Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.cer
File:                     A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.cer (raw, json)
Hash identifier:          hpLSyefPFbol01JBqcsYi976SY5vOSHuSoEyDX+0Kok=
Subject key identifier:   A8:83:9D:63:C3:E1:12:D0:B8:3C:BB:01:0A:DD:E5:B4:C3:3B:0C:4C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       37886C4219C0EE6BD3AAFF0FB0F06C4DE68F30AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 22:36:50 +0000
Certificate not after:    Fri 06 Mar 2026 22:41:50 +0000
Subordinate resources:    AS: 265890
                          IP: 131.196.4.0/22
                          IP: 2804:3f64::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:88:6c:42:19:c0:ee:6b:d3:aa:ff:0f:b0:f0:6c:4d:e6:8f:30:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 22:36:50 2025 GMT
            Not After : Mar  6 22:41:50 2026 GMT
        Subject: CN=A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3d:5b:ee:cb:d5:8f:de:d4:fd:40:d8:0e:69:
                    8a:5b:15:6b:30:58:0e:18:52:2a:6f:bd:f4:c3:b7:
                    38:ec:9e:8e:ab:80:f5:42:f5:90:52:08:af:90:9b:
                    9b:56:76:38:ca:1d:f6:cd:09:96:bf:02:c5:3f:71:
                    c9:37:44:4c:04:20:42:ae:a1:8f:08:32:b1:21:5b:
                    8c:06:a5:db:ec:ee:bc:b8:62:db:29:40:86:55:b7:
                    23:3f:f0:e9:7d:6d:9c:8f:89:d3:76:68:05:af:95:
                    ff:b0:dd:ad:a6:c4:62:71:eb:a9:0f:8f:4d:4c:9d:
                    57:a9:0f:14:10:71:08:6a:59:bb:95:2a:d6:a1:ac:
                    d3:e4:af:d6:b0:05:ef:5d:9c:6e:a0:69:cd:8f:0a:
                    69:6b:7f:f4:6e:69:ce:6b:06:52:0b:83:06:2e:7b:
                    29:aa:8f:e0:46:99:80:88:83:ba:5b:70:d6:3a:69:
                    33:0e:4a:ee:f3:4d:fe:a2:56:98:75:4b:ac:c6:c8:
                    e3:8f:41:47:f0:55:a8:37:37:17:67:83:5b:b0:f9:
                    2f:1d:f2:f4:a5:9a:f1:93:c9:cd:85:2b:b7:9d:eb:
                    37:5a:35:86:9b:a4:a1:a7:3c:78:1d:9c:bb:cf:9e:
                    f9:69:03:1c:88:3d:d4:42:90:b2:b1:ad:54:5a:78:
                    91:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A8:83:9D:63:C3:E1:12:D0:B8:3C:BB:01:0A:DD:E5:B4:C3:3B:0C:4C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/1/A8839D63C3E112D0B83CBB010ADDE5B4C33B0C4C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.4.0/22
                IPv6:
                  2804:3f64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265890

    Signature Algorithm: sha256WithRSAEncryption
         ae:cf:62:fd:91:5b:f6:24:47:da:8f:be:9d:0f:b7:1d:01:60:
         b8:09:81:a3:5b:11:40:63:e9:fd:b7:4a:36:07:8a:88:ca:c9:
         31:aa:f4:1a:cd:94:10:7d:58:6c:d2:a6:4f:d6:d7:d1:1a:48:
         f7:ff:06:81:76:65:df:7c:a7:0f:d8:00:fe:58:62:8d:86:7f:
         17:a5:17:1f:ca:0d:78:fa:9c:bb:5a:bf:55:6c:ad:3c:04:a0:
         26:f9:7b:07:e7:f6:8b:1e:1a:11:3a:93:30:27:e6:e1:f8:d8:
         24:80:16:a4:ca:8f:e7:98:9d:6c:62:a8:90:4e:9b:f5:d8:d1:
         5d:5e:d6:f3:10:ac:e5:55:73:5e:03:82:c3:83:13:29:4b:f4:
         cc:6c:00:c5:af:9f:39:2a:d1:a7:1e:85:99:07:ab:9e:7c:20:
         4c:18:7e:d5:76:e5:44:1e:d2:ce:91:7a:52:d1:67:8c:3a:c6:
         d0:0d:bb:39:32:2d:b8:95:7d:46:13:48:b4:29:04:4a:d9:f0:
         8c:64:e8:4d:2b:c6:b4:b7:61:17:a0:a7:73:5b:4e:2e:39:9f:
         41:dc:c9:4f:32:e0:67:9e:db:74:f7:fc:6c:e0:b6:4e:8c:49:
         f9:8b:c2:bd:98:18:de:11:ef:32:f1:8b:27:91:d7:47:4b:85:
         22:a2:e6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:13:58 2025 by rpki-client