Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer
File:                     D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer (raw, json)
Hash identifier:          ii6/qmSHp1Af+TSqVKmyPIAvRBwYNCt3GorBgsLNIno=
Subject key identifier:   D3:F7:10:87:00:F6:9A:B3:C4:60:E0:17:0E:99:E7:05:1E:CB:31:EC
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       268E0C4DB68C3C059F69073E5EA04D92B62BAB60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 19:26:05 +0000
Certificate not after:    Thu 05 Mar 2026 19:31:05 +0000
Subordinate resources:    AS: 271455
                          IP: 187.63.148.0/22
                          IP: 2804:7bcc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:8e:0c:4d:b6:8c:3c:05:9f:69:07:3e:5e:a0:4d:92:b6:2b:ab:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 19:26:05 2025 GMT
            Not After : Mar  5 19:31:05 2026 GMT
        Subject: CN=D3F7108700F69AB3C460E0170E99E7051ECB31EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4d:d9:6b:df:58:9e:79:14:9e:9b:32:72:56:
                    62:c0:70:b4:68:8c:27:2a:77:e1:10:fd:16:92:dc:
                    7d:79:87:31:97:7c:cc:8d:48:50:f4:5c:55:89:e0:
                    3f:6c:ee:88:fe:e2:92:1e:21:67:c8:39:7a:10:a8:
                    03:31:f5:b1:6d:d1:c1:2d:25:ac:d0:5d:84:4f:ef:
                    f9:9e:b4:f5:39:18:b0:a4:d0:3a:d2:b1:87:a5:7a:
                    c6:7f:48:91:97:9f:0d:61:cf:7c:ad:89:81:25:51:
                    73:52:17:26:8d:0f:f3:f6:ad:46:55:e1:5c:79:3f:
                    f8:9f:be:20:9e:d4:f8:3a:29:5b:6f:28:38:70:84:
                    4a:39:5b:e6:3e:1a:7d:87:21:db:a4:33:b8:c9:7f:
                    7b:b2:c9:26:ad:5c:84:9e:ce:61:fd:65:29:aa:ad:
                    2a:3e:8a:87:d8:0e:bb:66:8c:8d:86:d4:4c:a8:71:
                    02:63:81:eb:d7:aa:d4:73:d0:2c:ca:3c:2b:2e:a1:
                    92:20:6d:34:38:61:59:14:23:96:71:e2:5c:af:77:
                    a7:47:ca:5d:72:87:50:e2:a7:7a:79:f6:ef:49:48:
                    46:db:51:3b:11:cf:ad:8c:c2:94:b0:c8:d4:99:0e:
                    7f:31:4d:53:60:de:1e:eb:a1:18:19:9f:cb:8c:3a:
                    46:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D3:F7:10:87:00:F6:9A:B3:C4:60:E0:17:0E:99:E7:05:1E:CB:31:EC
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.148.0/22
                IPv6:
                  2804:7bcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271455

    Signature Algorithm: sha256WithRSAEncryption
         2f:e1:b1:71:8a:9c:51:f0:e9:e2:81:9d:fd:02:a7:71:07:97:
         83:32:0c:e2:8a:94:2d:0e:d4:66:4f:1e:62:ee:53:00:91:27:
         71:1d:26:e8:43:72:24:93:25:61:43:95:eb:e1:68:9d:75:76:
         36:f6:36:5e:f2:e4:f7:4e:0a:22:06:9f:27:bb:9f:bb:bb:e9:
         2f:2b:29:9b:08:a6:37:32:e0:3f:96:ff:b2:35:ee:52:1e:48:
         3e:ca:6b:8c:c0:32:ae:05:8f:a7:53:2d:d1:34:f5:c9:e7:a4:
         28:91:58:3d:d8:f9:b7:e5:d2:17:c4:f6:b2:0d:fd:6e:1f:a1:
         74:70:65:c4:bf:c4:74:15:dc:de:54:e1:42:ce:ac:08:8a:b7:
         69:5e:d3:36:94:c8:9f:48:53:ef:33:9d:82:c3:6b:e8:89:93:
         b7:51:8c:39:fd:14:d9:e7:80:6a:a2:38:54:47:d1:1a:de:39:
         7f:5d:57:5d:60:a8:96:1a:df:95:08:d8:d1:44:0a:9f:f5:82:
         aa:7d:3e:41:e7:f5:82:3c:be:59:3a:c3:1a:23:84:e9:9d:5c:
         24:71:46:1f:6c:5f:dc:2b:bb:f0:f7:ed:60:9f:a7:15:47:26:
         bb:a6:a8:f6:c9:7a:88:6a:b8:b4:4b:39:6e:14:1a:06:6c:15:
         ea:e7:d1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:34:11 2025 by rpki-client