Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CB0236634B4C2CE495EE34D60558955292749C07.cer
File:                     CB0236634B4C2CE495EE34D60558955292749C07.cer (raw, json)
Hash identifier:          ekHJTWihtasUZxtTBMOt06TBwkAxAx8hxIlbkbSS4og=
Subject key identifier:   CB:02:36:63:4B:4C:2C:E4:95:EE:34:D6:05:58:95:52:92:74:9C:07
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       58213923D3802836D83D8551C55E64D20964D05B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/CB0236634B4C2CE495EE34D60558955292749C07.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 12 Dec 2024 14:01:13 +0000
Certificate not after:    Thu 11 Dec 2025 14:06:13 +0000
Subordinate resources:    AS: 269517
                          IP: 45.188.72.0/22
                          IP: 2804:65d4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:21:39:23:d3:80:28:36:d8:3d:85:51:c5:5e:64:d2:09:64:d0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 12 14:01:13 2024 GMT
            Not After : Dec 11 14:06:13 2025 GMT
        Subject: CN=CB0236634B4C2CE495EE34D60558955292749C07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ef:cd:45:5a:9d:59:82:0e:60:33:d5:25:fb:
                    98:d8:01:93:39:9f:d9:b2:f1:55:45:3b:c6:70:f3:
                    22:13:83:08:4b:7f:9d:98:78:22:23:d9:2b:a6:9d:
                    8c:90:b3:29:6f:3b:7b:4f:06:2c:93:61:b6:47:31:
                    d6:66:5a:c8:bb:39:c7:62:a4:9c:59:18:28:35:be:
                    bb:cf:d6:9d:47:6d:33:76:75:77:52:58:fa:85:9e:
                    5c:5a:6f:4c:2b:e8:ed:f4:02:c8:6d:f8:e0:16:68:
                    f3:b3:79:69:d1:31:f2:6f:c4:ae:d6:79:70:2e:ee:
                    e6:bc:44:f8:c7:36:30:27:79:c0:b0:3f:2f:1c:e2:
                    fc:2b:c0:dd:54:fc:e8:a0:a1:1d:d1:15:d6:d8:69:
                    5b:a0:52:6f:45:0a:f4:25:c9:d7:e2:b3:f0:c2:fd:
                    95:06:0a:2d:1a:99:0a:41:21:e4:81:a9:2a:29:37:
                    e7:aa:62:93:6e:6e:76:17:d4:32:0f:72:3f:af:f9:
                    50:a5:3e:98:78:69:bc:48:71:8d:cd:f5:a3:fe:63:
                    64:21:61:07:42:56:80:ef:46:5e:4b:a6:4c:91:ad:
                    34:20:22:46:07:8b:31:4d:dc:9f:28:11:29:1d:6f:
                    ec:39:a4:f3:3e:bd:ec:bc:42:4e:5b:cc:5c:6f:7f:
                    7e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:02:36:63:4B:4C:2C:E4:95:EE:34:D6:05:58:95:52:92:74:9C:07
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EpLg6nbdJgvVhk9pd1yRvfVLyrXsQTAGpnuM8P9bMovb/0/CB0236634B4C2CE495EE34D60558955292749C07.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.72.0/22
                IPv6:
                  2804:65d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269517

    Signature Algorithm: sha256WithRSAEncryption
         6b:a1:03:c5:ba:53:72:d6:bc:4c:ba:36:85:b3:26:52:26:e4:
         17:e3:26:f0:7d:40:b3:6c:2a:55:47:ac:aa:94:e1:05:28:08:
         31:10:74:8d:8c:44:28:ca:f4:29:83:87:dd:ea:52:7d:c9:fa:
         b2:af:d7:6d:42:6c:d4:1c:0f:bd:cd:63:4f:a0:0d:b9:86:82:
         84:de:0f:a5:64:d4:73:97:d8:94:31:b2:d6:c7:35:15:cf:a7:
         b3:17:74:2f:c3:7d:24:97:34:93:38:d4:ec:9b:bf:07:f3:f1:
         3e:ce:23:68:79:ef:f6:31:fd:ab:3c:01:62:2d:4e:52:f8:9c:
         03:7e:12:e4:55:7a:d1:ae:40:79:87:49:fa:1b:5d:11:55:71:
         cc:33:07:9b:ea:af:72:5a:fa:95:27:21:21:2f:62:e3:d2:b3:
         fe:a6:6f:f1:cc:b2:3d:bb:ee:da:0d:97:5b:ba:11:cc:8a:85:
         79:02:24:5e:96:f1:d4:79:ff:49:64:26:e0:c2:82:49:5a:92:
         3a:2c:fe:d0:9c:d7:6f:9f:da:8f:89:51:8e:f1:a7:b3:08:a4:
         f9:17:be:7a:35:af:7a:1a:b0:47:50:8b:a9:59:13:f4:25:59:
         38:59:e5:46:41:c4:6d:68:01:5b:58:72:07:b4:54:db:97:7d:
         f2:3f:f3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:21 2025 by rpki-client