Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A007AB2F2C1F6190CDD3DE8652B254486A891BA5.cer
File:                     A007AB2F2C1F6190CDD3DE8652B254486A891BA5.cer (raw, json)
Hash identifier:          TQUFDKt119HxMHbntptRyn0H2MTQKv0RvcT3P1RJr6E=
Subject key identifier:   A0:07:AB:2F:2C:1F:61:90:CD:D3:DE:86:52:B2:54:48:6A:89:1B:A5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       76520F40FEE141562BD7B0B88D4517E5E588678E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/1/A007AB2F2C1F6190CDD3DE8652B254486A891BA5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 09:04:32 +0000
Certificate not after:    Thu 03 Apr 2025 09:09:32 +0000
Subordinate resources:    AS: 269077
                          IP: 45.179.44.0/22
                          IP: 2804:5f1c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:52:0f:40:fe:e1:41:56:2b:d7:b0:b8:8d:45:17:e5:e5:88:67:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 09:04:32 2024 GMT
            Not After : Apr  3 09:09:32 2025 GMT
        Subject: CN=A007AB2F2C1F6190CDD3DE8652B254486A891BA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:15:e5:a1:ad:4b:bc:50:28:40:7f:86:6a:6e:
                    be:cc:50:c8:40:9b:4f:94:27:00:f5:61:b3:ef:4b:
                    b8:b2:8b:6f:9b:57:90:02:55:ed:1d:77:18:f3:24:
                    37:03:d1:0b:a6:59:16:72:3b:39:b5:12:d7:ab:cd:
                    1e:a8:0b:7d:35:32:9e:d7:dd:18:9e:82:06:59:90:
                    61:a0:f6:c1:49:cf:00:51:05:a8:8f:b5:3b:1a:4d:
                    1f:c1:9a:da:17:f9:f7:be:0f:8c:31:da:a6:91:19:
                    67:81:2f:b4:99:7e:37:ca:ad:d9:be:f9:90:7b:f8:
                    4e:71:1f:29:d6:17:41:af:df:14:21:53:c9:42:fa:
                    b4:45:db:fe:2e:e9:04:bd:95:6f:66:e3:fa:10:79:
                    d2:68:ce:82:91:a9:23:a5:9f:7c:63:b5:e6:bb:e3:
                    e4:96:31:d2:bd:6a:bc:30:d1:36:65:e3:7f:a9:a9:
                    11:a2:66:0f:9c:fd:a4:5c:ff:79:cd:86:8e:3c:4f:
                    c9:60:34:d9:6f:32:68:dc:f3:9f:16:02:5b:69:d6:
                    f6:fb:d4:dd:24:e4:39:ee:c6:44:26:78:58:53:3c:
                    ce:63:c2:6b:e9:05:80:92:8a:0a:8c:bd:c0:be:84:
                    18:e6:80:57:b7:cc:3f:03:b2:18:88:0a:2c:5e:98:
                    f8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:07:AB:2F:2C:1F:61:90:CD:D3:DE:86:52:B2:54:48:6A:89:1B:A5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6fnjXZeBMPrWuhQSie9QUNm7p6tMiPXRzPK7mHFr5xcb/1/A007AB2F2C1F6190CDD3DE8652B254486A891BA5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.44.0/22
                IPv6:
                  2804:5f1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269077

    Signature Algorithm: sha256WithRSAEncryption
         6d:ee:38:db:45:f8:69:63:ce:ef:6f:d0:3f:31:76:1a:84:14:
         17:4f:45:b9:12:68:f9:0b:00:a9:76:ca:3b:52:fd:dd:d6:a6:
         cd:c3:8e:53:1f:74:d0:5d:19:f6:2f:0c:55:8a:6c:ec:e0:97:
         af:59:54:1a:fa:1b:61:8e:08:25:e5:e8:f5:f2:74:78:1b:58:
         39:ee:40:8c:15:77:1e:fd:26:b6:a5:fe:68:59:46:2c:59:08:
         b6:19:f6:78:7f:38:8f:8f:1f:30:e5:75:a2:97:84:2c:f4:00:
         d8:e2:1d:23:be:27:c9:7b:b9:fc:e7:17:4b:a2:03:a0:9b:5d:
         e0:d1:b7:77:9c:07:74:e4:64:cb:f6:4a:bf:f1:75:a1:ca:ed:
         de:fe:f9:9d:34:5d:58:76:de:16:7c:8e:f1:2f:de:6e:30:03:
         e3:62:99:35:42:3c:d0:b3:c5:54:f5:ee:8a:cd:4c:d7:18:b9:
         99:f6:e1:1d:c0:02:67:26:0c:30:b7:b8:6c:48:65:cb:8b:18:
         15:17:29:77:fe:1e:7e:52:dc:6e:40:60:c9:a0:c8:55:a2:75:
         94:dc:f8:53:56:4f:dc:42:0f:08:96:dc:e2:9a:34:be:b0:ce:
         83:62:03:60:71:fb:01:a1:44:31:a1:de:f7:90:d4:01:3c:c0:
         11:1a:87:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:28:45 2025 by rpki-client