Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/BF858D763EACB66391C131531036E078E22F45D5.cer
File:                     BF858D763EACB66391C131531036E078E22F45D5.cer (raw, json)
Hash identifier:          YpE4b08wfuuSJhB9XKYrCCb2MYTfHdM86CmPQ1ZHEeg=
Subject key identifier:   BF:85:8D:76:3E:AC:B6:63:91:C1:31:53:10:36:E0:78:E2:2F:45:D5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0AB182BFACE303FE64DB51C32FD18C37DDC05EFE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/BF858D763EACB66391C131531036E078E22F45D5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Jan 2025 12:17:18 +0000
Certificate not after:    Fri 02 Jan 2026 12:22:18 +0000
Subordinate resources:    AS: 270794
                          IP: 189.51.164.0/22
                          IP: 2804:7184::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b1:82:bf:ac:e3:03:fe:64:db:51:c3:2f:d1:8c:37:dd:c0:5e:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  3 12:17:18 2025 GMT
            Not After : Jan  2 12:22:18 2026 GMT
        Subject: CN=BF858D763EACB66391C131531036E078E22F45D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:aa:86:5c:a1:d1:f4:54:2b:05:6d:7b:08:a5:
                    b5:11:1d:01:67:7a:bd:2f:73:21:77:fb:73:51:e9:
                    98:33:c1:d6:66:a8:c5:90:a1:f3:0d:21:6c:e9:72:
                    12:2c:79:25:80:61:e4:a8:c9:40:22:0c:45:94:6f:
                    11:92:9b:a9:16:0c:df:7a:ad:9b:40:21:31:16:a8:
                    a2:a5:79:d8:cb:dd:77:90:99:fd:1e:0c:43:ee:74:
                    df:8e:44:0c:fe:d0:15:c5:40:11:7e:e5:80:f0:d2:
                    88:87:78:16:87:8d:1f:b6:f7:b2:88:fe:7e:12:5b:
                    5a:bc:e0:19:fd:2c:02:0c:f4:6f:ab:73:c6:01:ab:
                    b3:1e:23:91:0c:96:f6:79:ae:11:8e:3c:dd:93:0c:
                    71:af:74:13:22:4e:97:a1:0d:4a:90:8e:f2:f8:7f:
                    7a:2d:f2:45:25:41:dc:be:d0:14:a4:05:a5:d1:94:
                    12:9d:e8:3e:a6:d9:75:65:a9:e6:3b:0e:1e:2a:09:
                    c2:c1:19:6b:9c:d3:89:31:bb:60:ce:b3:3e:9d:ed:
                    e3:e4:24:3a:89:6e:74:40:55:30:a3:ae:ef:2e:15:
                    c7:25:d8:c0:2d:79:ad:0b:2f:ab:00:d6:f5:14:36:
                    7e:28:52:28:46:a5:15:e6:62:f4:cd:7a:cc:a7:89:
                    b2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BF:85:8D:76:3E:AC:B6:63:91:C1:31:53:10:36:E0:78:E2:2F:45:D5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/BF858D763EACB66391C131531036E078E22F45D5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.164.0/22
                IPv6:
                  2804:7184::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270794

    Signature Algorithm: sha256WithRSAEncryption
         76:a1:3f:d6:6c:c9:a3:e9:5e:a5:50:0a:df:04:02:e4:d1:0f:
         2c:0b:63:c3:52:09:14:e3:04:89:b3:53:ee:45:2b:58:ef:7c:
         2c:56:ea:c6:eb:4b:c8:a5:af:43:ca:8b:eb:10:f9:6e:b3:70:
         94:02:11:ae:15:99:7f:f1:fa:ee:9c:b3:c0:24:f4:6e:e1:73:
         ea:2c:f5:2f:77:5a:df:c6:92:a0:89:52:43:b1:13:07:9b:ee:
         45:9a:ef:55:db:53:22:bd:a5:55:e2:41:f4:d2:0a:aa:aa:fa:
         52:60:18:17:c5:62:3b:56:c2:dd:8c:b6:c2:47:4e:f6:1d:85:
         53:6f:96:e3:97:5a:bf:4e:51:93:02:d9:5c:ce:d4:84:21:25:
         24:9c:38:ae:29:c9:60:d7:13:5d:4a:09:0d:20:07:bb:40:3e:
         fc:c6:f4:b7:36:86:19:74:9c:7a:9e:c3:c7:ac:06:25:c5:83:
         4e:e8:97:76:ba:22:83:9a:dd:8c:91:01:76:88:74:68:02:be:
         48:00:21:55:9c:4a:e4:d6:f6:68:65:2a:ba:ff:d1:6d:56:76:
         19:26:33:4f:1e:40:18:32:04:a5:11:86:e6:4e:e1:1a:91:04:
         1c:a5:63:75:76:37:86:73:7f:a0:8e:8a:fc:dc:8b:0d:9f:81:
         68:64:a3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:00:19 2025 by rpki-client