Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C501FDCC1F74D6FC745690F08BEDA01EFBB035F0.cer
File:                     C501FDCC1F74D6FC745690F08BEDA01EFBB035F0.cer (raw, json)
Hash identifier:          i3lyw5zbgtvrVK4Ds8vqFDaNEC+5UnyORASmpSgrNek=
Subject key identifier:   C5:01:FD:CC:1F:74:D6:FC:74:56:90:F0:8B:ED:A0:1E:FB:B0:35:F0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       670052CAF7EACFD6DE8E3C64EFC510C32F437EE6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/81xpaDCTquN7LppotFKGLxCED19LieeZsF85LZr6bhQi/0/C501FDCC1F74D6FC745690F08BEDA01EFBB035F0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/81xpaDCTquN7LppotFKGLxCED19LieeZsF85LZr6bhQi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Mar 2025 13:27:34 +0000
Certificate not after:    Fri 13 Mar 2026 13:32:34 +0000
Subordinate resources:    AS: 267344
                          IP: 45.234.76.0/22
                          IP: 2804:4c08::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:00:52:ca:f7:ea:cf:d6:de:8e:3c:64:ef:c5:10:c3:2f:43:7e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 14 13:27:34 2025 GMT
            Not After : Mar 13 13:32:34 2026 GMT
        Subject: CN=C501FDCC1F74D6FC745690F08BEDA01EFBB035F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bd:0f:80:f8:68:84:cc:c0:14:d0:58:19:a0:
                    9e:87:bf:4b:57:e1:dd:97:f3:92:b6:52:01:54:0d:
                    82:1c:59:61:0b:4f:cf:d4:36:7c:b3:6a:b1:c4:1e:
                    f0:49:b5:61:bf:10:4f:0e:3c:07:c9:01:f6:95:4c:
                    65:f2:6b:3b:62:43:0e:32:7f:a6:a4:cc:c8:b3:21:
                    66:13:13:cf:40:93:57:91:f7:f8:ed:0e:3c:9d:33:
                    ee:96:96:69:04:34:bd:7d:e1:eb:27:e4:a0:18:ed:
                    90:2b:b1:f9:ad:07:c8:bd:3d:6f:41:4e:23:7c:3c:
                    06:00:26:d0:63:4a:55:fe:98:f0:fe:dd:9e:82:c1:
                    e0:3c:e4:e5:ac:c7:b0:c9:a7:2f:ed:1b:50:41:ca:
                    90:9e:d2:49:ff:38:e2:15:2b:6e:26:97:1b:b6:f3:
                    d8:73:1f:16:6a:66:ca:88:40:1a:5c:dd:a7:1b:be:
                    57:a4:7f:9d:45:f1:8c:de:80:87:dd:ae:5a:4f:4a:
                    0c:4e:5e:f2:b5:b7:d2:f4:36:af:fd:ba:1a:fa:1b:
                    fb:ce:86:e7:9b:9d:a5:c4:fa:e4:9f:88:f0:1b:25:
                    22:a9:c1:f6:14:b9:e4:1f:3f:65:c4:a3:55:cb:74:
                    50:48:6d:bc:51:2b:e1:16:c1:16:56:67:bc:66:18:
                    47:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C5:01:FD:CC:1F:74:D6:FC:74:56:90:F0:8B:ED:A0:1E:FB:B0:35:F0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/81xpaDCTquN7LppotFKGLxCED19LieeZsF85LZr6bhQi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/81xpaDCTquN7LppotFKGLxCED19LieeZsF85LZr6bhQi/0/C501FDCC1F74D6FC745690F08BEDA01EFBB035F0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.76.0/22
                IPv6:
                  2804:4c08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267344

    Signature Algorithm: sha256WithRSAEncryption
         ca:28:ac:f8:94:57:4b:eb:31:58:91:2f:83:c3:ef:23:11:50:
         a6:1b:93:37:8a:c8:48:d1:4e:b6:56:c8:4f:c4:66:01:a2:71:
         49:0e:0c:89:75:39:95:9c:23:82:2f:00:da:9e:c8:2b:5e:c0:
         35:be:e5:72:ac:e0:9c:bf:12:3f:a5:9e:30:d2:ea:b2:a4:c7:
         ec:fb:98:54:3f:2d:f8:70:33:7a:5c:99:43:71:09:9b:e2:b8:
         7f:53:14:cf:d0:d9:1b:9b:ad:c2:e6:11:40:6e:1d:a7:82:ab:
         61:ec:5b:19:27:ec:0c:1c:6c:15:74:3f:55:f8:3a:cc:2f:c1:
         7c:f5:6e:47:a2:c5:82:f8:1b:81:f7:14:a6:2b:b4:05:f6:bc:
         72:b2:69:56:0e:48:8e:81:69:87:41:af:4c:ce:0b:b2:55:46:
         1c:f9:4a:1e:c1:2c:fb:e2:c7:3c:16:dd:2e:07:1d:31:a4:98:
         4e:a1:ae:d2:a7:42:43:0c:ad:39:88:9a:2f:45:23:1e:1a:f3:
         cf:e3:52:e9:03:4e:ff:1d:fc:08:8b:a9:b7:4f:9b:a0:2d:a1:
         b9:a1:a5:68:e2:24:ca:e1:0e:84:ad:49:b9:7d:62:3f:da:d6:
         4a:44:c9:72:03:e8:76:8a:8b:f9:1d:04:4d:cd:2c:66:51:ff:
         c7:36:68:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:03:07 2025 by rpki-client