Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D2264022E250C7A5E6377B218B4C6C8ACC874106.cer
File:                     D2264022E250C7A5E6377B218B4C6C8ACC874106.cer (raw, json)
Hash identifier:          phWpDzm50oFL9AZVZEmsOAoj6Hv4zgxCqnxCYl7b76w=
Subject key identifier:   D2:26:40:22:E2:50:C7:A5:E6:37:7B:21:8B:4C:6C:8A:CC:87:41:06
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5C8B478E8A67EF4BFBA659C8A8216B2C1B648BC0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/D2264022E250C7A5E6377B218B4C6C8ACC874106.mft
caRepository:             rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Dec 2024 19:17:42 +0000
Certificate not after:    Mon 08 Dec 2025 19:22:42 +0000
Subordinate resources:    AS: 273729
                          IP: 168.121.20.0/22
                          IP: 2804:8b64::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8b:47:8e:8a:67:ef:4b:fb:a6:59:c8:a8:21:6b:2c:1b:64:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  9 19:17:42 2024 GMT
            Not After : Dec  8 19:22:42 2025 GMT
        Subject: CN=D2264022E250C7A5E6377B218B4C6C8ACC874106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9a:cd:5a:47:1d:7c:d0:6a:c4:f4:5a:77:61:
                    5d:83:d6:43:2b:08:bd:5b:fb:e1:fc:06:22:e7:d8:
                    91:4c:6c:da:81:3d:23:2b:6a:fa:9a:e3:9b:2f:62:
                    3f:8d:69:f6:dc:f5:a3:44:57:c5:ba:30:01:d5:40:
                    e5:52:2a:97:48:3b:e7:f8:f8:ae:5c:ea:30:a4:08:
                    1f:75:3f:99:73:f7:3e:7b:ed:0e:91:d7:e7:0d:32:
                    84:f3:97:04:57:79:df:3b:8d:31:f1:66:a6:2d:e6:
                    d3:4e:be:ac:33:3a:31:e7:46:31:8a:e8:07:33:3d:
                    d5:79:6a:74:d6:b9:5e:1b:ff:91:ff:9c:dc:ed:7d:
                    e0:81:b3:04:76:2f:1d:ff:f0:2f:d2:1f:8c:92:d8:
                    cc:92:3f:4e:4b:56:f8:13:f5:f4:14:0f:ac:df:3b:
                    a1:99:82:18:e5:a4:0a:8e:71:0e:58:1c:28:f0:19:
                    19:cb:d5:22:0e:3f:07:f8:ae:60:7e:93:1f:9e:dd:
                    b8:0d:fa:da:b4:02:ca:3c:e8:1e:5a:88:0e:de:af:
                    4a:2d:36:73:5c:26:89:d2:7e:c9:49:93:73:12:2b:
                    5b:c3:62:60:5c:3f:1f:28:e3:62:3a:3c:33:27:a7:
                    c7:67:8c:7e:94:9e:85:fe:94:db:06:24:87:70:c5:
                    0f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:26:40:22:E2:50:C7:A5:E6:37:7B:21:8B:4C:6C:8A:CC:87:41:06
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/26bGZHGWAfQadbYVeTAtF931PE9Pi47bmSqtBoaXUmtp/0/D2264022E250C7A5E6377B218B4C6C8ACC874106.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.20.0/22
                IPv6:
                  2804:8b64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273729

    Signature Algorithm: sha256WithRSAEncryption
         05:af:b1:63:0c:b5:a5:39:b2:b1:c8:fd:0e:3a:a0:6f:95:c0:
         9b:35:1f:3f:f6:aa:05:85:42:ea:28:47:8d:5b:36:a1:af:bb:
         c0:95:a5:27:7b:52:51:e1:ca:51:23:2e:be:be:e2:39:9a:25:
         2a:59:2e:62:73:32:5e:d7:c2:12:9d:e8:ad:71:ba:a4:f3:52:
         24:90:cd:b3:ee:93:df:5e:f7:5b:ee:55:1e:3c:62:ae:d4:06:
         b5:3e:1b:06:b6:ef:fe:0d:ae:49:8d:a4:98:22:0a:18:da:cd:
         30:b5:f7:e7:67:75:9e:7b:f2:2e:b1:60:96:a7:31:d0:e4:d3:
         95:f2:1d:3a:d0:54:bf:41:40:2c:ad:2f:1d:67:64:c5:03:4d:
         bf:2b:ef:44:bc:f1:d3:b9:66:10:71:66:13:e9:20:e4:5b:28:
         ab:e6:f7:08:b5:19:16:d9:80:1f:74:d1:73:80:97:0d:55:f5:
         1d:3b:bf:ff:1a:c6:f4:16:af:31:a2:f4:e0:e7:81:7e:ea:4c:
         23:f2:26:a1:a9:67:5a:bc:3e:d4:c6:6b:9e:3b:a2:e9:89:5c:
         83:db:44:a8:4e:71:6c:a9:1f:16:b9:36:7a:41:23:86:3f:12:
         cc:4d:b7:aa:44:e7:ee:8e:e5:6f:59:99:58:01:ae:a1:f6:37:
         ba:ee:e8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:01:47 2025 by rpki-client