Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AD018CF2552AB8A04E6D299C30B685761B00ED43.cer
File:                     AD018CF2552AB8A04E6D299C30B685761B00ED43.cer (raw, json)
Hash identifier:          qW2wypFw4lFgToGUNRibheAuUrPrqvHsezBE/1WKgSo=
Subject key identifier:   AD:01:8C:F2:55:2A:B8:A0:4E:6D:29:9C:30:B6:85:76:1B:00:ED:43
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0267593BDDD7AC9ADD867B50853B51FE3564E056
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/AD018CF2552AB8A04E6D299C30B685761B00ED43.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Jan 2025 18:17:39 +0000
Certificate not after:    Wed 07 Jan 2026 18:22:39 +0000
Subordinate resources:    AS: 266343
                          IP: 170.239.4.0/22
                          IP: 2804:365c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:67:59:3b:dd:d7:ac:9a:dd:86:7b:50:85:3b:51:fe:35:64:e0:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  8 18:17:39 2025 GMT
            Not After : Jan  7 18:22:39 2026 GMT
        Subject: CN=AD018CF2552AB8A04E6D299C30B685761B00ED43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:53:57:5f:9c:ad:db:be:86:bc:52:5b:b2:64:
                    c7:a2:ca:63:38:37:06:dd:ac:c6:3b:db:91:76:44:
                    92:9a:d2:cd:ee:7a:a3:00:13:5a:e3:94:ed:e9:f6:
                    30:b3:97:18:51:75:e0:71:e1:ea:8a:a6:47:42:99:
                    0e:18:2f:7d:0b:28:38:32:c5:84:f5:71:f6:84:b8:
                    61:7a:5a:4e:38:66:ff:c9:ab:50:eb:9c:ce:d3:9e:
                    e8:1d:c5:05:ed:4a:8d:77:75:3a:bb:8e:d4:11:bf:
                    25:ee:79:96:2e:b3:7d:eb:f9:21:d1:b0:9d:6d:9a:
                    f3:46:46:47:bc:b0:24:ca:91:2a:2c:18:7b:59:09:
                    75:9d:fe:a6:7e:27:b5:8d:8f:3f:d5:8f:8a:a5:a1:
                    63:e4:72:0e:8d:bf:ca:a5:1d:a0:73:20:4a:ac:94:
                    66:a9:a2:50:c3:49:74:19:28:73:d0:fa:e6:3d:e2:
                    55:56:88:a2:53:74:19:f8:d8:9e:58:b1:8d:6b:05:
                    97:01:dd:dd:7d:64:c0:4a:18:bf:cd:e0:aa:bf:0f:
                    92:6e:bc:c4:e3:ed:be:28:62:09:d3:84:63:ce:13:
                    27:e9:13:e2:83:63:8d:0f:d9:18:5f:8e:56:5d:31:
                    6e:bb:6a:27:8d:ed:b9:e0:35:db:9f:13:24:01:a0:
                    f4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:01:8C:F2:55:2A:B8:A0:4E:6D:29:9C:30:B6:85:76:1B:00:ED:43
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/AD018CF2552AB8A04E6D299C30B685761B00ED43.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.4.0/22
                IPv6:
                  2804:365c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266343

    Signature Algorithm: sha256WithRSAEncryption
         d5:c0:00:03:cc:4f:27:0f:88:c8:12:30:61:69:bf:ad:0a:5f:
         aa:98:58:55:b8:a3:e6:1f:38:82:47:e3:a1:4d:63:b8:e1:9c:
         e4:31:0c:7c:c0:bb:31:0f:d3:bc:d8:d9:2e:1a:5a:64:d1:11:
         1b:11:99:af:81:ff:ac:9f:ec:40:57:b0:f5:ae:5e:c1:b9:44:
         49:9d:fa:1f:2b:e3:07:93:6d:24:1c:a5:81:ac:c9:a3:e0:79:
         19:1b:1d:39:92:31:b3:a6:78:a0:d9:67:cc:ca:f8:51:4f:29:
         98:37:5a:3f:31:79:5d:c7:88:0f:16:d8:6a:e1:30:ee:48:0f:
         e6:f5:f1:fb:22:b1:4a:9d:f1:9a:08:1e:2a:46:46:99:6e:c8:
         d7:19:0b:f5:76:a0:8c:f0:e8:eb:72:c2:fe:0e:47:b6:cc:19:
         e6:3f:6c:7b:0e:ac:b9:50:18:58:34:b4:ff:54:1b:20:72:11:
         16:5d:82:76:80:42:f1:81:af:f9:17:18:b6:d1:fb:14:33:63:
         d5:5e:c9:2c:aa:d0:ea:3b:36:2d:d6:16:6e:f6:c8:b4:5c:19:
         a9:08:3c:f3:36:f6:c8:54:3d:0f:fb:f7:9d:11:3d:cc:0e:7e:
         95:a7:af:a5:3c:b9:52:70:4c:98:10:2c:36:f6:ea:b1:81:41:
         67:0d:5a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:20:02 2025 by rpki-client