Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C3976BFC098E04D93A5507BBB046C3608B889670.cer
File:                     C3976BFC098E04D93A5507BBB046C3608B889670.cer (raw, json)
Hash identifier:          4Se/XxhX0x/wjbfpxShgWJqWW9iuHi4a47raDMV87/Y=
Subject key identifier:   C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6C0191DBB0F1B735492097F8CFAF73BB989E9E07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:22 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:22 +0000
Subordinate resources:    AS: 269532
                          IP: 45.188.140.0/22
                          IP: 2804:6614::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:01:91:db:b0:f1:b7:35:49:20:97:f8:cf:af:73:bb:98:9e:9e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:22 2025 GMT
            Not After : Mar  4 18:40:22 2026 GMT
        Subject: CN=C3976BFC098E04D93A5507BBB046C3608B889670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ed:26:3d:f2:70:90:b9:df:e5:37:cf:99:9b:
                    6a:c3:35:2e:89:85:4a:72:f1:96:c4:4f:81:41:c6:
                    33:fc:ba:0f:d4:71:70:1f:85:69:5e:ac:69:54:cb:
                    5e:b1:bf:0e:2a:2a:8f:8a:64:97:0a:1c:7f:ea:d5:
                    ca:a9:5c:f1:27:5e:3f:bc:a5:9d:a1:d9:07:7f:c6:
                    33:8c:52:ab:0d:69:9d:a9:4c:b1:f3:75:32:ce:88:
                    a4:0e:5d:ca:d8:e3:b0:5b:79:26:5b:1b:f7:26:d7:
                    76:6a:aa:0c:d5:15:0c:85:2e:5b:8f:18:ac:05:62:
                    14:44:6a:56:48:3e:00:4a:34:20:08:7d:3f:a5:26:
                    f0:e5:57:02:3e:b9:83:d2:0b:d7:3f:97:7d:2c:3c:
                    e5:bb:b4:05:5e:f8:9b:be:60:3a:00:57:8d:df:5e:
                    d6:61:ef:fe:e9:47:0c:0c:24:48:fd:8b:bf:59:c9:
                    df:0a:bc:62:fa:07:24:2e:16:28:f3:b6:e8:8a:63:
                    bf:62:15:1b:3d:eb:77:c6:b1:83:e7:51:26:89:0a:
                    53:15:e7:15:7e:53:b4:67:f6:16:bb:28:a0:a5:03:
                    c5:c1:33:18:ff:8a:fa:c1:b1:5d:38:79:a8:3d:08:
                    8c:62:19:ac:34:7c:23:71:11:5e:08:1a:88:b8:a8:
                    b7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:97:6B:FC:09:8E:04:D9:3A:55:07:BB:B0:46:C3:60:8B:88:96:70
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/1/C3976BFC098E04D93A5507BBB046C3608B889670.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.140.0/22
                IPv6:
                  2804:6614::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269532

    Signature Algorithm: sha256WithRSAEncryption
         01:7f:ef:da:f5:a4:db:f2:b4:48:fa:96:a4:d0:d1:d9:3a:d1:
         6c:ae:3b:43:da:f5:fe:c8:ec:6d:3c:af:54:59:a7:e2:75:09:
         ab:38:85:a5:1d:90:a3:b3:1a:84:c2:14:d6:49:0f:95:03:4a:
         d0:26:a6:bc:21:b8:8d:52:7c:a5:4a:b9:57:6a:f5:70:b5:01:
         ec:7a:f1:c7:7f:f1:31:6a:89:7e:bc:90:ec:71:1d:17:c7:60:
         54:28:93:8e:d4:34:45:cc:f4:c6:a5:2a:3a:93:85:9b:da:3c:
         9e:60:a5:69:d8:21:61:70:84:ea:41:53:79:7b:c8:b1:ce:30:
         74:a8:98:a4:13:11:7b:88:7b:07:e2:d1:66:3d:76:b6:e7:3b:
         71:42:dc:ee:b8:3d:45:6b:7e:8b:7e:95:84:11:63:15:2a:8b:
         6b:f2:14:63:51:0c:8c:87:ca:39:3d:91:b8:8e:9f:dd:0a:96:
         30:a7:7c:18:01:3b:0d:66:26:ea:9d:86:aa:58:8f:62:a5:b4:
         ef:ad:7a:d2:07:4e:e8:e9:79:ec:0d:34:01:30:34:cd:1d:f6:
         d7:89:cf:45:3c:22:4b:41:7d:5e:a0:e0:2c:2e:93:b4:28:d4:
         80:17:7c:5b:cd:3d:02:b8:ce:8d:dd:ef:8a:5f:54:c3:80:95:
         60:6c:ce:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:13:48 2025 by rpki-client