Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F.cer
File:                     BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F.cer (raw, json)
Hash identifier:          mwl3X9Se4wwm1CnQR7vpI6lILIV8c6lobmSHpbHoEhU=
Subject key identifier:   BD:FD:A8:D2:4F:7F:E4:92:E3:B1:FC:3D:2D:5C:C4:96:97:65:C2:6F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4CF64C7267E006F7AF327DE416D088B55492AB68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/1/BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 15:10:44 +0000
Certificate not after:    Fri 06 Mar 2026 15:15:44 +0000
Subordinate resources:    AS: 269276
                          IP: 45.182.88.0/22
                          IP: 2804:621c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:f6:4c:72:67:e0:06:f7:af:32:7d:e4:16:d0:88:b5:54:92:ab:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 15:10:44 2025 GMT
            Not After : Mar  6 15:15:44 2026 GMT
        Subject: CN=BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ec:7c:02:0c:ff:7b:31:74:2d:68:46:99:6a:
                    53:1f:b9:42:ab:4c:de:ad:18:05:fa:20:e1:cf:30:
                    c6:cd:2c:b2:01:21:cd:14:eb:f0:6f:55:5d:30:11:
                    d2:b6:1b:c3:35:94:b4:d5:69:7f:bc:79:91:1c:8e:
                    4c:92:71:9b:c8:ed:6c:68:73:3c:85:7b:4c:40:7b:
                    89:55:2c:3a:78:a5:03:fe:34:d7:62:f9:cf:f2:d9:
                    26:c9:27:83:e4:fa:82:04:14:1a:97:d7:91:51:86:
                    1c:cf:c4:9c:23:50:b2:57:91:c6:a0:40:02:86:2f:
                    c1:50:e3:8a:79:17:86:51:9f:21:c4:aa:97:45:11:
                    9f:c8:af:18:98:f0:db:2b:19:0b:b4:2d:f3:55:a8:
                    6c:fe:dd:f0:29:68:5b:4e:07:a7:6d:42:16:e7:c4:
                    19:cf:77:e9:b3:6c:af:a0:2f:c8:a7:e3:bb:d8:28:
                    24:46:94:c0:54:72:45:7c:5a:37:82:f4:03:9b:c0:
                    fa:3f:d5:b6:c9:6c:7e:af:68:7f:00:b2:f1:ca:d2:
                    c4:ae:e5:ab:ac:9e:95:08:c1:23:ca:5d:53:c7:7e:
                    42:0c:ba:a6:7d:10:9c:3f:33:b7:66:e7:7d:e9:16:
                    29:15:98:ab:b7:f0:99:76:9d:9b:1e:64:90:5b:a5:
                    cc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BD:FD:A8:D2:4F:7F:E4:92:E3:B1:FC:3D:2D:5C:C4:96:97:65:C2:6F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/1/BDFDA8D24F7FE492E3B1FC3D2D5CC4969765C26F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.88.0/22
                IPv6:
                  2804:621c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269276

    Signature Algorithm: sha256WithRSAEncryption
         3f:76:c0:67:99:1f:9f:ae:08:e3:1e:48:28:fa:8b:41:e4:dd:
         2c:86:da:98:f5:99:91:15:d4:69:f1:2c:5c:a1:a8:43:85:6c:
         48:72:f9:b8:c0:43:69:6f:75:19:be:d3:df:9b:1d:1e:13:c1:
         c9:24:88:01:08:51:74:d7:b6:45:30:cb:cd:01:53:e0:24:f5:
         ad:30:87:ec:6f:7b:97:b3:c3:93:21:b2:9a:36:4f:0c:33:7e:
         37:3d:5a:ab:c5:a5:30:33:eb:51:27:b8:2d:d7:21:c1:bc:c3:
         61:38:e7:33:97:25:b2:0c:a2:54:59:0d:fd:0f:ce:49:d7:4d:
         11:90:0f:f1:29:25:c0:b9:a5:b0:1e:c8:8b:60:e3:7c:53:73:
         8f:1e:eb:49:f2:ec:48:ae:cb:c2:40:41:18:7b:fe:18:fb:53:
         f4:24:41:32:8b:53:f4:87:88:54:91:fd:64:57:a8:0d:13:ca:
         5d:42:43:07:a9:60:a1:f7:73:84:52:e4:da:0e:a8:e6:ff:e9:
         6d:48:8e:2f:89:32:54:ed:3e:d1:3d:8e:a4:83:9a:70:45:dd:
         d7:57:c2:b2:3e:aa:95:3b:11:42:a6:d0:42:58:a9:72:ca:d2:
         3d:93:d8:05:df:9c:4e:93:35:02:95:23:13:21:72:b7:f7:b4:
         0d:7a:d0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:27:40 2025 by rpki-client