Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer
File:                     A09E880C389D905D05A33FAE05CDA14AD03B4CE7.cer (raw, json)
Hash identifier:          M9cxHVJClnFWiLTQMi6yJgmfdAo/JEAa5gW+qQj9Jfg=
Subject key identifier:   A0:9E:88:0C:38:9D:90:5D:05:A3:3F:AE:05:CD:A1:4A:D0:3B:4C:E7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3F31593C6686A2865586EA9B1866FB69238B2EFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 04 Mar 2025 06:37:49 +0000
Certificate not after:    Tue 03 Mar 2026 06:42:49 +0000
Subordinate resources:    AS: 265393
                          IP: 168.194.164.0/22
                          IP: 2804:3364::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:31:59:3c:66:86:a2:86:55:86:ea:9b:18:66:fb:69:23:8b:2e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  4 06:37:49 2025 GMT
            Not After : Mar  3 06:42:49 2026 GMT
        Subject: CN=A09E880C389D905D05A33FAE05CDA14AD03B4CE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:48:28:12:ba:d2:b5:03:32:56:f9:77:75:84:
                    32:0c:60:e8:a1:06:fa:31:53:a6:c9:b5:17:bf:7e:
                    78:12:65:15:2f:e8:03:34:8e:7e:37:3e:be:a1:6f:
                    5e:b5:80:8a:30:80:e2:f1:2a:c8:42:79:f6:2d:fe:
                    8f:90:b0:e2:c7:63:99:74:ca:3a:70:61:69:b4:b5:
                    f9:85:d4:3c:07:20:c0:8d:3e:60:0d:8e:60:c2:67:
                    ac:e1:56:8d:18:09:b8:82:90:c3:92:10:07:4e:05:
                    b6:7a:30:42:b1:ad:4b:86:cc:51:69:12:c7:5e:e4:
                    48:e7:9c:4a:89:5c:43:4f:52:d5:e7:5d:da:e7:ca:
                    72:11:dc:42:59:c7:76:3d:ea:e2:16:59:c6:58:f7:
                    b3:5f:a0:63:eb:74:fe:92:be:33:da:ab:23:a0:7e:
                    ad:d6:6e:62:45:cc:82:07:c7:85:9e:e2:cb:0e:c3:
                    f7:d7:b3:59:7e:6f:18:c0:92:c8:d9:fe:6c:98:67:
                    dd:3b:92:29:f7:8e:30:bf:c8:9b:40:ad:7d:7c:27:
                    62:d2:86:f9:a3:e7:95:99:31:5c:c3:e9:2e:7f:a2:
                    ca:ec:9e:e7:d0:10:1f:bf:3f:e6:fd:f7:ac:b3:cd:
                    82:88:04:f3:72:b2:1c:33:53:f2:86:18:dd:31:31:
                    95:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:9E:88:0C:38:9D:90:5D:05:A3:3F:AE:05:CD:A1:4A:D0:3B:4C:E7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/A09E880C389D905D05A33FAE05CDA14AD03B4CE7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.164.0/22
                IPv6:
                  2804:3364::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265393

    Signature Algorithm: sha256WithRSAEncryption
         ac:bb:3c:19:fa:ea:f5:ee:bb:96:14:00:28:0a:40:44:23:73:
         16:02:59:15:20:58:90:85:1d:70:55:f7:c4:bd:96:fc:6d:7c:
         4e:7e:01:65:2c:59:f8:2b:3b:0d:35:6f:19:0b:1f:4e:0d:ea:
         78:6a:2a:89:47:21:b0:50:e0:17:18:82:32:6d:6d:93:4d:75:
         1b:d0:79:37:5b:fb:4f:47:f6:09:59:62:e1:8c:00:f7:30:c8:
         4f:ec:1a:37:5e:26:3f:b6:4b:6d:41:23:a9:bf:c9:5d:ab:f9:
         12:f3:fc:25:84:66:95:a2:bb:3e:c4:67:5c:6b:e1:cb:e4:b4:
         eb:6a:85:be:43:b0:85:dd:a8:72:15:80:00:65:6b:61:da:85:
         56:d1:f7:f2:5a:32:eb:b3:7d:f1:57:46:7c:2d:8c:2c:d8:da:
         e5:93:e6:40:0b:cf:d9:5d:4e:e0:0d:33:eb:77:3a:cf:61:34:
         52:55:89:9c:ec:78:b9:5a:42:21:9a:2e:01:db:e0:b9:fc:4c:
         77:0a:16:fa:f1:34:ba:8b:36:c8:ab:2a:9e:a0:a8:e3:de:24:
         27:e1:c7:3c:37:e7:3b:fa:21:bf:1f:7c:85:ff:4d:8c:a9:c5:
         bf:cf:d0:0d:7a:9d:95:01:6e:f1:fa:2d:eb:68:08:52:21:b9:
         08:74:4e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:32:21 2025 by rpki-client