Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.cer
File:                     A54DFBD8D106EBB2780BF8D0331AF120305AAB46.cer (raw, json)
Hash identifier:          M4xg37k2JPF4uLFaPPu6jLY3j2ZSIyuQ/5E6Ig6x+oM=
Subject key identifier:   A5:4D:FB:D8:D1:06:EB:B2:78:0B:F8:D0:33:1A:F1:20:30:5A:AB:46
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2B3CF7A69973971A1723FD25067167EAAB8F0225
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.mft
caRepository:             rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 16:35:09 +0000
Certificate not after:    Thu 05 Mar 2026 16:40:09 +0000
Subordinate resources:    AS: 268781
                          IP: 45.172.236.0/22
                          IP: 2804:5a90::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:3c:f7:a6:99:73:97:1a:17:23:fd:25:06:71:67:ea:ab:8f:02:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 16:35:09 2025 GMT
            Not After : Mar  5 16:40:09 2026 GMT
        Subject: CN=A54DFBD8D106EBB2780BF8D0331AF120305AAB46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:cc:3e:cb:50:2e:c9:7f:9c:db:4a:29:40:
                    5f:6b:82:a1:f0:4b:a9:84:40:e3:e0:be:b8:01:3d:
                    74:2c:5e:d2:0e:3a:7f:ff:fa:a9:57:41:79:88:7b:
                    fd:8f:bd:54:fd:f3:58:0f:7c:de:8d:52:e7:e0:99:
                    b0:00:84:7b:96:d9:3f:45:7d:0c:bb:ab:cc:f6:bb:
                    6c:61:f8:5d:f2:a0:7d:2b:53:f9:d9:06:39:c4:46:
                    3f:d4:5b:9a:42:a1:eb:c7:63:3a:f6:4e:a2:db:82:
                    95:91:62:60:ee:f7:3b:36:6d:25:ec:01:6b:32:b4:
                    80:da:e9:fc:db:5f:24:19:c6:96:e4:09:13:57:d3:
                    f1:9e:f2:a9:cb:95:07:ae:67:81:11:e8:04:a0:cd:
                    47:46:b3:10:96:8d:2e:e3:42:01:bd:ef:a3:c0:b6:
                    25:21:cd:42:d0:3d:eb:76:76:a6:09:ab:69:37:31:
                    2a:25:12:11:99:f0:e3:44:98:71:3f:1c:87:1a:46:
                    74:c5:d1:6c:1a:be:f7:28:d6:8a:20:58:ec:e2:7d:
                    62:03:15:f0:97:c2:46:3f:e5:ff:8a:2e:81:3d:a5:
                    71:7e:e7:b7:3e:94:81:c3:da:d4:65:1c:ab:e8:ed:
                    b1:a1:d6:35:db:8b:9f:e7:e0:17:2f:df:09:1a:2e:
                    e5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:4D:FB:D8:D1:06:EB:B2:78:0B:F8:D0:33:1A:F1:20:30:5A:AB:46
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/1/A54DFBD8D106EBB2780BF8D0331AF120305AAB46.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.236.0/22
                IPv6:
                  2804:5a90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268781

    Signature Algorithm: sha256WithRSAEncryption
         b5:1d:c6:80:e5:69:c9:e8:99:1b:83:13:10:d3:6a:35:33:26:
         19:4a:10:46:cc:ae:47:64:f2:2c:e4:7e:03:44:54:3d:63:d4:
         9c:6f:94:0a:10:5d:ce:67:fe:f8:dd:35:80:98:94:d0:e0:ef:
         93:5e:8f:79:ff:cb:fa:0b:31:b7:8c:ea:29:2b:c7:b8:9e:a6:
         c7:a8:ca:6a:d8:68:17:e5:05:fe:73:24:54:59:af:bc:a0:46:
         c3:05:c2:3f:f7:a8:f7:14:9f:1c:79:73:37:1d:5e:7e:d7:91:
         be:15:93:54:8b:fa:a5:82:5e:91:8c:ce:76:99:4f:8c:f0:3a:
         df:15:95:de:d2:29:03:e2:d1:18:f3:37:4c:23:9b:d8:2e:1d:
         68:5a:63:d1:fd:dc:74:b7:d1:09:54:c8:f7:92:83:3f:71:9d:
         2d:9d:56:67:ff:f8:ba:7d:55:52:0b:fe:66:55:e0:56:cc:51:
         c5:b6:b6:31:40:ed:c7:f7:f3:9c:03:10:f0:68:4a:4e:ac:bc:
         a5:d9:11:3b:d9:40:14:32:68:e1:25:13:21:46:27:3a:c2:bb:
         77:15:bc:b7:d4:70:d0:a2:90:e1:c8:3f:4f:2f:df:ec:fb:f4:
         77:65:b3:96:f5:31:5b:87:b0:03:f1:a6:fd:6a:21:7c:01:bf:
         b4:b4:8b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:34:59 2025 by rpki-client