Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DDBDF3956666958841B65B1975D5A1B71D720BC9.cer
File:                     DDBDF3956666958841B65B1975D5A1B71D720BC9.cer (raw, json)
Hash identifier:          NlhVxxN5kZWH97gePF9DWVQN/2+YKtw26t9QGUchDmA=
Subject key identifier:   DD:BD:F3:95:66:66:95:88:41:B6:5B:19:75:D5:A1:B7:1D:72:0B:C9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       701A53F32AF09DC2B34511D5B248D7B574F01469
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/DDBDF3956666958841B65B1975D5A1B71D720BC9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Jan 2025 13:22:32 +0000
Certificate not after:    Tue 06 Jan 2026 13:27:32 +0000
Subordinate resources:    AS: 271670
                          IP: 200.150.252.0/22
                          IP: 2804:7f28::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:1a:53:f3:2a:f0:9d:c2:b3:45:11:d5:b2:48:d7:b5:74:f0:14:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  7 13:22:32 2025 GMT
            Not After : Jan  6 13:27:32 2026 GMT
        Subject: CN=DDBDF3956666958841B65B1975D5A1B71D720BC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c3:1d:df:c3:bc:81:50:cd:85:08:34:67:11:
                    1e:73:e2:6f:b7:d8:15:79:2b:93:dd:b9:a1:54:c5:
                    7c:ef:cc:ee:69:10:76:4c:89:6f:2f:71:99:f5:e9:
                    48:35:4a:66:4f:e6:78:fa:c9:eb:dc:97:5e:4a:47:
                    d1:d3:bb:f1:95:b9:66:cf:1c:dd:90:d7:fc:79:4c:
                    99:d8:a4:79:a0:ce:25:7b:b2:a4:5d:7d:60:53:95:
                    d4:c0:0f:35:d0:54:37:82:36:b9:87:cb:1c:b1:a5:
                    f4:0d:da:4d:86:c6:68:59:58:51:21:ca:23:14:f9:
                    13:0c:c0:87:78:6b:39:a6:e4:75:5b:cd:53:3c:d9:
                    d6:c6:84:71:67:9b:28:cd:38:c5:91:b0:b5:1c:01:
                    f2:ab:22:a5:88:5b:f9:51:93:fd:e2:ae:aa:6f:b1:
                    27:dc:46:a2:12:15:9b:e5:6a:88:04:d5:55:8c:f0:
                    63:50:e1:30:44:d4:57:08:e7:39:65:89:35:08:18:
                    f2:a7:0a:51:87:80:6d:b8:2c:1c:d2:5d:65:97:0e:
                    9e:6e:73:8f:54:fb:aa:c1:19:38:0e:5f:ef:34:dd:
                    64:98:24:ba:21:e9:aa:cc:f2:d5:33:d3:39:38:23:
                    6e:7b:40:3c:62:ed:1b:ce:28:d9:77:a9:5a:80:c2:
                    84:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DD:BD:F3:95:66:66:95:88:41:B6:5B:19:75:D5:A1:B7:1D:72:0B:C9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/DDBDF3956666958841B65B1975D5A1B71D720BC9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.252.0/22
                IPv6:
                  2804:7f28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271670

    Signature Algorithm: sha256WithRSAEncryption
         5b:bb:12:49:07:13:69:dc:c8:ce:96:ae:14:bc:7b:27:22:5f:
         fb:30:14:3c:97:50:c6:d4:c6:a9:ac:65:cb:7d:b8:16:9f:55:
         c7:f5:2b:b7:8e:9c:f8:a7:ae:ce:df:0c:c2:97:2c:54:36:4d:
         d8:0d:24:c4:ad:6c:81:a8:09:91:20:66:69:40:fd:78:d5:61:
         f6:d6:5a:63:3b:75:f2:64:96:c4:55:aa:d9:fb:a1:7f:f2:77:
         d0:2b:7b:8a:a1:84:cc:86:e5:25:24:a6:40:aa:f3:cc:3e:f8:
         cf:a3:43:0e:18:ec:8e:86:ce:b2:96:e1:c5:f2:64:96:bd:22:
         86:e8:c6:e5:49:1b:cf:56:b0:eb:3a:9e:6d:8f:87:95:ca:69:
         dc:d0:85:f8:54:a1:85:57:a5:64:63:b8:b0:b6:2f:50:18:95:
         80:93:87:ce:4a:68:25:0d:d6:37:a6:2b:cc:42:f5:79:6c:41:
         1b:dd:77:4b:54:26:fb:79:8a:37:ab:e4:e9:13:7d:10:38:94:
         93:a5:54:cd:cf:7a:e6:bf:7b:65:68:a6:bc:94:c4:1a:64:56:
         c5:30:81:bd:1f:cf:83:b7:22:19:31:52:2e:38:ab:84:9c:9b:
         b2:83:49:ad:74:31:f5:15:65:2d:7b:70:14:fe:eb:a5:30:8d:
         a2:0f:79:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:48 2025 by rpki-client