Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.cer
File:                     D9B8C8035F469EEFCD42A52D48966057264B95C4.cer (raw, json)
Hash identifier:          aifb0qFb+Ref3tiC7OXaKbN5UIwQF+230OQuE9hvukw=
Subject key identifier:   D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0D62EC4B2BD1FE22522FA4AC2FFEEE8936760C43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 16:54:02 +0000
Certificate not after:    Thu 05 Mar 2026 16:59:02 +0000
Subordinate resources:    AS: 263457
                          IP: 177.190.152.0/21
                          IP: 2804:121c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:62:ec:4b:2b:d1:fe:22:52:2f:a4:ac:2f:fe:ee:89:36:76:0c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 16:54:02 2025 GMT
            Not After : Mar  5 16:59:02 2026 GMT
        Subject: CN=D9B8C8035F469EEFCD42A52D48966057264B95C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:52:f9:ce:98:3d:78:26:f7:05:a8:f8:c2:fd:
                    76:6c:26:6a:3c:39:5d:20:c7:fb:10:44:e0:a2:8e:
                    ce:bc:bc:38:e0:a6:65:2e:e1:7a:c9:e0:1a:68:bf:
                    e3:55:6d:a8:06:da:2c:52:a7:1c:21:3f:75:c4:66:
                    39:24:85:93:48:d8:b5:54:e3:27:48:18:5d:f6:c8:
                    ce:f7:14:c2:8a:3c:68:77:da:65:a9:f9:55:3e:80:
                    e9:ae:8f:ad:5e:71:4f:b8:a4:d5:b4:95:a9:a5:1d:
                    54:82:60:d0:78:f7:43:e4:39:96:50:69:dd:1f:16:
                    9b:8e:d4:df:f3:91:d9:fd:f9:c3:2e:84:0b:44:07:
                    1d:a5:7d:05:43:80:74:94:48:d4:33:d9:f0:42:7c:
                    56:be:ac:f7:76:b8:6e:1f:3e:43:79:65:30:a5:7f:
                    a1:f2:f8:a3:4a:a3:67:a9:d9:83:1e:76:9e:7a:f5:
                    ad:ef:ae:84:72:1f:79:3e:42:bd:bf:01:48:00:69:
                    dc:64:e9:bb:eb:80:4c:76:43:24:74:e0:0b:08:60:
                    98:85:ed:52:af:8f:a3:bb:8a:be:e5:d2:58:ba:97:
                    05:03:31:3f:b8:76:77:89:f5:30:1f:0c:4a:d6:c4:
                    8b:89:51:f0:e9:2b:85:2a:9b:8e:d2:44:01:66:36:
                    3e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:B8:C8:03:5F:46:9E:EF:CD:42:A5:2D:48:96:60:57:26:4B:95:C4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/1/D9B8C8035F469EEFCD42A52D48966057264B95C4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.152.0/21
                IPv6:
                  2804:121c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263457

    Signature Algorithm: sha256WithRSAEncryption
         91:8e:a8:67:97:bd:99:3b:49:39:57:00:18:66:8c:e6:2e:47:
         e0:11:1c:9f:2f:21:bd:25:59:3b:35:39:95:52:a7:ff:07:f6:
         90:6d:c8:0e:e8:53:18:06:77:b3:22:9b:e8:b1:68:f3:c6:73:
         7e:c9:49:74:8c:c9:c7:22:7a:5e:ff:5c:5b:e5:b1:09:d9:20:
         29:4f:2d:5b:80:70:f5:7f:15:0c:7e:6e:e7:44:8f:5f:f2:50:
         09:27:3f:3b:3f:a4:6c:c6:76:ac:a9:11:f7:71:4a:60:cd:53:
         c6:6b:25:33:cd:f5:0c:57:f0:79:a5:93:ed:3c:69:06:e7:30:
         b8:15:50:75:9b:2d:a3:ea:3d:2d:09:e1:4b:44:91:f4:13:26:
         d4:ac:b7:d3:87:a2:26:4a:b9:fe:bb:32:83:59:d0:37:78:75:
         f8:ad:0c:b8:31:c3:39:79:12:67:52:28:17:f8:80:0c:a1:9f:
         b7:c7:1f:5c:f5:6f:0e:fa:52:38:5c:80:6c:a5:a3:bd:99:57:
         8a:2c:55:9d:1e:da:c9:8c:7c:e7:b3:95:c5:eb:a3:10:87:e8:
         ee:12:4d:69:5b:d5:3a:2e:66:e2:2a:e7:5f:48:75:38:84:00:
         97:cc:6c:b7:54:d1:f6:0e:e1:60:37:c5:7b:8b:cf:7d:5b:3f:
         a0:4f:5f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:49:46 2025 by rpki-client