Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer
File:                     AFB37E8982591B18DBDE9E8217274DFABCEAA945.cer (raw, json)
Hash identifier:          IklWJ/k3yU6U+6t8nWpz/0AlwJ+VEI7kMYV3I3Xlou4=
Subject key identifier:   AF:B3:7E:89:82:59:1B:18:DB:DE:9E:82:17:27:4D:FA:BC:EA:A9:45
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       77B6B15709CF148EFF34970A978848E87E255204
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Dec 2024 16:02:00 +0000
Certificate not after:    Mon 22 Dec 2025 16:07:00 +0000
Subordinate resources:    AS: 262438
                          IP: 177.52.64.0/21
                          IP: 2804:31c0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:b6:b1:57:09:cf:14:8e:ff:34:97:0a:97:88:48:e8:7e:25:52:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 23 16:02:00 2024 GMT
            Not After : Dec 22 16:07:00 2025 GMT
        Subject: CN=AFB37E8982591B18DBDE9E8217274DFABCEAA945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:26:7e:7c:ad:4f:5a:2b:ec:91:2a:ef:dc:7d:
                    9e:14:28:61:b6:2e:c8:81:44:c2:ce:b0:cf:28:02:
                    cd:31:36:56:9b:bb:4d:af:90:8f:3e:05:06:e1:19:
                    a1:b8:b1:0a:a5:33:10:9e:57:84:8a:ac:8e:99:ff:
                    13:32:d6:7d:81:a5:c0:87:b8:e5:56:25:b5:23:7c:
                    9d:9a:f6:2f:c6:7e:55:e1:ab:93:76:44:b8:a6:40:
                    2f:5d:09:08:4d:57:e7:18:5c:d2:f8:23:7a:2b:cb:
                    1b:32:a4:5a:6d:5a:46:25:c3:b8:5f:b2:0e:a4:60:
                    1a:87:da:8b:24:39:b1:a0:ab:ba:c9:56:cd:49:93:
                    a0:80:ee:98:13:06:bf:21:6f:f9:01:0b:24:50:d3:
                    dc:5d:97:94:28:92:f9:5d:13:8e:44:75:15:46:76:
                    24:a7:1e:44:72:3c:37:de:f2:bc:75:c0:33:40:f9:
                    70:27:a5:17:43:47:fe:02:c5:09:1d:d7:14:46:85:
                    0b:aa:d8:3f:e4:92:6d:8f:f7:d1:8e:d9:70:ca:d6:
                    88:62:bc:cc:11:e8:7b:0f:60:a0:42:1e:01:16:f4:
                    6e:74:51:90:9e:99:1e:c4:9e:d0:d5:d6:be:dc:e3:
                    6e:18:e7:32:f2:d0:0d:22:04:7e:48:c0:f4:99:c6:
                    d6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AF:B3:7E:89:82:59:1B:18:DB:DE:9E:82:17:27:4D:FA:BC:EA:A9:45
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2uYSSDn2V2TM4qegQMVAyVC9MkvCBYoyHhbaQrxmH587/0/AFB37E8982591B18DBDE9E8217274DFABCEAA945.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.64.0/21
                IPv6:
                  2804:31c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262438

    Signature Algorithm: sha256WithRSAEncryption
         39:40:8c:b2:98:0e:b7:69:34:2f:71:0a:59:26:8e:ea:ee:1b:
         76:06:8d:76:ff:34:54:b7:7b:df:eb:0a:5f:4b:51:ab:19:93:
         b2:d6:5c:d5:32:b9:49:f3:c6:8e:b6:6e:26:30:5a:4a:04:c4:
         5f:97:fc:e4:3f:e8:1f:2b:75:6a:7c:5d:2f:51:3d:ce:ef:cb:
         fe:c1:34:e0:d1:a6:cc:6f:58:26:50:f9:7e:e8:2d:79:6a:14:
         8d:e5:03:79:fa:0c:b7:e2:3f:7c:07:f6:aa:c1:bc:50:df:f1:
         98:78:15:07:fd:43:25:c9:f3:4d:56:7b:66:fd:95:e8:1b:5e:
         94:db:87:7a:00:d3:6f:b9:d0:f2:0f:31:52:3c:6c:70:81:e3:
         20:fb:f6:5d:88:dd:7a:8c:3d:9c:5c:ac:3f:84:78:22:ea:84:
         b1:ed:13:79:fc:41:86:64:76:a3:3c:95:c4:ef:6d:7c:56:ef:
         e0:e9:29:17:30:3d:f2:f6:36:61:88:30:91:f1:30:25:d1:c6:
         df:07:6f:20:5e:6f:e7:bc:ad:b6:d1:d4:93:f2:08:d1:6d:fe:
         ea:15:fd:c5:d8:95:35:f6:2b:d1:c9:fa:a3:3f:d0:12:ed:e7:
         d2:a1:46:57:57:f9:81:c1:07:43:c6:b7:d6:69:fb:7f:63:ec:
         3a:02:35:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:27:34 2025 by rpki-client