Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DF45F3BB0F8ED9426CD418F08B572024F3B57C47.cer
File:                     DF45F3BB0F8ED9426CD418F08B572024F3B57C47.cer (raw, json)
Hash identifier:          EuTGUjB2RmgV8tpxf4QFtZmrzUUiiljrcvssaTsqB3c=
Subject key identifier:   DF:45:F3:BB:0F:8E:D9:42:6C:D4:18:F0:8B:57:20:24:F3:B5:7C:47
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3E9E103887D02CCF485685E5A6A2E19403E40A56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Babtm7AYUYvx2i9JKeNcMSCbGMV6FZ45iutWXhDEu1K7/0/DF45F3BB0F8ED9426CD418F08B572024F3B57C47.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Babtm7AYUYvx2i9JKeNcMSCbGMV6FZ45iutWXhDEu1K7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 31 Jan 2025 00:19:47 +0000
Certificate not after:    Fri 30 Jan 2026 00:24:47 +0000
Subordinate resources:    AS: 265244
                          IP: 168.0.36.0/22
                          IP: 2804:2ccc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9e:10:38:87:d0:2c:cf:48:56:85:e5:a6:a2:e1:94:03:e4:0a:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 31 00:19:47 2025 GMT
            Not After : Jan 30 00:24:47 2026 GMT
        Subject: CN=DF45F3BB0F8ED9426CD418F08B572024F3B57C47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:be:24:99:9a:8f:ca:05:97:d6:0d:a3:9a:03:
                    84:97:69:73:2b:9a:88:7d:53:45:44:b3:dd:9a:21:
                    77:f3:11:01:fb:eb:62:54:f3:fa:aa:97:98:d5:b0:
                    ba:f9:e4:fc:d1:91:0a:ac:d3:39:8a:35:a4:13:43:
                    22:74:e9:6b:d6:d3:33:c3:f9:e8:54:42:74:21:0c:
                    f2:43:44:e6:06:82:eb:ea:b2:58:fb:47:5e:81:12:
                    e4:4b:9f:f3:b6:f7:0a:4e:c1:62:6a:94:32:db:7e:
                    ed:24:4f:d0:da:b2:73:3a:5a:44:9f:cf:bc:76:55:
                    c6:cf:f7:d4:3b:cd:d2:41:2e:3e:87:cc:5f:d8:cd:
                    71:28:b8:11:75:be:02:94:0b:3d:89:e2:68:6a:df:
                    20:c4:36:cc:ac:a6:41:d0:c9:8b:ab:b5:3b:e3:13:
                    fd:48:d2:f9:24:06:d8:aa:3a:a0:a5:89:e3:6e:a1:
                    47:7d:7a:6f:7b:01:a1:3a:d7:ab:76:aa:31:85:93:
                    fa:a1:23:a2:a8:15:9d:21:78:3c:03:37:2d:41:d3:
                    37:86:c6:b3:56:00:ae:77:65:53:e2:90:fc:b0:1b:
                    d0:94:30:f9:67:57:3a:36:51:60:e9:2a:90:71:cc:
                    92:be:da:85:f0:d9:bd:c0:56:4a:1c:cb:08:0c:ac:
                    5c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:45:F3:BB:0F:8E:D9:42:6C:D4:18:F0:8B:57:20:24:F3:B5:7C:47
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Babtm7AYUYvx2i9JKeNcMSCbGMV6FZ45iutWXhDEu1K7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Babtm7AYUYvx2i9JKeNcMSCbGMV6FZ45iutWXhDEu1K7/0/DF45F3BB0F8ED9426CD418F08B572024F3B57C47.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.36.0/22
                IPv6:
                  2804:2ccc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265244

    Signature Algorithm: sha256WithRSAEncryption
         0e:99:e8:73:35:04:23:cc:86:a5:92:11:79:34:24:51:64:eb:
         a1:59:ae:98:8a:24:88:23:07:9e:f8:c1:79:65:76:78:dd:aa:
         98:cb:a9:72:58:e3:5d:61:23:b6:b1:f1:dc:77:f7:81:5d:9e:
         13:67:e4:7a:9e:0d:9b:bb:49:a0:7a:2d:cd:a6:10:9d:54:07:
         46:96:93:97:50:a4:13:ba:87:9b:d1:00:d4:66:da:bd:04:bf:
         88:d9:d7:60:a9:f3:fe:0e:33:b5:b7:9e:f2:68:67:a4:73:ec:
         6b:45:86:dd:38:e5:55:91:71:1f:64:69:df:8d:11:e5:c1:1b:
         e9:52:04:b7:2a:cb:d7:ad:d5:50:a8:6f:a7:2e:5b:52:31:35:
         cf:a3:cc:53:7b:9e:80:1d:fd:4e:0f:5a:31:d2:6c:4d:8f:91:
         b4:08:93:96:32:f9:5a:77:7e:b6:05:7a:8d:e5:c7:24:8f:d1:
         f5:a0:0b:a5:a5:6f:3d:8a:6c:1d:40:ad:99:38:84:15:16:8f:
         ea:1d:51:3d:2c:19:49:a3:ed:79:5c:61:33:4c:84:a1:fd:7d:
         ea:ad:a6:1c:57:64:da:05:02:e0:0e:3f:e4:df:6b:9c:f9:5c:
         f3:e1:6b:78:30:13:0d:b5:dd:5e:ee:b7:5c:14:09:a4:80:d0:
         34:8c:00:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:39 2025 by rpki-client