Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/CEC257CDA1BB401235BD0114C1FA2BA6A966D311.cer
File:                     CEC257CDA1BB401235BD0114C1FA2BA6A966D311.cer (raw, json)
Hash identifier:          x11P0sqWcDAw4CbOgBVdBgD/hhLyHTaiG8AmiPvPgns=
Subject key identifier:   CE:C2:57:CD:A1:BB:40:12:35:BD:01:14:C1:FA:2B:A6:A9:66:D3:11
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7059904F2B5D4CA92B4BD75A037AED537EE30E43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/CEC257CDA1BB401235BD0114C1FA2BA6A966D311.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 16:48:05 +0000
Certificate not after:    Wed 04 Mar 2026 16:53:05 +0000
Subordinate resources:    AS: 271683
                          IP: 131.100.200.0/22
                          IP: 2804:7f5c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:59:90:4f:2b:5d:4c:a9:2b:4b:d7:5a:03:7a:ed:53:7e:e3:0e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 16:48:05 2025 GMT
            Not After : Mar  4 16:53:05 2026 GMT
        Subject: CN=CEC257CDA1BB401235BD0114C1FA2BA6A966D311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3c:66:0b:d6:fc:b4:65:be:86:d9:93:df:2d:
                    5d:04:7a:57:45:70:45:96:e8:5d:11:47:c3:41:14:
                    3a:99:49:f5:4f:bf:74:cf:ad:97:ad:c4:f4:07:70:
                    da:36:f3:c7:a9:2e:05:61:cd:30:73:56:c9:98:a6:
                    43:c2:f7:8c:af:4f:aa:e1:47:b2:5a:1b:c5:98:c8:
                    0f:3c:66:ec:4e:fa:61:af:8a:f3:6b:6f:3c:d3:c5:
                    7f:39:7f:7e:5a:59:b0:8a:f9:a8:8f:96:08:9a:c5:
                    fd:6e:5d:3e:75:98:5e:f3:dc:3c:7d:db:14:19:35:
                    04:40:bd:7b:70:aa:57:4f:02:80:d0:74:2c:0e:26:
                    1f:d2:be:1c:f4:30:c3:8f:75:37:d7:55:dd:b3:f6:
                    e5:94:dd:70:90:b4:39:c9:ab:c4:66:85:b8:9f:30:
                    3e:60:be:b6:5b:50:b5:6a:20:03:00:1b:d4:c0:ae:
                    15:64:4c:47:e6:5b:db:df:05:72:5c:c2:8e:22:08:
                    67:41:24:d2:0c:da:de:74:85:46:6a:28:45:47:a4:
                    cb:82:46:a0:0b:f8:83:9f:0d:81:92:46:a5:ed:57:
                    33:12:6e:eb:a9:11:61:23:d8:fb:27:6d:40:7d:fb:
                    08:6c:bd:66:cb:cc:ce:52:54:a1:3a:0b:fa:11:3c:
                    05:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CE:C2:57:CD:A1:BB:40:12:35:BD:01:14:C1:FA:2B:A6:A9:66:D3:11
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9TxbWNx4X9cPz3tECayCXXwDCL3rEXYAfe4FgS1vJkj5/0/CEC257CDA1BB401235BD0114C1FA2BA6A966D311.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.200.0/22
                IPv6:
                  2804:7f5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271683

    Signature Algorithm: sha256WithRSAEncryption
         a4:86:5e:32:f4:8c:f0:70:0c:cf:ee:e0:78:b4:d9:c5:95:6d:
         4c:f7:af:c6:4e:7a:49:5d:c5:37:00:49:c9:e8:1d:a3:7d:23:
         3d:3f:d4:4e:82:9c:dd:07:e9:44:b2:c4:29:d7:ef:0d:05:ab:
         f9:19:ad:85:8b:ac:8a:54:bc:6b:e5:ac:1b:32:69:26:9b:e5:
         7f:d4:82:be:d1:ac:b2:68:29:09:c5:8d:e1:21:09:cc:b7:9f:
         68:03:02:b0:d7:6c:8e:26:f7:1d:03:de:d0:08:7f:56:fc:4e:
         a2:21:43:3f:38:b7:7b:cb:72:79:ed:1e:ae:0b:5f:17:ad:c5:
         35:1f:ba:09:fb:43:72:df:41:de:07:84:5e:b2:27:4a:e6:c0:
         eb:1a:bf:53:e7:4b:4a:56:a1:f6:6c:f1:ee:f3:c6:40:a1:20:
         d9:e3:69:e8:ae:1c:e8:4b:56:f7:ac:31:d5:e6:1b:bc:f5:b7:
         b2:9f:24:52:10:d7:b4:84:6f:1e:63:22:de:4d:b1:3e:9a:38:
         97:71:62:eb:8e:75:65:4d:7c:29:83:ae:e8:90:52:1d:22:2f:
         45:14:60:40:10:bb:ae:b2:59:3c:f9:0e:5e:4d:fe:50:4a:81:
         99:e8:90:f1:83:85:87:1d:a6:4d:5a:e3:a5:21:63:e3:65:4e:
         17:5e:80:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:22 2025 by rpki-client