Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B1E6131577682E5A01C8A3BF7F96884419291433.cer
File:                     B1E6131577682E5A01C8A3BF7F96884419291433.cer (raw, json)
Hash identifier:          p/kXmpbnCtN1/veLoOQ3Z1GUTRPH7GfJVEJMcN0/it0=
Subject key identifier:   B1:E6:13:15:77:68:2E:5A:01:C8:A3:BF:7F:96:88:44:19:29:14:33
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5E3C0AB0088990E7DDC6CA7D4E8DF25226D9973A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/B1E6131577682E5A01C8A3BF7F96884419291433.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Dec 2024 20:09:27 +0000
Certificate not after:    Tue 16 Dec 2025 20:14:27 +0000
Subordinate resources:    AS: 268503
                          IP: 45.162.56.0/22
                          IP: 2804:5238::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:3c:0a:b0:08:89:90:e7:dd:c6:ca:7d:4e:8d:f2:52:26:d9:97:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 17 20:09:27 2024 GMT
            Not After : Dec 16 20:14:27 2025 GMT
        Subject: CN=B1E6131577682E5A01C8A3BF7F96884419291433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b4:4f:6a:e8:a0:13:f8:b6:e4:1f:9c:4c:cc:
                    68:09:95:70:ab:b4:32:5d:ec:0b:6a:98:44:68:82:
                    a9:1f:7f:41:74:64:f3:2e:1e:73:3c:ae:83:f2:47:
                    5d:6e:36:97:78:6f:41:b0:4b:82:37:17:b1:93:ca:
                    2e:98:fb:bd:2a:6e:23:b3:3a:79:2e:d4:73:00:23:
                    a7:e0:9c:01:67:21:b7:e7:0d:b4:cb:a5:2b:08:58:
                    66:b5:ca:ab:16:d3:26:79:f7:3c:07:7f:3d:33:5e:
                    d7:47:18:ce:89:0e:47:f8:fe:3c:c7:da:cf:ce:0e:
                    fe:f9:e9:28:bb:a6:5e:fa:1e:dc:2a:c9:a0:83:4b:
                    a5:cc:9f:bb:4e:bb:d8:d7:74:32:0d:4e:02:18:77:
                    56:2d:51:d2:36:12:d5:05:65:d7:29:e8:5a:bd:83:
                    69:cf:9e:33:5f:f7:63:bb:af:44:08:a2:97:c5:93:
                    4d:94:58:4e:fc:46:51:0b:b8:99:73:38:4a:ee:9e:
                    ce:3c:32:2b:ad:a0:c0:e4:e8:54:6a:29:fc:ff:b6:
                    ed:b4:e5:21:67:cf:b4:a6:60:1b:35:ab:2b:a4:68:
                    dd:c0:17:ba:6c:19:2e:4b:6b:a9:6f:fc:36:78:d9:
                    bc:12:f5:9c:dc:7f:fd:a0:36:6f:fb:96:2f:e9:e7:
                    95:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B1:E6:13:15:77:68:2E:5A:01:C8:A3:BF:7F:96:88:44:19:29:14:33
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EASDgnMGWYNWoo5efoXAzWDydk3DHCxDpX3KzxsNUmCX/0/B1E6131577682E5A01C8A3BF7F96884419291433.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.56.0/22
                IPv6:
                  2804:5238::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268503

    Signature Algorithm: sha256WithRSAEncryption
         58:1a:c0:f4:0e:66:c7:39:48:7e:64:33:12:96:5c:bc:e1:ed:
         08:c0:f1:2f:7b:ee:b9:3f:89:22:3f:78:f5:05:83:35:97:25:
         29:a9:bd:ab:82:0e:22:92:c6:19:1a:9c:c5:c1:9d:33:23:e9:
         d2:ad:7f:2b:cf:35:c9:43:87:36:d0:01:05:5e:2d:a3:cc:8e:
         39:7a:9a:25:97:26:70:e8:58:62:73:5b:ae:33:84:35:65:58:
         1d:7e:00:4f:ca:e4:ff:ff:69:90:77:b6:3a:7b:55:86:5a:1f:
         e3:a3:62:c7:3d:11:8d:05:2c:df:3d:d4:b4:2b:57:d4:08:49:
         35:8d:0e:aa:38:34:3b:82:7d:a4:2a:72:dd:8c:c7:c3:b3:84:
         e1:07:37:23:5e:55:16:d9:bb:c6:8b:3b:8e:75:d4:6f:ed:44:
         16:7b:cf:2a:31:75:ee:f4:c5:94:f6:05:4e:aa:e6:00:73:b7:
         13:03:18:20:58:ac:e1:9f:0e:86:1f:7c:04:7d:92:23:37:30:
         1c:de:b4:fc:35:d2:24:66:ad:2a:e8:e4:90:65:b2:f8:ba:d1:
         95:6e:c6:b5:58:8b:ed:c7:e9:f6:74:15:a5:71:98:4f:93:b7:
         9b:1a:ad:6b:1d:18:c3:24:8c:3a:d0:48:61:47:99:29:d1:0b:
         88:a1:91:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:05:55 2025 by rpki-client