Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D8021573B8FDDCB1523C006FA800A7BAC5BA4240.cer
File:                     D8021573B8FDDCB1523C006FA800A7BAC5BA4240.cer (raw, json)
Hash identifier:          lFM25E/ucLvByzhXAehurn01L/dUV0+MsAYg3kQ3ReA=
Subject key identifier:   D8:02:15:73:B8:FD:DC:B1:52:3C:00:6F:A8:00:A7:BA:C5:BA:42:40
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1706B49198FFE8F6D685CC24BD15F5EE6CD5C9C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/D8021573B8FDDCB1523C006FA800A7BAC5BA4240.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 19 Feb 2025 12:54:30 +0000
Certificate not after:    Wed 18 Feb 2026 12:59:30 +0000
Subordinate resources:    AS: 268940
                          IP: 189.39.176.0/22
                          IP: 2804:5cf0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:06:b4:91:98:ff:e8:f6:d6:85:cc:24:bd:15:f5:ee:6c:d5:c9:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 19 12:54:30 2025 GMT
            Not After : Feb 18 12:59:30 2026 GMT
        Subject: CN=D8021573B8FDDCB1523C006FA800A7BAC5BA4240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:15:b0:cb:4a:ee:b8:ae:b9:7d:03:ad:98:29:
                    b2:60:36:8d:01:e6:f9:4f:91:cf:47:14:0c:15:35:
                    e7:e4:84:50:23:48:66:d9:ce:cf:4f:53:bf:b8:a1:
                    25:86:67:3c:92:33:92:f9:3d:65:ab:be:b7:b0:f4:
                    81:9f:91:7c:c1:b5:b0:69:12:0b:78:02:97:0b:7f:
                    91:bf:f0:f5:77:02:96:b6:65:12:37:2d:da:40:6f:
                    7c:bd:dc:be:90:da:ba:69:1c:82:8e:79:37:55:b1:
                    a3:a0:7b:aa:d6:4f:ec:16:ba:2f:e2:7b:59:28:7d:
                    53:21:bc:11:a8:8d:33:ac:4d:36:fb:22:54:58:90:
                    1e:f3:1b:b9:4e:eb:b5:d6:f9:11:d3:b5:98:15:81:
                    f0:66:11:a4:f6:2a:d1:b8:19:56:a3:4e:9a:bd:44:
                    3b:33:4d:f9:6b:65:4d:8f:22:60:c6:6c:5b:3a:cb:
                    0e:2c:43:11:88:4f:17:a8:e6:ad:e6:66:7b:d5:ce:
                    60:6b:3d:fe:d5:25:10:2f:57:89:8f:54:5b:e5:66:
                    85:71:e4:05:11:bf:6b:4e:74:7d:11:7e:b1:c8:7e:
                    45:98:c9:c8:f5:26:90:dc:f9:e0:94:9c:95:5a:f6:
                    3f:ba:ea:f1:84:f9:0f:84:71:39:1b:e6:d4:0a:9e:
                    6f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D8:02:15:73:B8:FD:DC:B1:52:3C:00:6F:A8:00:A7:BA:C5:BA:42:40
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/D8021573B8FDDCB1523C006FA800A7BAC5BA4240.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.176.0/22
                IPv6:
                  2804:5cf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268940

    Signature Algorithm: sha256WithRSAEncryption
         07:13:0b:4e:10:d5:b9:e9:cf:30:d0:61:a6:fa:1d:7a:2f:e4:
         d4:c3:99:69:49:21:b0:86:7e:c8:74:88:8e:6e:a8:87:2c:41:
         8c:57:1d:e0:e0:0d:f6:73:5c:c2:b1:78:7f:5b:09:a2:9d:7b:
         c3:d0:1d:0d:78:08:fa:fa:3e:fe:66:e0:1c:b5:35:dc:11:b5:
         f0:75:89:86:26:24:7e:56:b5:a6:1e:d9:de:78:2b:88:73:5d:
         21:e7:6e:fa:7a:70:58:e6:1b:a7:a5:87:c4:ac:01:80:9c:f4:
         61:7d:fb:ef:93:59:76:95:5a:6f:32:af:8e:d6:c5:60:1c:15:
         e3:0e:89:8c:cc:3f:e5:35:29:ab:c9:c2:64:4f:bb:8c:01:ef:
         3a:97:18:c4:93:9b:ff:7d:39:d3:ab:5d:bc:d7:55:b3:1c:9c:
         93:0a:69:ca:c0:2b:a6:f1:f1:a3:51:bf:07:f4:1b:53:cf:fd:
         40:86:35:12:ac:fa:37:3e:b5:e8:fc:03:2f:5a:d9:69:11:c4:
         b9:4a:10:2b:dc:80:9a:73:77:04:e8:27:a8:53:b5:df:f2:a6:
         cf:fb:c7:da:c5:4d:8c:4a:d2:8e:e8:1f:2d:85:c8:db:ff:ce:
         a6:4c:fb:a5:9d:7b:b0:fc:06:95:f5:5e:23:ed:ed:92:a6:d0:
         db:c9:06:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:35:20 2025 by rpki-client