Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BC834F1ADC6997F0F8557889193E5B0D17827E29.cer
File:                     BC834F1ADC6997F0F8557889193E5B0D17827E29.cer (raw, json)
Hash identifier:          1CViHPxjPrLhcrLxPnMVTr9PIP1ggU6/ZgyOz+2FNRM=
Subject key identifier:   BC:83:4F:1A:DC:69:97:F0:F8:55:78:89:19:3E:5B:0D:17:82:7E:29
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       218E018FFABD017FA5F5EB65D4B328DE42E6F982
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Mar 2025 18:38:26 +0000
Certificate not after:    Wed 25 Mar 2026 18:43:26 +0000
Subordinate resources:    AS: 269530
                          IP: 45.188.184.0/22
                          IP: 2804:660c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8e:01:8f:fa:bd:01:7f:a5:f5:eb:65:d4:b3:28:de:42:e6:f9:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 26 18:38:26 2025 GMT
            Not After : Mar 25 18:43:26 2026 GMT
        Subject: CN=BC834F1ADC6997F0F8557889193E5B0D17827E29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b3:71:9b:3a:93:e0:40:3e:98:eb:fd:0b:d5:
                    49:b2:bb:b2:6f:4a:76:64:22:bd:95:b3:30:db:40:
                    41:59:0f:84:49:17:1e:88:07:db:71:91:e3:86:2f:
                    fa:57:c6:8f:bd:fa:8f:0a:4d:07:d0:16:08:8f:a1:
                    65:08:a3:67:18:f2:16:81:aa:1c:bb:bb:d2:71:57:
                    a3:ef:b5:c3:86:93:1e:e4:3c:4f:e8:0b:d2:69:64:
                    f4:31:1c:0e:d1:10:31:fd:48:7e:16:ef:5f:eb:2b:
                    06:28:a3:3e:a8:22:f0:5d:bb:15:61:c1:6a:90:95:
                    d0:29:7c:77:31:c7:16:7f:57:00:92:69:c8:a3:31:
                    2c:ca:29:26:96:e7:75:9e:95:94:0d:f9:b1:56:73:
                    9d:c5:70:8c:22:75:ba:5a:43:d7:38:56:03:cc:36:
                    65:4e:40:10:42:51:cd:25:af:9e:d5:e7:4a:d0:fc:
                    c5:23:69:32:aa:60:e0:cf:43:ef:6a:3e:39:2f:5c:
                    b8:82:7b:43:31:e4:99:d0:f8:be:9f:94:d0:8e:bf:
                    40:ec:4d:93:ce:c5:ef:05:ab:8e:3d:4e:f3:79:e4:
                    02:b1:d5:b8:f2:27:b1:27:72:2f:d6:7f:6a:72:36:
                    56:fb:23:02:ed:42:f4:a3:44:ef:f7:b6:41:82:95:
                    68:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:83:4F:1A:DC:69:97:F0:F8:55:78:89:19:3E:5B:0D:17:82:7E:29
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DJyKHwZK7ktLwJv4Fy4twbyhLED8d6mmeYTrJNtnShEP/0/BC834F1ADC6997F0F8557889193E5B0D17827E29.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.184.0/22
                IPv6:
                  2804:660c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269530

    Signature Algorithm: sha256WithRSAEncryption
         64:4e:50:68:b7:9a:11:aa:84:16:22:53:df:2a:94:52:4c:c4:
         2c:70:37:d8:1d:96:74:6b:7f:19:c5:90:3b:7c:48:45:b6:cb:
         8c:0a:00:83:33:87:0b:63:44:3d:88:af:5f:97:20:b9:e7:f1:
         be:7d:9b:c9:32:21:1d:eb:90:f3:de:6f:e2:c4:54:32:b4:ad:
         7d:d9:36:c1:8d:a6:97:61:46:10:7a:67:fc:46:2d:26:7f:ab:
         82:72:1d:40:26:4e:af:7e:25:59:62:ca:4f:33:ed:70:07:ed:
         e2:e3:dc:46:6a:0c:6e:13:52:e6:1a:24:75:b4:6d:91:85:a7:
         76:ad:1b:4f:d2:20:9b:4d:5c:70:9e:83:44:1b:f1:1e:b0:d8:
         db:4b:31:b7:dc:51:41:4c:1c:ed:87:65:ea:91:d8:e7:42:af:
         dd:4c:6a:05:c1:93:bd:10:0d:d4:68:ae:8d:e7:eb:10:70:1c:
         b6:10:19:07:d2:01:8f:42:ef:d4:33:51:6d:4b:e0:05:27:14:
         20:b9:95:ab:b6:21:cd:09:b6:94:4d:00:f6:8e:3a:64:19:55:
         55:02:49:01:94:09:01:d6:c7:2b:c8:f5:f4:3d:d4:9e:b9:ac:
         2b:60:cb:82:54:ad:85:23:dc:b5:c8:90:33:34:bc:f0:94:2a:
         81:9b:2a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:29:21 2025 by rpki-client