Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D4B92897692C4F611B738C6728923C318CA5378D.cer
File:                     D4B92897692C4F611B738C6728923C318CA5378D.cer (raw, json)
Hash identifier:          xbVRDLG0ZBzpxL2XIOB3iJGhuy/CV4YvyqY21vQZLUI=
Subject key identifier:   D4:B9:28:97:69:2C:4F:61:1B:73:8C:67:28:92:3C:31:8C:A5:37:8D
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0CACB15FD27DE5F71D6E06E6F2753C3593C34EDE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 17:12:05 +0000
Certificate not after:    Thu 05 Mar 2026 17:17:05 +0000
Subordinate resources:    AS: 273654
                          IP: 2804:8a34::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ac:b1:5f:d2:7d:e5:f7:1d:6e:06:e6:f2:75:3c:35:93:c3:4e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 17:12:05 2025 GMT
            Not After : Mar  5 17:17:05 2026 GMT
        Subject: CN=D4B92897692C4F611B738C6728923C318CA5378D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:17:18:7f:9f:f5:53:37:ca:07:14:67:6d:b0:
                    44:e1:54:d0:65:9b:fe:33:9b:fb:35:a4:47:21:2c:
                    e4:8f:e1:78:5b:32:a5:35:96:e2:33:b7:76:f4:05:
                    bb:fb:c6:17:ae:d5:25:6f:fd:53:e2:78:4c:0e:80:
                    45:08:8e:52:b6:f5:d0:9d:33:75:1c:64:48:d1:93:
                    ec:0f:03:19:95:3a:ee:69:3d:4e:c2:f7:79:5d:8f:
                    bb:9e:cc:e8:9b:7f:b1:4c:ad:d9:d3:eb:78:d4:51:
                    08:2d:02:8e:12:4d:e6:a7:82:2d:80:72:2e:5a:f2:
                    de:45:1b:1f:89:e4:e5:5f:ac:d4:e2:9f:c8:fc:e4:
                    2f:ad:19:af:80:65:7a:b7:88:9b:00:aa:2a:1e:13:
                    e9:c7:d5:a5:d1:58:a7:20:5e:23:06:b5:e7:17:c8:
                    86:5c:af:9e:14:04:b9:09:ba:48:de:95:ad:e7:4f:
                    67:c3:1b:c6:39:3a:98:cd:f7:5d:23:ae:bd:cb:47:
                    7e:c0:68:21:8d:e9:e5:49:36:ef:f7:19:93:16:e6:
                    cc:5d:58:e9:de:5a:b8:d4:c7:81:6e:48:f0:ec:5f:
                    35:23:4e:6d:a8:86:56:90:37:14:4c:65:5b:f9:7d:
                    4f:99:93:30:44:80:07:fa:ba:7d:e1:23:d8:1d:bf:
                    57:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:B9:28:97:69:2C:4F:61:1B:73:8C:67:28:92:3C:31:8C:A5:37:8D
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GhnqBhEMhRNSVyhvcKnCcje4uojD1ELpwTdDWebMHzg3/1/D4B92897692C4F611B738C6728923C318CA5378D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273654

    Signature Algorithm: sha256WithRSAEncryption
         58:ff:8e:5a:57:1b:98:3b:7f:81:f6:e1:3b:26:fc:85:43:ac:
         27:88:c3:3f:11:00:0b:bd:e6:aa:e5:f7:79:28:db:33:bf:88:
         1c:c8:a0:32:fb:80:24:09:13:ca:fb:88:4d:d4:18:09:48:e4:
         a4:b2:92:24:a3:85:e1:11:50:3f:cc:b3:4d:ca:6c:ad:7b:a5:
         b7:d8:c9:34:cb:03:2e:7d:2f:36:5f:6a:1b:94:b2:e0:84:9a:
         ef:6e:8b:3b:ce:6f:63:0c:2a:a6:7d:99:a4:11:86:98:4e:df:
         f6:30:09:61:e8:90:68:ec:84:4a:d8:b8:cc:c4:1a:f4:86:2d:
         c3:f5:d8:18:7a:e9:aa:71:54:0e:0b:4d:22:13:ee:f7:d4:4f:
         1d:87:d2:f6:72:00:93:87:6c:91:ec:ba:96:c3:53:a2:58:b9:
         11:03:bc:1d:1b:2a:92:0b:7a:6b:22:5f:9a:8d:53:bf:f9:ea:
         0c:25:f2:3a:56:f6:c1:b1:35:a4:25:8a:aa:cd:d9:5d:48:07:
         5c:91:e8:e4:51:8c:71:4f:3b:66:f7:1e:d0:bc:63:70:8e:c0:
         82:a8:64:1a:03:e3:7b:6b:6d:12:c2:86:20:48:02:6b:da:ec:
         1b:eb:66:b7:03:7e:61:12:14:c1:bf:ca:0d:5b:ed:5d:56:a6:
         15:60:2d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:37:08 2025 by rpki-client