Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BC0B93125F94A89C7FB2337C673C6DCE4B24BDDF.cer
File:                     BC0B93125F94A89C7FB2337C673C6DCE4B24BDDF.cer (raw, json)
Hash identifier:          e/MRWPSd2d9nIGLr667Akqz3Vh8wfhgpg+EyNzRtN00=
Subject key identifier:   BC:0B:93:12:5F:94:A8:9C:7F:B2:33:7C:67:3C:6D:CE:4B:24:BD:DF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6559A73E7A94D608B93B40BFE59129956350A001
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/BC0B93125F94A89C7FB2337C673C6DCE4B24BDDF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Feb 2025 11:30:02 +0000
Certificate not after:    Mon 16 Feb 2026 11:35:02 +0000
Subordinate resources:    AS: 265906
                          IP: 128.201.240.0/22
                          IP: 2804:3fac::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:59:a7:3e:7a:94:d6:08:b9:3b:40:bf:e5:91:29:95:63:50:a0:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 17 11:30:02 2025 GMT
            Not After : Feb 16 11:35:02 2026 GMT
        Subject: CN=BC0B93125F94A89C7FB2337C673C6DCE4B24BDDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:32:e2:36:97:11:42:5e:f4:8a:63:37:2c:db:
                    40:35:5f:e6:6e:a6:2c:0b:fe:48:cc:d0:da:5c:33:
                    bb:a4:e0:ef:3f:a4:70:78:12:b2:48:fd:63:4a:ba:
                    a3:f5:0f:a8:3e:f5:15:21:bf:9c:6d:2d:91:70:02:
                    77:d5:98:97:4c:6a:5b:b5:f4:0a:a2:47:c6:0f:76:
                    d8:16:db:43:ba:90:10:da:ec:9b:81:73:c0:2f:e9:
                    3e:4f:e0:fa:0b:e7:92:86:08:4a:44:9c:8d:b0:da:
                    3c:ab:28:a7:ed:4d:59:14:c6:1c:e6:fc:82:2a:0b:
                    bb:08:fd:2f:16:8f:85:17:c9:10:d9:5a:69:f2:21:
                    19:93:91:1d:6c:3e:50:96:f3:f5:27:a0:47:41:9a:
                    c5:42:d0:1c:16:80:79:c5:58:83:22:d0:5b:a0:de:
                    93:e8:09:9b:c6:c3:2c:ea:2f:32:e2:bb:d9:36:a6:
                    73:2b:bc:e3:33:1f:19:ee:3d:72:75:96:4c:59:04:
                    32:c5:30:dc:f5:22:ce:d9:d7:49:c1:be:7b:e8:39:
                    7c:02:1d:e4:13:d2:af:30:08:dc:68:b6:9d:48:6e:
                    42:00:9c:73:20:34:20:e6:5f:73:fc:f0:16:54:58:
                    db:8a:79:46:51:68:80:20:31:9a:5b:3c:c2:a0:eb:
                    60:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:0B:93:12:5F:94:A8:9C:7F:B2:33:7C:67:3C:6D:CE:4B:24:BD:DF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DC7ruaAmfH2Pq7e72wEnBu1sJTq2rmJqHaWrd5UeDwh6/0/BC0B93125F94A89C7FB2337C673C6DCE4B24BDDF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.240.0/22
                IPv6:
                  2804:3fac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265906

    Signature Algorithm: sha256WithRSAEncryption
         03:d8:01:8e:37:11:fe:e7:db:6f:98:e9:5e:e3:16:d0:55:c8:
         f8:f6:a6:ab:53:82:4c:dd:2c:28:9d:4b:87:a4:38:c5:9d:c0:
         e5:2f:85:24:f7:4a:0c:e3:37:a1:90:fe:e7:69:e2:1b:a5:3f:
         8c:c4:92:72:b4:e8:1d:ee:bd:98:bd:3f:22:85:36:84:5d:3b:
         12:6c:fe:84:6e:ca:ae:bb:1b:14:8f:89:ab:28:c5:40:ed:2f:
         50:25:0c:5e:4f:ea:5b:5c:33:1f:1f:72:f3:5b:33:10:d9:9a:
         0d:db:0b:a4:b7:9c:8d:8a:cb:18:49:55:c8:02:17:d2:7c:e5:
         f8:79:5e:c0:bf:13:96:bc:3b:48:45:b0:08:d8:cc:3d:22:57:
         63:41:da:5c:83:1c:52:ee:7b:37:6b:33:67:e4:11:10:39:72:
         c7:c5:da:3b:ac:69:71:12:f0:b8:5a:91:c4:3e:27:b3:f7:9a:
         0f:b0:83:31:7d:6d:f5:2e:ef:10:a1:f5:ea:44:37:35:41:f7:
         1e:a4:5a:c6:b5:05:ea:7e:ff:35:26:54:08:ff:61:e8:a9:c9:
         8c:d8:3e:da:84:c3:04:7c:03:38:73:0f:f8:be:69:0d:4c:8c:
         dd:f7:e0:b4:e2:d4:cb:85:6b:27:94:c4:05:03:fc:3d:2f:44:
         3f:57:a6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:45 2025 by rpki-client