Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.cer
File:                     AB0A9EADB83F739FC241A002FB1C2A394EECBF50.cer (raw, json)
Hash identifier:          14a7W2WmeNsnnz9dm54SJ4hw90Cd8EhDV9NUCRGZC+E=
Subject key identifier:   AB:0A:9E:AD:B8:3F:73:9F:C2:41:A0:02:FB:1C:2A:39:4E:EC:BF:50
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       21FEE2FC6D641E0673C71AA0F255CC46B443A980
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Mar 2025 20:00:43 +0000
Certificate not after:    Thu 26 Mar 2026 20:05:43 +0000
Subordinate resources:    AS: 265482
                          IP: 168.197.140.0/22
                          IP: 2804:34d0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:fe:e2:fc:6d:64:1e:06:73:c7:1a:a0:f2:55:cc:46:b4:43:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 27 20:00:43 2025 GMT
            Not After : Mar 26 20:05:43 2026 GMT
        Subject: CN=AB0A9EADB83F739FC241A002FB1C2A394EECBF50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:09:b6:78:17:96:a2:88:5d:93:ed:c9:16:93:
                    12:1c:17:ff:4e:37:15:79:8d:2b:d0:c2:f2:a8:37:
                    e2:13:32:89:82:4f:18:66:72:2b:69:08:48:f7:d3:
                    db:da:ff:bc:a2:7c:e6:5e:33:73:84:4c:1a:b5:12:
                    60:3e:d8:2d:08:09:ac:db:99:5c:61:a8:34:63:5b:
                    31:63:46:b1:d2:dd:fe:b4:67:b4:e3:58:ed:15:35:
                    73:1d:56:13:15:8c:64:b7:05:2b:6a:ca:27:0a:46:
                    00:06:9e:d3:52:c2:3b:7b:fb:af:d1:8b:0f:1b:64:
                    86:23:c9:73:22:76:52:a2:08:e1:15:ae:0e:f5:d7:
                    a0:95:b4:6f:8a:4a:b9:b2:39:00:39:3e:e6:68:af:
                    84:33:22:e0:7f:c7:90:8b:aa:91:b1:b1:f8:da:ff:
                    6c:c1:0a:c2:0b:b8:d2:f3:ac:60:78:d0:68:ae:ff:
                    cf:fa:e2:e5:7e:94:d8:48:1d:83:2b:f4:7d:8e:78:
                    30:ef:71:d1:4e:70:00:9c:d7:4c:2a:00:0b:ea:d0:
                    34:94:01:fd:02:d6:ce:26:cf:71:51:16:18:fb:23:
                    84:ce:cd:01:b4:8e:a5:34:b7:fa:38:0f:da:fe:5f:
                    eb:6b:f1:2b:32:66:55:ad:5f:70:e6:aa:e3:04:cd:
                    93:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AB:0A:9E:AD:B8:3F:73:9F:C2:41:A0:02:FB:1C:2A:39:4E:EC:BF:50
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Frg79C1QovRA8jN5FjXpVAbzaWsCevZFiySVgX8WPQ7o/0/AB0A9EADB83F739FC241A002FB1C2A394EECBF50.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.140.0/22
                IPv6:
                  2804:34d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265482

    Signature Algorithm: sha256WithRSAEncryption
         2d:59:33:aa:20:41:1c:4b:a2:73:4b:8e:53:bc:79:98:74:32:
         b5:5d:bc:3b:8a:ba:0b:79:00:97:ab:84:9d:57:c4:57:6f:7e:
         7e:1c:9c:63:ba:61:b6:fa:87:de:8f:a0:a0:96:4d:2b:63:86:
         b3:24:0d:9e:19:6c:3f:d3:28:09:ec:87:93:06:47:b0:fe:72:
         5f:3d:85:4e:99:13:e4:6e:fe:39:3b:33:f7:47:93:f0:fc:f7:
         ce:d0:ee:d3:6c:ed:cc:d2:2d:24:ee:b3:58:b9:c5:5d:30:e8:
         fd:26:7b:94:d5:17:e8:46:c1:51:f1:ee:46:36:56:32:d5:78:
         da:39:60:1a:b8:eb:90:81:5b:46:80:5f:de:fd:19:9e:25:62:
         52:47:de:08:c7:4a:00:fb:07:91:73:4e:0d:e1:4e:ed:d5:1c:
         cd:68:5c:01:e7:ab:9d:d2:cc:15:5f:2d:5a:2c:81:18:41:26:
         f2:5c:67:6f:eb:7e:c1:a3:ea:e5:90:c8:6d:3d:18:b0:c2:ee:
         4c:41:fa:0c:61:1a:f1:ea:ea:87:f4:0d:ec:f5:58:19:6a:99:
         e5:ee:2f:5b:07:20:29:d9:9b:74:9f:b0:42:db:ae:37:c8:62:
         fd:96:f6:17:4f:92:f5:44:cb:71:36:31:b5:67:4b:6e:e3:67:
         0b:a8:b3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:22 2025 by rpki-client