Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer
File:                     B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer (raw, json)
Hash identifier:          iyL8LkkSgKscuPneFVf6IKNUcYK+hW3qCLjN5kfeKfQ=
Subject key identifier:   B4:8A:18:1C:2D:C4:48:2E:F4:44:11:B6:6E:BF:4E:21:5B:D8:6B:5F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       04A5759FAD1BF2B75902D47547FF844662089993
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 11:15:40 +0000
Certificate not after:    Thu 05 Mar 2026 11:20:40 +0000
Subordinate resources:    AS: 264270
                          IP: 45.234.24.0/22
                          IP: 138.118.244.0/22
                          IP: 170.84.236.0/22
                          IP: 189.36.248.0/22
                          IP: 2804:2548::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a5:75:9f:ad:1b:f2:b7:59:02:d4:75:47:ff:84:46:62:08:99:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 11:15:40 2025 GMT
            Not After : Mar  5 11:20:40 2026 GMT
        Subject: CN=B48A181C2DC4482EF44411B66EBF4E215BD86B5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5c:73:d5:cf:a8:da:ef:d1:9c:03:d5:2b:16:
                    c9:95:d3:46:bf:52:ee:26:06:85:cc:61:d5:ed:49:
                    5d:13:bf:fe:67:d2:d6:3f:17:d7:a1:04:81:29:7f:
                    11:5f:ad:52:93:c4:bf:23:ef:93:8d:cf:cb:fb:c5:
                    39:b1:3c:ba:61:61:ac:f6:3a:09:24:e7:4d:0e:f4:
                    53:8d:ef:c0:90:f6:c7:c7:cc:2e:b8:2f:fa:82:a5:
                    ac:56:1f:cb:0c:46:55:bc:dd:de:19:fb:4a:a9:23:
                    fb:d0:79:8f:4d:1a:12:55:0f:df:9d:f7:84:65:28:
                    26:f5:18:de:4a:93:15:d9:43:9b:4d:45:12:19:0e:
                    63:ec:15:e6:57:4e:61:98:1c:14:a6:66:4d:a5:3e:
                    69:54:13:f9:8c:cb:62:15:26:a4:ff:0c:5d:e4:22:
                    ca:d4:d0:6d:b7:74:08:a7:6d:83:50:8f:3e:4b:b4:
                    05:6f:bc:cd:9f:59:54:4a:c3:9a:2d:11:ff:c9:f6:
                    d3:e1:31:57:08:db:52:df:f6:9e:37:a0:ac:fd:52:
                    70:bf:36:a9:4f:87:89:72:9f:c4:84:9a:33:82:11:
                    d2:25:e5:d1:0c:e0:3b:27:0a:4c:0f:b1:81:b3:d2:
                    f0:77:d1:de:bb:2b:93:f5:ce:7b:57:9d:e9:60:9b:
                    aa:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:8A:18:1C:2D:C4:48:2E:F4:44:11:B6:6E:BF:4E:21:5B:D8:6B:5F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.24.0/22
                  138.118.244.0/22
                  170.84.236.0/22
                  189.36.248.0/22
                IPv6:
                  2804:2548::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264270

    Signature Algorithm: sha256WithRSAEncryption
         b8:8a:c3:5a:8f:70:c6:62:1e:ab:c2:bf:d0:ec:7b:aa:20:b5:
         ff:32:5b:38:ae:bd:ed:b8:1d:a9:9c:be:4c:05:e3:06:77:50:
         3c:10:c5:d8:a3:69:9c:2a:c6:a7:30:8d:1c:bd:81:a2:e9:20:
         69:ea:25:d9:a5:29:e9:91:1d:2a:87:ed:87:74:79:56:e5:d7:
         3e:cc:a8:5a:d6:7f:a7:50:03:e1:c6:e2:9b:02:87:ef:51:1a:
         9d:a2:b6:f9:ce:4f:19:70:fb:1a:8b:ad:3e:98:ca:7b:7c:15:
         ea:af:24:48:7c:4c:c0:9b:e8:2a:d9:73:9b:b3:90:0a:df:d0:
         6b:e6:d3:66:3a:35:aa:e7:ee:57:45:e6:7b:e8:20:f7:04:f5:
         88:2b:c2:1f:6a:7d:0a:26:e6:59:e4:73:3b:6b:62:4d:78:58:
         a6:a0:49:5b:78:cf:86:d8:30:3b:23:bc:3d:8d:74:11:26:a8:
         20:0c:3c:bf:77:f8:97:ca:0e:bb:d5:74:9e:64:0b:a1:75:55:
         85:2a:5d:e7:49:92:78:cf:f1:7b:e6:1c:ac:ce:48:fa:4a:47:
         43:3a:e8:90:3b:1d:6a:dd:30:60:9b:c2:db:7e:db:fa:56:36:
         88:e5:60:2c:7c:6e:77:9b:e1:20:11:ad:85:f4:c9:30:e5:a9:
         1d:ab:69:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:35:52 2025 by rpki-client