Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E1B1E1BF897FA6B6DA0141C819A170CA5DCF4574.cer
File:                     E1B1E1BF897FA6B6DA0141C819A170CA5DCF4574.cer (raw, json)
Hash identifier:          j429HhDjGf/Bp9qTjxzQOuvh3uSXhygynQ5iYqNPS6A=
Subject key identifier:   E1:B1:E1:BF:89:7F:A6:B6:DA:01:41:C8:19:A1:70:CA:5D:CF:45:74
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       35143D1EA614C196ED0A39D65BE9EE43E76BFC5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/2/E1B1E1BF897FA6B6DA0141C819A170CA5DCF4574.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 22:26:21 +0000
Certificate not after:    Thu 03 Apr 2025 22:31:21 +0000
Subordinate resources:    AS: 265257
                          IP: 168.0.168.0/22
                          IP: 2804:2d04::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:14:3d:1e:a6:14:c1:96:ed:0a:39:d6:5b:e9:ee:43:e7:6b:fc:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 22:26:21 2024 GMT
            Not After : Apr  3 22:31:21 2025 GMT
        Subject: CN=E1B1E1BF897FA6B6DA0141C819A170CA5DCF4574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:25:5e:a8:40:2c:d6:6c:74:d2:00:3f:e5:cc:
                    9b:9f:bd:6d:a8:d7:2a:c0:97:47:5d:b9:bc:4c:18:
                    0a:5f:a4:35:17:2c:b8:e4:8e:df:a0:8a:b6:35:64:
                    e8:35:c7:3e:ef:9f:ec:af:9e:72:50:4d:27:c5:53:
                    1b:12:8c:df:7f:22:d0:b4:e9:6f:a9:1d:50:0e:de:
                    0f:1b:5a:ea:be:bf:23:77:07:b6:17:43:0d:85:2e:
                    38:a3:83:ca:39:da:da:05:ec:16:a4:ff:27:e5:94:
                    6a:dd:4b:63:6e:6e:a0:fb:a1:54:57:e4:05:fa:e6:
                    47:66:61:a0:5c:be:f5:06:08:5b:ff:4e:03:c8:74:
                    61:1e:2c:a2:61:f7:b5:34:a1:b1:85:61:e4:77:93:
                    10:d9:99:73:b4:4e:db:b1:10:0d:7a:35:7c:fd:34:
                    6f:17:37:1e:c7:cb:2e:d6:86:de:fb:a6:f2:11:e9:
                    32:5e:28:9f:a7:7f:fa:d9:f8:c3:05:d0:a2:15:ca:
                    d3:bb:b1:12:b2:97:1b:58:fb:1f:7f:6e:69:29:73:
                    c8:84:58:77:bb:3c:d1:59:36:0e:2b:00:e0:fd:4d:
                    df:37:fc:9e:39:d4:46:35:36:ac:ec:95:4a:96:8a:
                    b2:8e:70:2d:42:16:f7:af:9e:e7:ed:71:1e:de:31:
                    76:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:B1:E1:BF:89:7F:A6:B6:DA:01:41:C8:19:A1:70:CA:5D:CF:45:74
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/2/E1B1E1BF897FA6B6DA0141C819A170CA5DCF4574.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.168.0/22
                IPv6:
                  2804:2d04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265257

    Signature Algorithm: sha256WithRSAEncryption
         6c:13:41:7d:60:21:63:fc:b3:61:33:25:ce:d3:db:0f:14:2e:
         f8:8b:82:74:7d:30:e0:ad:54:c7:05:f4:0b:9a:a6:c2:7a:2e:
         04:85:64:a0:6f:7b:17:77:2c:d8:60:01:c4:5e:2f:02:56:bf:
         8f:ad:89:82:30:1a:9a:30:ea:77:54:80:3d:f9:8e:57:3f:68:
         b3:c0:35:03:b3:ec:59:8b:51:ef:9b:f8:42:cb:0a:36:67:b0:
         81:fa:8f:a7:b3:67:9b:8c:d7:fc:09:24:79:5f:20:39:f0:53:
         e2:24:11:ab:e8:09:f7:18:7f:15:42:87:b7:04:6a:07:d7:80:
         e5:39:ae:1b:37:07:dd:fe:af:19:ef:cd:ea:69:82:fe:3c:54:
         6b:f3:f0:6a:74:75:b6:68:ac:23:07:5d:dd:92:56:ec:b3:6b:
         63:86:e1:2c:20:1e:c5:8c:59:96:b2:ab:a8:83:6d:55:99:4f:
         9d:67:eb:9b:d3:ed:13:6e:ec:8c:22:c7:f2:f0:32:28:0c:fd:
         0d:e9:b3:da:e0:2a:6c:45:d9:d7:16:cf:93:c6:b1:4c:df:dc:
         96:df:af:12:e8:6a:e4:d3:81:79:d5:af:38:2c:e7:b5:9c:9c:
         3c:4d:ed:36:a4:d2:07:dc:6a:1a:6b:9f:35:e8:85:46:4f:22:
         88:50:d4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:28:41 2025 by rpki-client