Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A16A1ADAA6EBB4CA76943468F8AB79D03BC7AE4E.cer
File:                     A16A1ADAA6EBB4CA76943468F8AB79D03BC7AE4E.cer (raw, json)
Hash identifier:          QI/YZPJTJqiEUTCr9l6SHKJ1h/AuzlyCG2ZPZG1kz9w=
Subject key identifier:   A1:6A:1A:DA:A6:EB:B4:CA:76:94:34:68:F8:AB:79:D0:3B:C7:AE:4E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F3C6581580C1E155B13D160BFB51023F8A21E02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/A16A1ADAA6EBB4CA76943468F8AB79D03BC7AE4E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Feb 2025 19:04:42 +0000
Certificate not after:    Thu 12 Feb 2026 19:09:42 +0000
Subordinate resources:    AS: 268224
                          IP: 45.236.64.0/22
                          IP: 2804:4ddc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:3c:65:81:58:0c:1e:15:5b:13:d1:60:bf:b5:10:23:f8:a2:1e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 13 19:04:42 2025 GMT
            Not After : Feb 12 19:09:42 2026 GMT
        Subject: CN=A16A1ADAA6EBB4CA76943468F8AB79D03BC7AE4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:85:79:76:37:fe:51:91:e3:c6:bf:57:9b:dd:
                    56:fb:6b:32:19:b8:30:17:2c:9f:80:fb:ff:23:c9:
                    61:cf:50:ae:7f:db:a6:f2:84:00:76:54:7d:63:ff:
                    d6:98:57:99:59:13:9b:70:5a:41:21:1d:ab:6c:60:
                    cc:e9:f4:de:73:a3:00:27:2b:1e:d3:3c:aa:17:9e:
                    1a:93:67:c2:ac:0d:29:1b:c0:1e:20:83:1e:4e:37:
                    53:a8:78:47:9f:3d:2d:47:1e:7d:7f:e4:b8:f4:27:
                    80:21:8a:ef:e1:a1:08:76:b0:1d:b8:3a:a8:e4:80:
                    38:55:93:77:bf:e2:ce:9b:aa:d9:ec:2e:d1:df:ff:
                    37:ba:97:3a:34:61:a6:8b:1d:16:a6:f1:e5:09:2b:
                    b7:c8:0e:99:ed:dd:64:46:e5:2b:48:c0:10:4d:8f:
                    5d:1f:91:7d:72:79:8d:ec:21:d2:b2:ac:ce:ae:2c:
                    41:9c:85:5e:3d:05:5f:97:5c:0c:54:2c:2f:ac:fb:
                    ca:4f:19:1d:5b:8f:4e:e4:d4:d8:11:69:83:22:98:
                    b1:cf:f2:c7:4e:74:c5:12:81:bb:3a:0d:94:02:72:
                    8b:cf:06:13:3d:fd:36:6a:7a:da:2f:91:af:07:69:
                    d1:57:31:3a:a3:87:98:f1:39:b4:d7:b4:51:b9:8d:
                    af:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:6A:1A:DA:A6:EB:B4:CA:76:94:34:68:F8:AB:79:D0:3B:C7:AE:4E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FynAVXNrR85fKBb4hJYcZJPK8PyHdxWrsmoFQAYbLGDK/0/A16A1ADAA6EBB4CA76943468F8AB79D03BC7AE4E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.64.0/22
                IPv6:
                  2804:4ddc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268224

    Signature Algorithm: sha256WithRSAEncryption
         66:eb:a5:d5:91:8e:00:67:7c:6c:56:c4:b6:47:20:d6:0d:a1:
         85:bb:2e:4d:11:c3:0b:1a:a2:cc:f4:88:f4:d1:fc:62:f7:5f:
         3e:37:3c:a0:4f:6f:a3:24:76:d7:6b:29:93:43:63:8f:cd:8f:
         80:ef:80:3b:61:d1:42:1c:db:03:11:84:64:b4:cf:8f:1b:17:
         d9:f3:4f:94:d7:a8:c2:16:0f:ba:82:ee:a3:7b:12:ac:40:31:
         20:2d:20:16:d6:b5:d8:35:e6:12:31:ca:91:86:c1:30:36:99:
         ce:9c:c8:db:79:88:72:9a:9d:6c:50:42:85:17:3c:72:72:33:
         a0:8a:aa:c0:77:2e:4e:e6:3d:7e:d8:e4:04:6e:6c:e2:12:af:
         70:66:26:21:62:ff:05:10:ae:2a:cb:4d:c1:3f:ec:d9:a2:7e:
         32:5c:7f:38:9e:aa:b0:07:20:d0:0c:5c:be:bf:74:19:da:a5:
         60:e7:8b:24:fd:3a:ce:56:6e:8b:35:0f:c4:43:37:8b:46:ad:
         fb:b0:f5:ad:2b:e4:19:7e:37:75:0f:48:31:50:4e:e0:d2:b4:
         0f:2f:2e:c0:fe:cc:43:dd:bf:9f:c8:a5:46:83:c5:08:ea:b4:
         ac:ae:23:1b:d4:11:f8:87:c6:82:92:a4:e3:9c:d2:a6:7d:a6:
         69:40:d9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:18:53 2025 by rpki-client