Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer
File:                     D93228E088FC63E499DDCF6E203558BDFBA33FC4.cer (raw, json)
Hash identifier:          eQd1J7bnen8fSRryQ8kmGYRAovzTAADkEzyvpDEiJkc=
Subject key identifier:   D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       01B8BC8718ADD31724A45F9A303A5C057CB9E7D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 13:33:14 +0000
Certificate not after:    Thu 05 Mar 2026 13:38:14 +0000
Subordinate resources:    AS: 264879
                          IP: 168.227.124.0/22
                          IP: 2804:2f3c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b8:bc:87:18:ad:d3:17:24:a4:5f:9a:30:3a:5c:05:7c:b9:e7:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 13:33:14 2025 GMT
            Not After : Mar  5 13:38:14 2026 GMT
        Subject: CN=D93228E088FC63E499DDCF6E203558BDFBA33FC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:46:f7:da:a0:38:b0:aa:e8:c9:d1:eb:36:80:
                    56:9f:d9:a7:d5:00:ba:b7:20:56:3f:1c:2b:cd:23:
                    51:1a:8d:ea:c5:e9:46:32:b2:9f:89:14:5d:e0:da:
                    d3:62:ad:23:0f:97:1c:68:63:82:f6:c1:9b:8c:47:
                    c7:b9:80:8f:c0:c5:cc:90:59:9c:a2:0c:24:7f:f0:
                    d0:87:6a:6d:90:8c:a5:36:de:75:7d:31:41:b4:33:
                    c3:d6:b2:84:6a:44:e2:6d:5e:c8:fd:2b:2e:f7:d7:
                    ae:72:aa:60:8d:cc:39:3e:8b:31:6c:98:c0:2f:9d:
                    ca:1e:67:fc:9e:c1:32:99:6a:15:fd:a0:83:32:1d:
                    41:11:39:c7:2a:28:e6:cf:24:b9:d8:95:29:44:56:
                    a0:31:c3:e2:e7:cb:66:ef:75:5e:f6:48:b5:7a:80:
                    b6:c0:03:97:c0:1f:cf:b1:52:dc:bf:63:15:88:7f:
                    24:a8:f0:13:9a:1e:4e:f2:54:d7:d8:18:9e:31:37:
                    3f:2a:04:0b:0b:a7:c7:4d:94:ee:d9:d6:7b:6f:5a:
                    b7:48:b2:66:85:88:70:e9:59:9a:d9:f9:41:f4:b1:
                    14:fb:ab:77:19:cb:b4:77:7e:c3:c4:24:79:21:79:
                    19:04:89:c9:95:de:91:00:6a:f4:a7:0f:b2:fe:c5:
                    a8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:32:28:E0:88:FC:63:E4:99:DD:CF:6E:20:35:58:BD:FB:A3:3F:C4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6tkwEXmKPjhs3e3Z97Xs294nuy6C4dPeb64QuiHVYD19/1/D93228E088FC63E499DDCF6E203558BDFBA33FC4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.124.0/22
                IPv6:
                  2804:2f3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264879

    Signature Algorithm: sha256WithRSAEncryption
         a7:b4:a3:3e:b6:e8:20:4e:de:ed:02:4e:5f:21:93:e9:e5:87:
         97:8d:60:8d:05:a0:1b:4c:42:bf:6f:b7:b8:27:18:d3:df:cf:
         53:a8:ca:bf:4c:8a:7c:4f:0e:b3:63:22:6e:29:2e:5c:b0:2f:
         f0:bf:81:00:7e:a8:82:59:1c:a4:16:3a:f9:e3:b5:00:06:ca:
         d6:a9:9b:87:66:e4:a7:4a:7b:5c:49:95:48:18:43:14:e3:33:
         b3:b5:7c:86:a5:5b:36:38:3a:33:20:c4:ce:8a:23:7a:91:7e:
         95:f2:32:ec:9d:77:54:4c:ea:a2:fb:a8:b2:3d:6d:34:dd:81:
         7a:89:80:0d:fb:70:66:1d:0e:52:cd:d9:54:29:92:47:56:1a:
         81:a3:98:7b:5e:08:da:b8:1d:90:ec:7d:6a:2a:cf:31:64:61:
         49:ce:3b:14:a7:01:67:3a:bb:09:37:07:9d:c8:61:8b:a4:c7:
         6b:6b:20:66:9d:67:46:0a:5d:23:3c:1b:e5:7d:f0:a7:0a:f0:
         6e:33:db:38:b3:cd:a7:31:ab:1f:ee:42:5b:16:db:ff:99:40:
         76:f3:7c:65:93:6e:17:0c:19:9d:06:e7:65:92:e9:54:0a:33:
         fb:2a:48:97:2b:36:97:4d:ed:a1:1a:ac:c2:09:f4:bd:57:8c:
         51:00:52:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:49 2025 by rpki-client