Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.cer
File:                     B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.cer (raw, json)
Hash identifier:          n3/vxPeXpuegW6opeqOTu9intHXjAla2uqI8vWG1LNs=
Subject key identifier:   B4:F0:22:99:A2:ED:E5:BD:F5:3F:6D:EC:AC:52:9C:29:F6:E9:28:81
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       67EF637FEAA456E010971E06CC587D4F0553388F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 09:57:33 +0000
Certificate not after:    Thu 05 Mar 2026 10:02:33 +0000
Subordinate resources:    AS: 265130
                          IP: 143.208.152.0/22
                          IP: 170.254.200.0/22
                          IP: 2804:2b00::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ef:63:7f:ea:a4:56:e0:10:97:1e:06:cc:58:7d:4f:05:53:38:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 09:57:33 2025 GMT
            Not After : Mar  5 10:02:33 2026 GMT
        Subject: CN=B4F02299A2EDE5BDF53F6DECAC529C29F6E92881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:df:3c:40:1f:f4:5c:10:bb:71:72:11:f7:c4:
                    5f:e4:11:e7:fc:70:f5:1e:1b:88:21:c4:9a:7e:46:
                    29:8f:ee:6d:22:e4:5c:e0:dd:cd:c1:44:b4:d8:03:
                    1c:5f:76:fe:53:94:56:01:30:0c:1e:fc:29:38:01:
                    75:b0:1f:57:f7:97:cd:64:d2:7f:bd:2e:d7:f1:d4:
                    85:b7:ff:e3:e5:35:83:b2:bb:3c:2b:e7:b5:e6:be:
                    b4:3d:ca:de:b0:9a:10:6d:5b:c8:c9:b3:5b:4d:28:
                    bf:39:86:30:1f:8a:b0:26:0b:fb:0f:79:1f:d2:5e:
                    f2:d5:14:6a:e8:73:6a:be:86:dd:58:72:f4:a8:03:
                    44:9e:dd:22:2a:71:78:69:f0:d4:fa:e9:1c:08:ec:
                    3b:18:80:49:33:90:1d:18:6a:38:76:0f:cd:07:f1:
                    43:24:21:5f:25:ac:1d:4f:47:c6:ac:7c:e2:a1:68:
                    aa:36:c3:a9:5a:08:a1:4d:98:c6:a6:57:34:f0:f2:
                    e7:97:e8:04:e9:bc:1a:91:fb:99:d5:17:e1:b9:4a:
                    a6:a4:fd:96:b6:9d:ae:94:3a:04:24:31:64:30:f2:
                    49:ae:c4:77:14:99:ef:97:af:2a:49:81:17:2e:d4:
                    39:fc:c5:14:a5:59:05:1c:aa:a1:9a:91:22:c5:af:
                    fe:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B4:F0:22:99:A2:ED:E5:BD:F5:3F:6D:EC:AC:52:9C:29:F6:E9:28:81
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/1/B4F02299A2EDE5BDF53F6DECAC529C29F6E92881.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.152.0/22
                  170.254.200.0/22
                IPv6:
                  2804:2b00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265130

    Signature Algorithm: sha256WithRSAEncryption
         bc:02:19:2c:76:be:19:e0:10:15:e0:30:af:d0:6c:b0:b9:48:
         19:23:10:e7:18:57:21:ab:8b:0a:3d:d6:51:ef:a9:87:68:6f:
         12:da:bd:33:73:e9:8a:4b:85:99:77:d0:63:d5:48:02:64:22:
         57:08:06:c6:f2:d8:49:3b:2c:ea:d3:57:13:cb:7b:88:58:b9:
         61:fc:60:43:51:27:e5:f5:62:97:ba:ea:79:fb:09:cd:8a:70:
         b9:cf:65:1d:6c:24:bc:8a:2d:ef:83:49:a2:fc:bd:71:7d:de:
         e1:ea:37:aa:1c:f0:e4:2f:a6:98:7a:ff:85:69:a5:8c:43:2e:
         05:81:ad:f8:3c:b3:b3:1f:00:00:d0:b0:13:c0:85:f1:d2:d6:
         48:ab:e4:36:24:73:c1:83:25:f0:3d:b5:5c:ec:b1:83:f7:58:
         d9:57:51:bc:8a:56:c5:86:9a:73:8e:e6:a3:4b:9c:91:65:a2:
         9c:1b:fc:be:23:fa:4f:b0:98:8b:b3:61:d2:c2:37:d7:0c:bb:
         f5:06:ea:72:78:0e:04:2b:04:1c:45:65:b8:f8:f3:2f:6e:20:
         aa:d7:68:09:a6:2b:64:db:f9:14:84:aa:a3:63:68:25:61:a9:
         a7:44:be:dc:4e:cd:37:2d:ef:77:db:f1:7e:34:41:fb:2c:90:
         76:69:77:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:28:56 2025 by rpki-client