Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B4557E167D5126EBA91CF7AD37F03C53FF898288.cer
File:                     B4557E167D5126EBA91CF7AD37F03C53FF898288.cer (raw, json)
Hash identifier:          Y069wYWY1P3iLdhZyxhRRXLJ1TmtBdFhGq1g9cqWFUE=
Subject key identifier:   B4:55:7E:16:7D:51:26:EB:A9:1C:F7:AD:37:F0:3C:53:FF:89:82:88
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2E88ED6634D3B399D14B2AD7DBFDBCC3A5A48533
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/B4557E167D5126EBA91CF7AD37F03C53FF898288.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Dec 2024 13:09:36 +0000
Certificate not after:    Thu 25 Dec 2025 13:14:36 +0000
Subordinate resources:    AS: 273713
                          IP: 2804:8b20::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:88:ed:66:34:d3:b3:99:d1:4b:2a:d7:db:fd:bc:c3:a5:a4:85:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 26 13:09:36 2024 GMT
            Not After : Dec 25 13:14:36 2025 GMT
        Subject: CN=B4557E167D5126EBA91CF7AD37F03C53FF898288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:96:28:40:14:da:22:69:54:cb:dd:ad:7d:f9:
                    4f:95:d6:19:f0:03:98:8d:e7:b7:1f:35:84:57:28:
                    ad:65:08:a6:11:0f:11:85:62:d9:2f:22:ff:34:7f:
                    ee:e4:51:ec:b8:33:08:e4:83:06:a3:0b:be:a7:fb:
                    c4:04:37:b7:c6:27:72:f0:76:5e:6b:54:b0:32:3a:
                    ae:b9:8d:e2:bc:83:8c:e6:84:ab:5f:4c:4d:97:8d:
                    77:71:5c:10:97:0c:be:b8:7c:85:f1:6f:62:bd:df:
                    94:f3:06:fb:46:5c:c8:97:77:66:bf:7e:46:87:6f:
                    90:d5:2f:98:30:2a:4b:49:17:bc:12:a7:a3:ce:c8:
                    f4:b9:20:31:88:fb:18:a3:28:de:95:fa:90:c9:9d:
                    4c:00:c9:b1:cb:5f:b6:16:f2:5f:cf:73:35:37:1d:
                    eb:9e:9b:d7:f8:89:35:09:83:a9:e0:fa:80:cc:41:
                    25:b3:11:08:e8:87:4b:02:0a:ab:80:41:06:78:47:
                    2a:44:d8:3e:17:a9:ff:f0:d4:2e:5c:71:b7:e2:f3:
                    d9:be:6f:d3:26:0d:0d:89:e9:23:9f:36:9a:07:fb:
                    e3:80:65:72:83:45:71:c1:73:77:95:d7:ff:d6:f9:
                    4a:ba:27:f0:7b:cd:17:68:e4:35:a9:25:8a:ec:a5:
                    53:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:55:7E:16:7D:51:26:EB:A9:1C:F7:AD:37:F0:3C:53:FF:89:82:88
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/B4557E167D5126EBA91CF7AD37F03C53FF898288.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273713

    Signature Algorithm: sha256WithRSAEncryption
         66:e2:2e:f7:fb:16:9e:74:0f:0b:6a:97:4b:5f:86:0d:f1:62:
         ed:cc:34:27:ad:e9:74:e7:29:1d:63:64:1a:d1:49:8d:f2:eb:
         9d:77:9e:74:b9:41:1f:f7:e6:57:16:f1:19:cc:43:1d:37:ef:
         61:57:a8:d4:ea:f4:d7:77:aa:00:b9:75:12:ac:6e:0d:7a:60:
         fd:c8:2d:39:0c:e1:7a:f8:e6:8a:05:68:8d:d5:00:db:db:f9:
         12:bb:24:b8:af:79:8a:00:ad:16:38:a1:12:40:52:34:f4:56:
         36:11:35:b6:f7:e9:bb:91:0f:b5:93:65:ec:09:f6:c8:41:b6:
         17:8f:15:39:4a:0f:50:c1:23:df:cd:29:c1:0f:8b:53:7c:ed:
         2a:44:83:5e:5f:99:53:f0:78:8c:88:79:6a:88:c6:22:f5:4f:
         46:eb:d9:c3:55:e6:50:b5:9d:ec:d8:c3:62:ae:27:ca:b2:25:
         30:89:e8:05:32:4f:6e:28:30:76:ce:08:b7:58:aa:fb:ad:53:
         62:1f:ce:21:19:92:49:76:a3:fa:7d:ea:bb:c0:2d:d4:08:99:
         7b:32:89:e9:c6:bd:ab:09:81:18:15:ba:f3:23:9d:a3:6e:3b:
         07:f6:da:2c:c7:da:e5:02:e6:37:8a:e8:f1:29:f8:36:79:b5:
         01:74:fa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:07 2025 by rpki-client