Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/ACA736284F223A02D4ACC8E1719FA88F00BA3404.cer
File:                     ACA736284F223A02D4ACC8E1719FA88F00BA3404.cer (raw, json)
Hash identifier:          b6Ya3C+vR5P38H427b817fZre18IFgHEphIkmZEKJc8=
Subject key identifier:   AC:A7:36:28:4F:22:3A:02:D4:AC:C8:E1:71:9F:A8:8F:00:BA:34:04
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       24F60CDE0BE8A30ECDFE0C8041E0BA8D5DBA6C2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6QAC76xkBJ19xtUoEyiBy4QKbDyw96vUC5pk4PT4UnND/0/ACA736284F223A02D4ACC8E1719FA88F00BA3404.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6QAC76xkBJ19xtUoEyiBy4QKbDyw96vUC5pk4PT4UnND/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 20:17:42 +0000
Certificate not after:    Fri 06 Mar 2026 20:22:42 +0000
Subordinate resources:    AS: 266517
                          IP: 170.244.68.0/22
                          IP: 2804:3900::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f6:0c:de:0b:e8:a3:0e:cd:fe:0c:80:41:e0:ba:8d:5d:ba:6c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 20:17:42 2025 GMT
            Not After : Mar  6 20:22:42 2026 GMT
        Subject: CN=ACA736284F223A02D4ACC8E1719FA88F00BA3404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a6:dc:7d:3f:d0:c4:f7:97:a9:6b:41:0e:d5:
                    3c:2b:e2:15:5c:14:e3:23:43:bd:bf:89:c0:39:09:
                    4a:5c:c9:46:7d:6d:37:24:65:39:17:59:8c:55:28:
                    f6:bf:4a:c1:e5:96:a2:18:33:a9:ba:ef:f9:12:a7:
                    94:43:2d:62:7d:05:2f:e3:35:7d:2d:94:dd:a4:9e:
                    49:b1:b9:93:e0:d6:96:fe:41:9a:9d:44:96:de:a8:
                    86:ba:38:e6:b0:9f:94:d3:37:93:40:26:72:7b:0f:
                    b8:1a:bf:9c:64:cc:be:56:9f:75:59:46:17:78:41:
                    29:27:e9:5f:f5:c7:13:d8:0d:ef:6a:8a:7e:cc:02:
                    86:45:9e:8b:c8:92:be:bc:8a:dd:49:f9:e7:f5:b9:
                    8f:9f:ad:22:d9:f6:a8:4c:57:2d:96:94:af:c9:fa:
                    ce:4e:81:86:ea:ca:0f:c5:af:de:12:f8:f0:a3:ba:
                    5d:35:4a:d1:21:63:c4:c2:4c:a0:2e:91:1f:1e:18:
                    d9:47:7a:32:4e:b2:ba:6c:f1:c7:55:ce:89:6e:b8:
                    2e:09:5f:e2:14:a3:5b:df:45:7d:b3:4b:d5:a0:05:
                    bb:b7:60:c6:66:24:a2:93:30:08:85:a5:40:9b:88:
                    cd:d1:80:89:ed:04:e8:0e:ba:7d:1e:0f:9a:53:33:
                    6f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AC:A7:36:28:4F:22:3A:02:D4:AC:C8:E1:71:9F:A8:8F:00:BA:34:04
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6QAC76xkBJ19xtUoEyiBy4QKbDyw96vUC5pk4PT4UnND/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6QAC76xkBJ19xtUoEyiBy4QKbDyw96vUC5pk4PT4UnND/0/ACA736284F223A02D4ACC8E1719FA88F00BA3404.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.68.0/22
                IPv6:
                  2804:3900::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266517

    Signature Algorithm: sha256WithRSAEncryption
         64:3b:ae:56:9c:e7:0b:e4:1b:6b:c2:42:8a:4a:ce:91:45:6d:
         33:1c:66:3f:79:22:72:f7:20:ed:ba:c1:dc:2c:85:ba:39:c2:
         56:49:04:97:fa:3a:ce:05:1e:10:00:54:10:47:bc:c8:af:3e:
         b6:cc:3d:02:96:ee:3f:43:78:1c:73:8e:c3:a7:d2:02:07:8b:
         eb:e9:ec:80:79:29:7f:cf:b7:7d:15:04:f9:5e:41:46:2a:55:
         18:8c:42:0e:d5:bf:a5:38:47:80:65:b0:ac:fd:25:df:4e:41:
         97:90:bf:f1:6a:ed:fb:91:fe:a2:69:34:6e:f0:60:05:da:42:
         58:7b:10:6b:2f:f8:01:2e:0e:57:77:ff:79:c4:88:1e:49:21:
         36:2f:c0:78:a2:70:5c:2b:3b:07:88:04:b7:30:ae:32:94:ce:
         a2:a2:65:d5:bf:a3:d3:12:90:d2:69:80:13:58:8a:5d:78:c1:
         ad:79:16:4e:fe:36:db:aa:e9:20:6a:c3:a1:da:ac:cf:d8:59:
         9f:7d:90:8c:73:07:0d:d2:76:90:21:01:69:5f:19:05:8a:43:
         5f:45:a8:88:90:91:4b:a6:7a:66:63:55:7e:ce:64:1a:ee:b8:
         6a:a8:c4:b6:9f:79:f8:76:6c:4e:98:e8:29:84:61:25:a9:59:
         2e:f2:62:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:07:53 2025 by rpki-client