Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
File:                     B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer (raw, json)
Hash identifier:          XoWENd3XfjdoQEClUmyeTfLFDN0PiZFhQvbc9kDe4Dk=
Subject key identifier:   B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6571A5AE77D1C4F24524288336A81FE1D61CA763
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 21:21:23 +0000
Certificate not after:    Thu 05 Mar 2026 21:26:23 +0000
Subordinate resources:    AS: 52743
                          IP: 177.85.164.0/22
                          IP: 2804:65f4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:71:a5:ae:77:d1:c4:f2:45:24:28:83:36:a8:1f:e1:d6:1c:a7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 21:21:23 2025 GMT
            Not After : Mar  5 21:26:23 2026 GMT
        Subject: CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:32:19:29:1c:65:a0:80:48:17:66:4a:04:df:
                    6d:fe:33:60:d7:d2:93:77:e2:15:7a:2a:ef:2d:68:
                    7c:84:4c:0d:05:25:73:dd:23:ec:e9:47:87:b4:27:
                    34:12:bb:ad:4e:08:87:c8:fb:d0:f8:68:67:34:45:
                    7b:2a:35:29:60:5d:7c:ab:90:6e:4a:3e:12:f5:c6:
                    4b:bf:82:d3:f8:1c:92:31:4c:ac:59:ff:f9:57:7e:
                    29:07:d0:49:86:9d:d8:13:6f:9e:09:fa:af:a3:7d:
                    1b:45:6c:26:2e:36:3e:f6:29:18:c0:ad:ef:af:e6:
                    ed:62:96:fa:15:a5:5c:ab:8f:a1:db:83:d6:f4:da:
                    30:44:d7:c2:a9:77:34:c8:05:0f:8c:4e:10:a3:c2:
                    62:44:47:3c:e9:3c:a2:7e:40:62:2c:4a:78:7f:f6:
                    4c:6d:0e:78:e3:cb:a6:96:8d:75:ad:08:98:7e:37:
                    c0:f2:fd:55:bb:07:28:98:f4:c3:65:bd:f3:8d:bd:
                    f0:83:27:4d:04:fc:48:27:f1:19:05:58:af:2d:4c:
                    57:16:f0:98:0c:b4:32:11:bf:0f:b0:57:81:11:51:
                    1e:51:4a:0d:32:a5:2c:87:8a:49:83:f6:eb:88:8a:
                    4e:cd:3a:86:3a:29:e2:02:59:f5:1c:34:9c:7b:bd:
                    cf:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.164.0/22
                IPv6:
                  2804:65f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52743

    Signature Algorithm: sha256WithRSAEncryption
         31:70:83:29:10:55:e7:cd:db:e9:66:2c:b2:0f:bb:a2:9b:1c:
         77:cc:04:40:ab:ca:27:0e:89:76:e4:7f:fa:70:42:00:36:91:
         cf:e6:d7:0f:3b:17:f4:17:cc:d5:9a:33:ee:25:95:07:d9:55:
         a8:ee:52:12:00:9a:6c:3b:76:f9:40:8c:b7:e6:46:bd:e5:c7:
         46:f0:8d:e4:2f:0a:4d:0b:a2:7a:23:73:be:07:1a:14:e2:01:
         75:5e:38:8b:45:29:8b:85:61:9c:3f:bb:00:e9:e9:f6:41:87:
         69:4c:94:1c:a9:4b:0b:93:c9:43:4b:ba:82:4b:e4:3c:b5:c0:
         7d:b7:67:4d:fc:25:cc:b1:35:07:15:98:67:ba:58:ab:99:65:
         d1:48:f8:58:c5:3e:99:e6:d2:26:5a:67:17:c7:af:5b:fc:8f:
         b2:56:0e:0d:8f:7a:cc:d0:38:27:04:6d:eb:d1:15:7d:49:a0:
         ec:ff:62:8d:d9:5a:e6:a3:0c:80:2b:98:cb:51:09:b5:69:b3:
         d6:87:0e:37:1c:d5:c1:ba:a1:ae:26:bf:51:0e:fa:78:fe:49:
         88:1a:54:c1:49:63:dc:9f:a2:2c:ef:1a:35:cd:64:52:1d:2b:
         6d:46:19:71:09:ba:49:24:e1:3b:46:a5:cf:fb:7a:f1:00:e1:
         c7:43:28:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:33:38 2025 by rpki-client