Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D0949575FA1C238E3C94468378E941047564BCDE.cer
File:                     D0949575FA1C238E3C94468378E941047564BCDE.cer (raw, json)
Hash identifier:          g9uNQuRnEjlUgBqrSrZTR76G4qfkqVNZWWi8sOesF18=
Subject key identifier:   D0:94:95:75:FA:1C:23:8E:3C:94:46:83:78:E9:41:04:75:64:BC:DE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F38A1B1A247CEBAD47472BF451B5F895DBDDBB8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/D0949575FA1C238E3C94468378E941047564BCDE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Jan 2025 00:43:29 +0000
Certificate not after:    Tue 06 Jan 2026 00:48:29 +0000
Subordinate resources:    AS: 267351
                          IP: 45.234.4.0/22
                          IP: 2804:4c20::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:38:a1:b1:a2:47:ce:ba:d4:74:72:bf:45:1b:5f:89:5d:bd:db:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  7 00:43:29 2025 GMT
            Not After : Jan  6 00:48:29 2026 GMT
        Subject: CN=D0949575FA1C238E3C94468378E941047564BCDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:83:9e:c6:cb:44:fe:94:f6:25:d8:c9:ac:69:
                    a9:bb:70:ad:b9:1f:76:15:50:9a:e8:12:37:47:04:
                    da:9e:c0:dc:43:6b:c9:0f:ae:63:4c:cb:16:c5:98:
                    b9:71:16:0d:d5:73:e4:70:7b:d4:25:a6:03:26:43:
                    fa:9e:aa:dd:6f:1d:47:53:88:39:f9:64:9f:fc:0e:
                    37:84:3a:55:bb:ca:b5:3f:13:3b:cf:c8:fe:04:e1:
                    1a:ff:38:1a:15:e2:4e:b3:a7:e6:52:d8:c9:d1:20:
                    64:43:85:0e:4d:1c:e8:53:37:2c:ed:ee:cc:1d:07:
                    97:bf:b9:0b:bb:72:ce:54:95:18:f2:09:4a:06:6c:
                    d3:f5:b0:a1:58:eb:95:2d:c3:00:14:ff:08:1d:a5:
                    d9:24:20:06:a5:bc:66:af:d4:2b:1c:ba:14:2b:76:
                    58:12:5f:94:a3:9c:59:d9:a1:b2:7d:94:1a:9b:6a:
                    46:26:1d:0d:67:5a:70:eb:ce:af:76:45:89:10:c8:
                    4f:40:9a:01:f8:ea:c8:42:4a:23:eb:c4:37:1c:09:
                    e4:60:5b:87:84:38:d0:bb:13:1f:c1:be:a1:a3:1d:
                    6c:6f:7e:96:7e:ef:40:1d:af:2f:9b:c9:47:35:b9:
                    24:24:47:e9:0f:4c:57:6a:8c:a4:28:88:a3:7f:51:
                    13:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:94:95:75:FA:1C:23:8E:3C:94:46:83:78:E9:41:04:75:64:BC:DE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/D0949575FA1C238E3C94468378E941047564BCDE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.4.0/22
                IPv6:
                  2804:4c20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267351

    Signature Algorithm: sha256WithRSAEncryption
         a7:30:99:b2:9c:f6:86:77:66:33:ce:16:99:b8:32:4c:73:0f:
         88:b7:d9:53:e1:8a:79:f3:17:77:4a:20:30:c4:56:a6:60:8b:
         c5:81:d6:94:67:ae:32:01:15:9c:69:b9:aa:52:17:74:fb:81:
         14:b7:3a:23:7e:07:96:d6:84:20:05:d7:02:eb:18:34:62:08:
         02:f2:bb:ea:d2:46:e4:28:9d:61:8c:96:4d:29:76:f9:22:a7:
         ef:2d:ca:a0:41:d4:00:09:c3:6e:2a:cc:33:87:a1:ef:5c:a8:
         90:f1:a6:5e:d7:4b:c8:52:6c:4b:39:f4:3f:22:29:76:41:c0:
         ee:86:95:67:82:a6:cd:7b:c2:a6:95:f5:2e:7f:07:86:25:de:
         8f:28:33:2d:ff:e2:06:9b:52:21:1e:63:43:16:48:f3:05:59:
         df:bf:5f:39:b5:6a:4a:00:3e:3d:f8:e8:b4:91:a0:ae:d5:3d:
         71:31:dd:11:90:8c:87:e9:12:67:73:df:bd:ec:1f:ee:25:ab:
         97:23:b5:ff:75:ad:ab:b9:38:a7:4f:8b:af:c5:17:12:b4:d5:
         7d:c3:e6:85:38:75:7b:25:64:4a:e8:31:20:f1:fd:04:26:73:
         3a:60:70:93:7c:8a:ce:20:50:41:61:e1:01:ac:86:c8:d7:3c:
         bd:39:26:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:52 2025 by rpki-client