Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BC038A5595864CBCD2C347394864706970D0059D.cer
File:                     BC038A5595864CBCD2C347394864706970D0059D.cer (raw, json)
Hash identifier:          cBbos5K5KMDDjftOSzYCqSjLL81s7g2WlRnb0q9YVZQ=
Subject key identifier:   BC:03:8A:55:95:86:4C:BC:D2:C3:47:39:48:64:70:69:70:D0:05:9D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       32561AA8270CEC3C2AD75B9DF03DD579F9531210
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/BC038A5595864CBCD2C347394864706970D0059D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Jan 2025 17:30:18 +0000
Certificate not after:    Fri 16 Jan 2026 17:35:18 +0000
Subordinate resources:    AS: 264214
                          IP: 138.59.240.0/22
                          IP: 2804:2450::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:56:1a:a8:27:0c:ec:3c:2a:d7:5b:9d:f0:3d:d5:79:f9:53:12:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 17 17:30:18 2025 GMT
            Not After : Jan 16 17:35:18 2026 GMT
        Subject: CN=BC038A5595864CBCD2C347394864706970D0059D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:54:44:6a:a9:5e:50:91:e6:8d:85:ee:91:d8:
                    c3:75:4e:c3:5d:61:4d:48:da:fd:06:47:ba:a6:e0:
                    6a:f9:90:7c:cf:96:c6:8f:21:a0:5a:0e:39:78:77:
                    4e:91:80:37:36:cf:91:56:ae:42:b7:df:d9:25:b2:
                    77:15:98:aa:b4:15:a5:7a:7c:e6:49:ee:75:ac:b7:
                    3b:15:ac:71:2f:78:b8:3f:9b:e1:ec:4a:d4:a0:25:
                    84:6e:bf:bf:36:55:c0:0a:1b:67:91:8c:12:96:a9:
                    60:ea:71:15:2d:11:af:98:38:95:af:71:e6:77:4b:
                    1a:2b:8f:93:f8:5a:08:ba:f7:4a:38:84:be:f8:ab:
                    de:e9:18:f9:24:22:cf:e6:cb:0d:bb:a8:79:4d:b0:
                    48:e7:79:f4:b4:8c:7f:bf:d4:3a:e5:d3:cd:ab:66:
                    7a:67:d9:f5:0b:94:52:1d:0d:ea:fa:2a:a1:05:e4:
                    84:93:dd:f2:d0:47:e0:53:9f:57:72:c9:56:34:71:
                    ea:31:ac:a3:2b:3f:e7:87:4d:4c:cb:8e:ba:0f:4e:
                    40:31:e7:9d:18:c4:7a:b3:09:35:fa:3f:f1:47:80:
                    93:31:4c:dd:aa:f9:1a:59:54:b7:68:e1:72:3f:d0:
                    42:c2:04:f2:3b:55:0d:62:f3:dd:c2:d3:9f:96:d7:
                    c3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:03:8A:55:95:86:4C:BC:D2:C3:47:39:48:64:70:69:70:D0:05:9D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EG38ZT24ea1voETdN4cQxNJmzaRA7jrzcWDwEYD5rpAk/0/BC038A5595864CBCD2C347394864706970D0059D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.240.0/22
                IPv6:
                  2804:2450::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264214

    Signature Algorithm: sha256WithRSAEncryption
         a1:4d:b7:89:f6:30:f3:1d:46:11:88:a6:e6:50:ab:60:21:e0:
         68:ec:d6:08:7f:08:62:d1:05:f0:79:0e:4b:96:0c:bc:25:76:
         d7:bb:de:11:7c:44:b5:bc:1e:07:59:e1:59:22:c3:14:2c:53:
         64:0d:01:75:5e:81:9b:3c:17:b3:24:43:ab:e4:1f:74:31:c6:
         42:c4:14:62:2f:59:ce:b9:29:a6:d9:04:40:1e:d0:5b:ca:7f:
         fb:62:4d:9c:25:13:e4:01:46:ef:95:eb:b3:fc:75:c3:69:08:
         32:1e:f6:62:33:31:da:5a:a6:ab:9b:e4:07:53:ec:46:14:27:
         f8:9e:84:27:c2:59:44:3e:41:d3:6c:04:cd:f6:81:bf:5c:39:
         06:a8:8e:07:ac:db:2b:6d:e6:17:1e:fa:f9:6b:b3:60:3d:d5:
         23:6f:85:57:5c:57:4b:5a:83:0b:93:a9:98:39:b1:b4:54:e1:
         41:67:05:c7:ac:3b:a7:50:ae:c2:21:ad:64:f4:98:9e:dd:49:
         5d:c0:40:5a:aa:81:a5:ae:c7:b8:8f:f7:9a:9c:dc:9b:a6:2b:
         13:4f:11:f9:a6:d9:9d:fd:1c:51:fb:38:f2:b8:6d:a6:cd:cb:
         f3:72:c2:99:00:68:03:59:fb:a7:65:54:4d:ef:ea:24:01:1e:
         9a:40:c4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:10:08 2025 by rpki-client