Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E116A9492035CFBB15FA99D51C520F4FAD579530.cer
File:                     E116A9492035CFBB15FA99D51C520F4FAD579530.cer (raw, json)
Hash identifier:          HPj5QGcEfLHbnpm7B/LiphIOttMawVo200lvSWEBX/w=
Subject key identifier:   E1:16:A9:49:20:35:CF:BB:15:FA:99:D5:1C:52:0F:4F:AD:57:95:30
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6F61B4EE3E9FA90BF105A76DB42B6F61083017E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/E116A9492035CFBB15FA99D51C520F4FAD579530.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 09:58:01 +0000
Certificate not after:    Thu 05 Mar 2026 10:03:01 +0000
Subordinate resources:    AS: 271031
                          IP: 168.228.76.0/22
                          IP: 186.250.60.0/22
                          IP: 2804:7534::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:61:b4:ee:3e:9f:a9:0b:f1:05:a7:6d:b4:2b:6f:61:08:30:17:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 09:58:01 2025 GMT
            Not After : Mar  5 10:03:01 2026 GMT
        Subject: CN=E116A9492035CFBB15FA99D51C520F4FAD579530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4b:81:3c:fe:0f:11:61:d4:9c:d9:67:62:b3:
                    31:7d:c6:73:90:a6:17:b0:36:82:7b:f4:d5:30:70:
                    b6:2b:e5:2c:ae:4f:8e:8c:3e:e2:0e:65:5a:6f:7e:
                    7d:9c:d7:44:96:44:69:c6:57:bd:cb:c0:90:b8:aa:
                    cb:a6:2a:e5:6a:32:1d:78:e0:17:eb:a3:08:a7:e6:
                    1b:dd:9b:c3:2e:c0:ba:96:a8:44:89:ed:80:bb:29:
                    fa:99:2c:f4:d8:0e:77:af:92:40:4e:a7:8b:85:53:
                    a2:2f:de:fc:92:0d:6d:c5:cc:0c:8b:04:81:0d:e9:
                    9b:8c:f1:da:d7:14:27:a5:61:23:60:e4:5b:eb:84:
                    36:98:5d:ee:5e:af:ec:35:e6:c2:88:fe:79:0e:1b:
                    28:e1:a2:c3:83:9c:85:74:93:c6:1b:19:09:b5:8f:
                    0d:0a:cc:74:68:4f:1c:ac:66:e7:88:e1:38:20:56:
                    e7:41:39:48:36:b3:b6:1c:6d:1d:f4:62:39:dc:ca:
                    c4:79:a9:e6:ce:f7:1b:7c:7f:40:89:19:2a:78:11:
                    6b:8e:6c:f3:d1:d8:10:06:b7:09:77:ce:02:e1:f7:
                    3c:e3:85:b6:c3:11:67:28:3b:b8:a3:1f:46:46:6a:
                    1b:c6:89:62:5a:7a:86:e5:ee:ee:57:0e:cf:d8:b2:
                    b7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:16:A9:49:20:35:CF:BB:15:FA:99:D5:1C:52:0F:4F:AD:57:95:30
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7GU7zbypWHSNRvxwqbvG3Bm5CFR4qudfLceogDXaqA3M/1/E116A9492035CFBB15FA99D51C520F4FAD579530.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.76.0/22
                  186.250.60.0/22
                IPv6:
                  2804:7534::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271031

    Signature Algorithm: sha256WithRSAEncryption
         23:9d:6f:92:b0:f0:61:d8:55:f2:e2:5a:02:6a:1e:cc:ad:a3:
         0f:99:a3:35:aa:20:ea:a0:43:7d:b9:1e:49:d8:1d:82:20:53:
         80:60:51:a8:87:1f:ec:0e:09:73:0f:bf:4b:42:1e:a1:37:ce:
         26:b9:95:5c:56:ab:bb:d4:8e:bb:88:8b:6e:5b:fd:c7:86:e1:
         66:72:8d:0d:c2:d9:53:87:93:b7:bf:1d:7a:f0:22:92:83:ea:
         5a:00:5d:30:e8:9f:2b:0d:50:3f:1b:e1:b3:b6:0c:da:93:26:
         a7:a1:c2:b0:b7:95:bb:14:83:d3:73:32:d8:bc:1b:4c:02:0e:
         7c:38:c6:37:46:20:18:66:ed:28:db:13:c8:ec:94:1d:4f:fa:
         0b:42:14:b1:a7:72:c9:f8:9b:6e:50:6d:a7:40:69:a5:16:0a:
         32:64:07:eb:bc:c6:27:c1:f0:90:50:f0:53:27:70:db:f2:be:
         b7:c4:c5:f9:9f:3a:4a:9d:c1:59:99:b8:91:b1:ab:b5:17:b9:
         01:f9:5a:d0:64:7c:0e:2c:44:81:ef:f7:7c:28:09:29:a0:88:
         a8:70:f8:49:82:8c:fb:e9:24:e5:26:56:8c:55:ec:c0:88:70:
         ef:1f:08:27:45:03:52:74:0f:a9:62:7c:ab:44:6f:df:e7:9d:
         df:25:bd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:51:19 2025 by rpki-client