Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A39AA144A61634B60A33E417B9A20C7C061D86A3.cer
File:                     A39AA144A61634B60A33E417B9A20C7C061D86A3.cer (raw, json)
Hash identifier:          L6iF/KnmqQIBNWKk2OB/XEHVTRLbKi3vSufD4ZkgP9I=
Subject key identifier:   A3:9A:A1:44:A6:16:34:B6:0A:33:E4:17:B9:A2:0C:7C:06:1D:86:A3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       597B64FB89224EB57B046A0E0F9DA378D08F94C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/A39AA144A61634B60A33E417B9A20C7C061D86A3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Mar 2025 16:56:25 +0000
Certificate not after:    Wed 25 Mar 2026 17:01:25 +0000
Subordinate resources:    AS: 268113
                          IP: 45.169.32.0/22
                          IP: 2804:5834::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7b:64:fb:89:22:4e:b5:7b:04:6a:0e:0f:9d:a3:78:d0:8f:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 26 16:56:25 2025 GMT
            Not After : Mar 25 17:01:25 2026 GMT
        Subject: CN=A39AA144A61634B60A33E417B9A20C7C061D86A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ff:46:3d:46:89:55:93:c4:39:bb:19:20:90:
                    b8:7f:e4:f2:eb:d7:66:ec:5a:fc:c1:bf:31:05:28:
                    1c:6d:a6:e6:16:df:a1:3c:25:9d:1a:58:a8:05:81:
                    ac:d4:f4:7b:6c:21:31:87:0b:3b:65:10:14:c9:ee:
                    21:ee:dd:52:2d:1e:d4:1b:2d:5a:3e:17:8b:0a:ea:
                    2d:dc:28:a0:5d:0f:fa:da:db:c0:db:e6:47:65:d2:
                    7a:6f:94:d5:9f:a9:be:ec:cf:c2:6b:0c:fe:16:61:
                    46:31:cd:e9:66:c0:56:59:9f:6c:a4:7c:7f:12:b9:
                    ae:90:fe:7a:ec:8b:db:4f:8a:b8:0b:6b:56:4e:05:
                    25:8f:53:a5:90:00:f8:24:42:b2:94:68:58:8e:7f:
                    35:ca:ca:0e:98:d8:21:68:85:ae:14:be:e4:b1:2d:
                    a3:a5:90:a0:f7:97:17:9c:ac:61:79:a7:54:dd:f2:
                    bf:47:57:35:c8:9f:ba:6c:bf:7d:1e:1f:3e:24:78:
                    63:62:a4:0a:ae:c3:a7:02:c5:70:b3:22:e3:5c:15:
                    35:ae:ee:d8:db:fd:22:39:5c:67:29:f1:1d:80:10:
                    c7:55:a6:a0:ea:4d:0f:00:46:bd:1b:9f:b6:64:22:
                    05:39:a1:b3:a9:e2:72:a7:09:5b:c5:8e:19:72:ff:
                    0e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A3:9A:A1:44:A6:16:34:B6:0A:33:E4:17:B9:A2:0C:7C:06:1D:86:A3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HadFShe2BY5mx3E748UfkJX6nzQxJLCVFZ9vksJ1Tmc/0/A39AA144A61634B60A33E417B9A20C7C061D86A3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.32.0/22
                IPv6:
                  2804:5834::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268113

    Signature Algorithm: sha256WithRSAEncryption
         54:d4:e3:e3:b0:e4:a7:03:ca:fe:9e:b5:bd:37:ed:4c:ca:b3:
         38:52:ed:eb:5a:1f:0a:b5:dd:77:9a:ac:0a:21:03:1e:3f:0f:
         29:e2:b0:00:bd:cc:db:e9:23:b7:62:f4:61:d6:ba:18:cb:35:
         24:4b:78:a7:38:3c:b0:80:99:d3:65:f3:fa:c8:04:54:31:d9:
         1b:d0:c1:cb:1f:01:d5:88:c4:60:09:1f:03:6f:a7:a0:79:1a:
         1a:52:d5:bb:a8:fe:f2:ab:28:f9:f0:d4:32:e6:13:73:3e:4c:
         85:16:e6:f1:8c:6e:53:ce:45:b3:2c:e5:63:c4:73:16:8a:ad:
         1c:4c:72:cd:66:79:82:3c:06:34:4d:bd:0a:22:f6:3e:7f:75:
         51:5a:62:3d:c1:e5:65:88:b1:3a:65:13:ba:41:f0:01:8c:cc:
         3d:3a:01:71:8f:d1:2f:12:e9:44:d8:94:ac:84:5c:bc:09:44:
         69:74:92:0f:47:cb:1f:bb:17:a3:fe:9a:23:11:01:1c:2c:bc:
         a8:f4:a8:7f:0e:81:39:2e:6d:15:5f:48:f6:fe:a0:20:71:9a:
         6b:0d:28:b2:d1:6a:df:f5:c4:d2:a6:12:9c:1e:06:65:47:4b:
         92:73:e6:0a:45:fd:c0:a5:ab:0e:ce:1d:dc:69:c1:c9:09:67:
         71:be:36:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:08:29 2025 by rpki-client