Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C0270E2129CD38A9C1B244ECCDC33C5005305229.cer
File:                     C0270E2129CD38A9C1B244ECCDC33C5005305229.cer (raw, json)
Hash identifier:          AHe9UgiXsTuWf13OAYPSTfF++vHCw6rE4mMI64sfxhU=
Subject key identifier:   C0:27:0E:21:29:CD:38:A9:C1:B2:44:EC:CD:C3:3C:50:05:30:52:29
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6B6BBD9D36DE50798F5F165BAA6CFF4CDA616BE0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/1/C0270E2129CD38A9C1B244ECCDC33C5005305229.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 17:04:58 +0000
Certificate not after:    Thu 05 Mar 2026 17:09:58 +0000
Subordinate resources:    AS: 265061
                          IP: 170.231.56.0/22
                          IP: 2804:3230::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6b:bd:9d:36:de:50:79:8f:5f:16:5b:aa:6c:ff:4c:da:61:6b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 17:04:58 2025 GMT
            Not After : Mar  5 17:09:58 2026 GMT
        Subject: CN=C0270E2129CD38A9C1B244ECCDC33C5005305229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f8:dd:57:69:1d:cc:3c:f3:f4:80:db:04:c9:
                    08:f3:8e:60:04:81:43:6d:a8:f3:95:81:b0:8f:99:
                    cf:21:f2:ba:9c:67:74:78:00:c8:f0:44:d0:c2:86:
                    99:54:74:4a:d1:49:4a:89:23:07:5e:cd:e5:c7:f6:
                    2c:17:65:66:25:e8:fc:1e:c1:d4:c9:4f:fa:a4:bb:
                    80:c7:e2:0a:2b:40:5d:8b:49:57:53:bb:c9:4b:f3:
                    92:58:01:40:12:a5:18:35:32:9c:bf:29:6b:58:d8:
                    98:f9:90:14:34:a8:89:d1:ba:d4:be:0b:40:86:01:
                    09:64:b5:34:5b:92:29:f9:f7:2f:f0:2c:66:7d:38:
                    c7:61:9a:6f:8e:1a:5f:14:eb:9b:2a:53:31:a4:53:
                    7b:b2:a2:b7:58:77:8f:2a:0f:59:32:df:46:01:e3:
                    b8:45:0b:52:d8:d0:e6:ed:e2:29:c0:51:2e:1a:68:
                    52:c7:ca:01:b1:c5:58:1e:63:5c:f7:b2:7c:59:69:
                    3b:ba:ec:e1:f8:c4:91:b6:42:90:6d:c7:6b:3e:29:
                    24:63:f7:40:63:3e:77:f4:36:3f:0e:83:d8:13:bb:
                    11:b7:e1:bf:ae:20:98:cb:91:e1:db:c1:c1:00:54:
                    00:44:51:13:c3:d5:f3:40:24:7f:f4:e7:a6:18:65:
                    3a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:27:0E:21:29:CD:38:A9:C1:B2:44:EC:CD:C3:3C:50:05:30:52:29
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7UQ2cocPwdQnF6G3Kqbz1LFyDnWa1XDenW2soMT16pgb/1/C0270E2129CD38A9C1B244ECCDC33C5005305229.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.56.0/22
                IPv6:
                  2804:3230::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265061

    Signature Algorithm: sha256WithRSAEncryption
         28:23:1b:83:23:7d:82:43:8c:2c:f6:3b:87:82:38:cb:e6:07:
         d2:c1:50:e0:f0:be:fc:14:c8:34:48:7d:b1:18:5b:4b:74:d5:
         64:9e:40:d6:35:6b:84:f4:10:5d:71:a5:00:09:3e:9d:0d:af:
         99:41:03:0b:1a:90:76:86:33:ab:60:6b:3e:72:02:0a:d6:39:
         31:27:4c:d5:c5:99:3e:3c:ba:3a:5b:77:e8:cc:e0:3e:93:ca:
         59:90:92:69:69:fe:4e:d2:9e:db:91:30:fd:8c:86:4e:32:fa:
         a0:7d:df:60:06:c1:67:08:99:c8:80:a9:28:c7:a3:df:3d:c4:
         a6:5e:c8:10:85:f6:b6:83:65:c0:91:cb:c0:c0:d1:b9:93:6b:
         ec:f4:54:7f:3a:29:10:38:23:2c:4a:52:78:93:e7:d5:47:9d:
         78:c5:fe:4f:c7:54:20:0c:11:98:b9:8d:78:fe:77:41:84:54:
         7c:f3:68:93:ef:e6:56:a8:93:8a:b2:1e:25:92:ae:d1:06:09:
         cd:77:bd:f7:b3:99:54:96:8e:86:bb:4d:9b:2b:36:32:8c:87:
         33:b4:20:62:ef:fe:1f:bd:47:4d:4d:89:a1:6f:47:f4:cf:6e:
         c8:c4:0f:f9:cc:ce:28:5a:6a:fe:8d:b1:29:f7:4d:6b:bf:82:
         27:78:cf:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:52:09 2025 by rpki-client