e20::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:90:71:9b:c9:0f:59:63:5e:da:67:8a:aa:aa:6f:04:c8:4e:85:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 13 13:59:16 2025 GMT
            Not After : Jan 12 14:04:16 2026 GMT
        Subject: CN=9C1E7856C241ECF5872A2E00792054BE423DCD53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8e:36:a1:ac:bb:98:d9:e0:f4:77:c7:f4:17:
                    89:f3:8c:04:62:00:b4:1e:d5:23:f1:eb:52:38:bb:
                    b1:2a:41:a1:71:be:95:46:67:50:dc:ee:f3:90:f8:
                    e5:9c:8e:04:c4:ec:d7:37:e8:74:f1:85:7c:b0:70:
                    8c:78:d0:8c:cd:f0:b1:30:6b:ff:4d:28:cc:a1:43:
                    d8:83:74:34:85:85:1f:90:ce:8b:22:43:71:69:8d:
                    da:e8:8c:c5:63:30:a4:7d:48:b8:77:1e:ba:bc:e4:
                    88:be:8f:3f:6b:f3:29:c7:de:84:27:9e:90:60:cf:
                    a1:61:0f:b3:b7:07:52:2e:06:ef:fb:ad:19:22:7b:
                    00:ee:8c:b2:cb:82:2e:ab:8a:d3:29:89:10:d1:92:
                    74:07:e8:40:24:7a:dc:89:e7:d2:d4:3f:4b:a0:73:
                    35:5a:22:d8:74:55:db:b3:bf:da:26:42:90:47:9d:
                    e3:7c:38:a0:4a:d3:ac:1b:f2:5f:cf:b4:1a:c6:16:
                    03:ed:d8:1a:80:40:c3:0e:15:57:ef:28:44:f2:ae:
                    12:37:a1:08:5e:a0:43:b1:a3:6a:06:6f:48:31:0d:
                    f0:9b:9b:61:2d:00:26:13:41:cc:1c:cf:27:a6:c5:
                    e4:85:15:eb:07:e4:f4:b9:18:0c:b2:cc:ac:b0:9d:
                    2a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                9C:1E:78:56:C2:41:EC:F5:87:2A:2E:00:79:20:54:BE:42:3D:CD:53
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/9C1E7856C241ECF5872A2E00792054BE423DCD53.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.12.0/22
                IPv6:
                  2804:6e20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270577

    Signature Algorithm: sha256WithRSAEncryption
         8c:75:52:4e:df:10:58:c2:86:cf:9f:93:11:51:a9:ee:a3:18:
         1f:0a:4f:66:f6:17:61:24:7b:95:67:bc:fa:86:99:aa:2f:7c:
         a9:b0:fd:eb:89:04:6c:23:bd:8a:19:2f:a8:3d:ba:67:a4:07:
         66:ae:12:9f:8c:ac:a1:9e:6d:24:5f:33:ed:2b:8f:b6:cc:25:
         97:cf:75:9d:ba:13:c0:64:0f:9d:a5:d2:59:84:dd:6c:f3:be:
         c2:e4:59:39:84:a0:51:fb:7d:46:4f:6d:41:b7:a3:83:46:95:
         50:f5:60:95:2d:d2:9a:c2:73:2e:11:b2:a3:0b:15:6c:87:5f:
         5e:4b:7b:e9:65:6a:20:34:e1:d6:35:8d:6f:36:8d:df:51:61:
         55:f0:de:e0:76:ba:c9:d1:9d:3e:f9:bc:d0:60:97:8a:cf:0e:
         62:05:ae:7c:7e:1c:bc:9e:39:67:43:28:cf:12:81:2d:de:eb:
         ba:25:56:13:df:4c:83:dc:14:cd:b9:3a:4c:9c:38:3f:d8:7e:
         dc:78:29:7c:b2:3f:e8:f4:a5:2d:0e:c9:f7:99:1a:76:b3:9c:
         51:b0:ce:a0:e0:c3:be:62:f9:14:9c:cf:fd:82:9a:2b:15:29:
         54:e4:bd:03:b0:9e:00:3f:44:c7:14:80:f8:83:25:31:09:3e:
         d4:a2:e2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:22:49 2025 by rpki-client