Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer
File:                     A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.cer (raw, json)
Hash identifier:          6t3DeidBtUDXUc6fK5yDGlJJsDbmRhwigS53+hLvOrk=
Subject key identifier:   A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       492BC483CC8D1D1AAA8C73851F3CE5EAD5F826E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:45:04 +0000
Certificate not after:    Wed 04 Mar 2026 18:50:04 +0000
Subordinate resources:    AS: 266958
                          IP: 45.226.44.0/22
                          IP: 2804:45f8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:2b:c4:83:cc:8d:1d:1a:aa:8c:73:85:1f:3c:e5:ea:d5:f8:26:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:45:04 2025 GMT
            Not After : Mar  4 18:50:04 2026 GMT
        Subject: CN=A57AD49B9BB9E47B7327A3A5841217FBDCE55F36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8a:81:c0:ef:60:45:7d:a0:bb:54:48:58:ce:
                    e9:56:db:d1:32:1c:06:43:59:88:8d:b6:6c:9d:bd:
                    8d:3e:4d:35:00:4a:a6:61:cd:ff:ee:5e:93:99:d8:
                    59:1c:b9:92:68:3a:1c:be:77:56:9d:9c:df:82:ed:
                    04:34:a1:44:ce:80:1b:a8:cc:bb:98:d5:dd:fd:8a:
                    00:f3:2e:fb:7c:fc:46:ff:96:ed:f2:59:e2:c4:07:
                    c9:26:ee:67:6b:a3:44:1f:73:72:f7:81:77:51:02:
                    8f:e2:46:08:d7:4e:bb:3a:ea:ce:0d:15:6a:76:7e:
                    16:c5:2a:ce:19:4a:4f:12:20:2e:99:d2:ba:f5:c2:
                    db:69:d8:47:97:c9:f5:80:ae:7f:46:4d:20:ed:f2:
                    fc:07:2c:db:f3:ae:9d:0e:d3:b0:2b:28:aa:b4:cb:
                    47:b8:f7:5e:78:99:81:49:2b:7c:29:2c:b2:76:91:
                    3c:08:36:0a:e6:73:63:d3:bb:d8:43:7f:f0:d2:54:
                    0d:d1:b1:7f:8e:55:20:ec:27:7a:20:15:05:2e:57:
                    b7:81:7e:a6:62:ad:fd:ac:17:3a:12:15:b6:a0:72:
                    e7:04:76:ca:21:6e:64:28:20:09:73:c1:64:b4:33:
                    69:bd:ce:4d:ff:30:cc:cd:64:b4:02:5c:bf:4d:31:
                    04:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:7A:D4:9B:9B:B9:E4:7B:73:27:A3:A5:84:12:17:FB:DC:E5:5F:36
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/1/A57AD49B9BB9E47B7327A3A5841217FBDCE55F36.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.44.0/22
                IPv6:
                  2804:45f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266958

    Signature Algorithm: sha256WithRSAEncryption
         d7:d1:0c:78:7b:d6:96:19:ff:74:db:c7:8c:be:da:92:a6:32:
         5f:cf:f7:b6:31:33:dd:38:c4:76:57:22:85:e2:81:55:1a:26:
         85:af:07:31:89:f7:90:2c:c6:18:f0:a5:ad:87:07:e0:e2:92:
         ca:dc:6f:27:69:6e:63:56:bf:75:09:4b:eb:a3:3d:65:18:33:
         62:13:fd:87:a2:f0:86:6b:14:fa:7d:cc:e5:83:6a:ca:f5:ec:
         c9:d6:c1:4b:11:4d:be:15:a0:8c:40:06:33:dc:b4:5e:03:6d:
         b5:1e:cb:04:fd:4b:ca:55:09:ea:81:2c:27:a8:58:6e:bf:a7:
         2b:a9:ed:16:d7:45:7c:5b:dd:00:a8:00:1a:1c:6d:a0:96:e4:
         96:25:e4:55:b6:05:68:78:99:1b:a8:16:22:06:4b:4e:2e:33:
         e1:b5:41:0a:3a:d9:6f:a4:a0:cc:15:e8:00:34:eb:70:90:f9:
         f1:e4:0a:c2:f4:90:4e:13:f6:16:86:d1:29:f9:f1:58:13:b2:
         dc:f3:f0:9c:e2:86:8f:a5:3d:af:ee:d7:99:4b:a9:42:7b:70:
         7c:44:4a:e6:c1:29:65:5d:1d:1d:6c:6f:e3:79:68:30:f4:2b:
         17:14:52:57:8a:5f:58:2b:2d:e3:c8:40:d5:91:55:65:c4:a8:
         88:5c:ed:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:53:44 2025 by rpki-client