Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D706703A52B31DDA5188756CCD2DCC18305F3F93.cer
File:                     D706703A52B31DDA5188756CCD2DCC18305F3F93.cer (raw, json)
Hash identifier:          srnQHjDVqSZUGnjMkHcboMC6g5RdsboY8xooyqdpLfc=
Subject key identifier:   D7:06:70:3A:52:B3:1D:DA:51:88:75:6C:CD:2D:CC:18:30:5F:3F:93
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       65995C71C2E006EFB092EF0DBCE4A792E1E8C4D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/1/D706703A52B31DDA5188756CCD2DCC18305F3F93.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 08 Mar 2025 00:51:30 +0000
Certificate not after:    Sat 07 Mar 2026 00:56:30 +0000
Subordinate resources:    AS: 268479
                          IP: 45.161.240.0/22
                          IP: 2804:51d0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:99:5c:71:c2:e0:06:ef:b0:92:ef:0d:bc:e4:a7:92:e1:e8:c4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  8 00:51:30 2025 GMT
            Not After : Mar  7 00:56:30 2026 GMT
        Subject: CN=D706703A52B31DDA5188756CCD2DCC18305F3F93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:96:77:1a:9b:34:54:af:0c:ec:99:9d:27:14:
                    87:d3:1a:09:88:cb:39:aa:8f:23:96:2f:cc:3b:63:
                    6a:bf:85:b0:a5:c2:be:f8:03:91:d3:ea:25:4b:91:
                    9c:cc:f9:d6:73:9c:32:ee:ef:b9:83:36:3e:20:f8:
                    72:d3:7b:9e:27:13:d2:bd:23:ff:ff:50:d1:40:f5:
                    aa:71:cf:be:70:15:a1:87:8e:ae:97:4c:b0:31:18:
                    2c:10:6b:21:2b:e1:ba:8f:81:c9:10:16:37:82:ed:
                    fd:45:3c:18:45:ec:2f:f3:71:13:52:53:f6:10:4c:
                    8e:84:c8:f9:2c:df:5b:3b:96:2c:a4:60:02:c3:14:
                    58:9c:a2:43:35:6d:82:25:16:47:13:17:3b:10:e6:
                    9f:9e:f8:87:ee:c4:e3:47:da:4a:a5:34:0f:80:99:
                    59:6e:a0:d1:fd:a7:42:47:5c:42:82:45:f5:07:ed:
                    eb:a7:e8:c6:5a:21:3f:10:65:b5:37:89:b4:18:5a:
                    3f:3c:a3:da:6e:0b:ba:23:61:ce:1d:b7:43:a7:ff:
                    20:0c:22:dc:e3:72:0c:66:bd:a6:6e:17:43:98:97:
                    0c:f2:b4:e1:26:e0:08:f8:93:f4:be:e0:42:70:de:
                    66:68:4d:45:16:84:6c:19:af:30:51:5d:f3:c3:2f:
                    a5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:06:70:3A:52:B3:1D:DA:51:88:75:6C:CD:2D:CC:18:30:5F:3F:93
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/1/D706703A52B31DDA5188756CCD2DCC18305F3F93.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.240.0/22
                IPv6:
                  2804:51d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268479

    Signature Algorithm: sha256WithRSAEncryption
         9b:c5:ce:67:2e:c9:c7:43:6f:40:95:6d:59:5b:f2:2e:1c:0d:
         a0:ed:47:c8:1b:62:88:17:ef:0b:61:48:ad:af:77:49:d0:f4:
         71:62:84:9a:ac:f4:48:f2:02:44:06:be:cd:bc:e9:ab:ed:72:
         5d:68:90:c9:47:2f:a5:09:cd:cb:35:d3:de:e3:99:01:58:30:
         19:82:0d:d3:e8:41:fa:b9:cf:7c:85:3f:29:99:7b:b2:b4:2a:
         d4:b9:d1:40:44:77:bf:7b:f3:59:94:85:ec:51:dd:c0:cc:4e:
         b5:b4:84:46:9d:2a:14:ef:ee:1b:aa:1b:77:fb:c1:4d:80:91:
         b2:20:a9:df:dd:3e:a0:dc:a9:f8:6f:e7:1a:78:0b:1a:31:60:
         85:70:fe:08:e6:f9:d4:0e:f6:87:4c:61:0c:a8:2c:2b:a0:50:
         38:f3:88:9b:99:a7:e2:aa:67:d6:d1:04:5c:f3:b2:55:df:13:
         28:b5:f8:9c:de:d6:09:f9:bb:9c:41:d5:9e:50:15:eb:22:7b:
         f5:46:6c:02:ce:e0:33:42:5c:91:29:70:5a:1e:06:df:79:33:
         51:4b:0d:05:72:fe:59:c1:c4:bb:5b:b1:72:44:5f:c9:45:f3:
         cb:47:9f:66:57:52:77:c6:9d:af:0f:3b:a8:bb:3b:f3:8c:00:
         de:06:05:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:49:45 2025 by rpki-client