Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A2D9E18B7568736084B06933A513491A64F7CA6A.cer
File:                     A2D9E18B7568736084B06933A513491A64F7CA6A.cer (raw, json)
Hash identifier:          MQOBzUzwlJGCzmAv6LF8okIX3EACLaDhnMtN2UOrrIg=
Subject key identifier:   A2:D9:E1:8B:75:68:73:60:84:B0:69:33:A5:13:49:1A:64:F7:CA:6A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0510E164A14880714C818FD89B34CBAF3437B1A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2VYvv2wyXPFZQCUtGe6AAUV9f6W7SFEDTgyfNBeXfdxJ/0/A2D9E18B7568736084B06933A513491A64F7CA6A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2VYvv2wyXPFZQCUtGe6AAUV9f6W7SFEDTgyfNBeXfdxJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Feb 2025 17:32:55 +0000
Certificate not after:    Mon 09 Feb 2026 17:37:55 +0000
Subordinate resources:    AS: 263305
                          IP: 191.6.132.0/22
                          IP: 2804:13f8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:10:e1:64:a1:48:80:71:4c:81:8f:d8:9b:34:cb:af:34:37:b1:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 10 17:32:55 2025 GMT
            Not After : Feb  9 17:37:55 2026 GMT
        Subject: CN=A2D9E18B7568736084B06933A513491A64F7CA6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c8:a6:92:f8:f3:e7:ca:4c:1e:bd:3e:f7:21:
                    53:b0:e7:6b:ef:61:c7:1c:e4:36:9e:64:d8:55:30:
                    f4:fb:f1:0a:32:25:2a:b9:8a:55:3c:74:23:42:d1:
                    27:6b:b5:c9:d0:41:74:2d:3f:bb:6f:a8:b5:6d:74:
                    9e:2c:3d:1a:e5:60:9f:c9:c3:63:6e:2f:db:90:72:
                    af:a7:31:06:ad:ca:db:d1:7c:91:1a:dd:d1:d9:44:
                    4a:23:38:04:1c:aa:8e:c2:19:f4:53:79:1c:e4:89:
                    1b:19:e2:43:57:f0:de:ff:1c:a0:65:c5:a3:97:f1:
                    b7:e6:04:00:a3:a5:17:5f:b2:55:e5:bc:5e:9f:4d:
                    88:6b:42:b9:61:8b:9b:ca:a3:55:c2:d9:c6:2e:69:
                    89:11:95:d7:31:ff:fa:16:47:2d:c2:d0:b8:a2:f0:
                    7c:0d:ff:99:f2:83:f8:fc:c7:4b:2b:5d:86:c4:95:
                    4f:2e:f2:a9:d3:fb:51:a5:21:c6:3e:1f:ce:d2:df:
                    d0:b9:cf:f5:38:2f:26:66:12:47:a7:15:f2:ea:10:
                    46:a3:ec:92:33:77:e6:d1:ea:42:8b:af:43:42:70:
                    66:cf:0a:f8:4f:73:e6:a5:43:46:fd:6c:3f:94:16:
                    e2:59:b3:7b:8b:3a:dc:c6:55:0a:1c:c7:b2:9c:6f:
                    6e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A2:D9:E1:8B:75:68:73:60:84:B0:69:33:A5:13:49:1A:64:F7:CA:6A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2VYvv2wyXPFZQCUtGe6AAUV9f6W7SFEDTgyfNBeXfdxJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2VYvv2wyXPFZQCUtGe6AAUV9f6W7SFEDTgyfNBeXfdxJ/0/A2D9E18B7568736084B06933A513491A64F7CA6A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.132.0/22
                IPv6:
                  2804:13f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263305

    Signature Algorithm: sha256WithRSAEncryption
         75:fa:7e:ea:5f:37:7a:e0:5f:9a:a3:46:5d:58:d6:d5:c6:c3:
         03:3f:49:41:28:59:81:1f:e7:df:d4:f2:c7:95:06:8e:d6:6c:
         09:e2:72:28:a1:19:b4:74:4e:39:a2:17:ef:65:56:ba:5a:91:
         7c:cc:9e:fa:db:fb:c9:55:3e:ed:34:ee:85:23:a0:53:56:a2:
         9a:1e:15:03:f9:f9:6c:05:e2:a6:14:8c:7a:37:27:20:fc:10:
         dd:73:17:c1:8e:0c:e5:a0:e9:f3:c9:e2:12:37:99:31:ef:00:
         1d:0f:c7:14:cc:3c:c6:4f:43:dd:74:c1:e7:36:91:ef:67:c9:
         80:a6:36:fb:89:47:b3:fa:c5:77:7b:d2:bf:99:85:8c:bf:11:
         ab:67:05:fd:99:0a:30:35:50:0f:22:05:4a:a7:9e:56:be:07:
         c7:fa:47:83:5b:1d:7e:f6:5b:99:9b:3a:e2:0d:a5:58:1c:f3:
         40:38:62:34:4f:2f:2a:96:95:eb:63:40:fc:60:bd:f6:0c:f6:
         96:ad:c7:d5:8d:d7:9f:47:6e:13:03:53:fb:68:c1:2a:0b:45:
         08:4d:22:eb:47:03:42:ff:91:17:63:10:59:39:08:85:85:96:
         28:78:01:d7:e1:25:ce:45:fb:63:36:21:c0:29:d3:b3:09:39:
         68:a5:9b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:14 2025 by rpki-client