Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D19ACB059BC4433073F016854DF8F81B129743F7.cer
File:                     D19ACB059BC4433073F016854DF8F81B129743F7.cer (raw, json)
Hash identifier:          MtGTzR11RjuHG9h7O8TLnPl8S7iA4VDEbNr3Notamu0=
Subject key identifier:   D1:9A:CB:05:9B:C4:43:30:73:F0:16:85:4D:F8:F8:1B:12:97:43:F7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       62A3DD1BC2CF83BF0D95832114966FA97EBF1C0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BvoJwwsZ3cPKabSXLWLwjqN7RF4AiuWMVKtPzdDktQJX/0/D19ACB059BC4433073F016854DF8F81B129743F7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BvoJwwsZ3cPKabSXLWLwjqN7RF4AiuWMVKtPzdDktQJX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 16 Feb 2025 16:26:29 +0000
Certificate not after:    Sun 15 Feb 2026 16:31:29 +0000
Subordinate resources:    AS: 270302
                          IP: 201.77.156.0/22
                          IP: 2804:69f4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a3:dd:1b:c2:cf:83:bf:0d:95:83:21:14:96:6f:a9:7e:bf:1c:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 16 16:26:29 2025 GMT
            Not After : Feb 15 16:31:29 2026 GMT
        Subject: CN=D19ACB059BC4433073F016854DF8F81B129743F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f1:c4:59:b8:29:68:63:04:ae:1e:aa:71:e3:
                    37:85:c5:4a:3c:a3:df:87:0d:48:5c:f0:4e:43:5c:
                    8c:6e:7d:f4:e4:b2:c9:cb:56:d0:96:70:30:62:05:
                    46:cd:26:0b:02:cb:eb:d3:75:d2:1b:80:a8:86:1c:
                    d4:c1:b1:36:0a:20:8f:37:dd:41:b3:4f:c6:25:48:
                    dd:77:9f:2b:ea:e3:ac:d9:6a:18:22:17:52:c3:57:
                    f3:90:62:92:c8:cb:90:54:a2:39:d7:98:78:92:e6:
                    24:98:06:49:94:f7:22:2f:08:af:bd:95:37:fe:96:
                    65:27:91:c1:5a:63:98:e6:bb:8d:d8:d6:df:65:db:
                    77:92:e8:de:5d:49:e4:f3:57:fd:79:44:7e:5b:7f:
                    f1:3d:1e:47:35:e2:99:dd:76:d1:82:ed:3f:4a:c4:
                    43:bc:bc:e2:54:0a:1b:08:86:21:8c:ce:0e:8c:c4:
                    66:16:b8:62:d4:94:8d:1e:42:ff:21:1f:77:69:cb:
                    66:33:82:4e:ea:83:9a:e3:3a:8c:a0:ab:ea:1a:ed:
                    04:86:d1:a5:71:7c:aa:8c:60:77:f3:aa:05:e0:b2:
                    bf:64:22:33:1a:a0:84:3d:05:65:f0:a4:0a:a2:c9:
                    10:14:69:d3:34:3d:b9:8e:4e:7b:ed:6e:bb:db:3f:
                    74:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D1:9A:CB:05:9B:C4:43:30:73:F0:16:85:4D:F8:F8:1B:12:97:43:F7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BvoJwwsZ3cPKabSXLWLwjqN7RF4AiuWMVKtPzdDktQJX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BvoJwwsZ3cPKabSXLWLwjqN7RF4AiuWMVKtPzdDktQJX/0/D19ACB059BC4433073F016854DF8F81B129743F7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.156.0/22
                IPv6:
                  2804:69f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270302

    Signature Algorithm: sha256WithRSAEncryption
         2a:67:1c:62:01:5d:bb:94:db:2b:91:25:36:7d:44:70:64:08:
         54:8c:4b:d5:fb:5b:2f:fa:01:c6:6b:ab:d9:3f:0d:1e:51:78:
         81:54:01:c3:30:bb:56:8f:9a:02:f2:45:52:14:7c:d1:68:c9:
         ed:23:26:a7:b8:59:fa:d1:0f:a7:2f:62:1f:fa:55:c7:48:1c:
         2c:fa:a3:66:30:23:48:9a:19:e0:52:53:f9:92:f0:85:e8:57:
         24:25:3b:4b:98:71:36:56:1b:f6:16:f6:b9:73:48:47:a4:4c:
         3b:2b:11:6a:32:d2:d1:2a:5f:87:05:6a:39:75:67:e7:6f:92:
         38:b4:bc:ab:af:7b:18:e6:31:bc:ab:66:e9:d1:c2:b9:6a:e1:
         f6:84:82:99:98:98:45:5c:7f:93:61:e3:39:81:d0:2e:12:f3:
         5e:58:a6:c9:6f:e8:42:5d:32:48:94:06:43:13:1d:6d:b6:aa:
         ca:49:37:94:62:ce:1b:40:ae:86:3d:7b:52:71:b5:87:05:5c:
         15:54:f5:2e:bd:49:85:e4:05:ec:b7:82:15:0d:c6:6c:23:e7:
         65:be:48:f6:2e:cf:0d:9c:b5:72:dd:6f:ca:83:83:c2:49:f1:
         59:98:ce:c6:18:9b:b8:50:03:d9:86:49:85:4a:05:56:93:77:
         5a:40:4a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:33:34 2025 by rpki-client