Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E3BD401A6D367E821B7AC7E5ABB510B6DE6649A5.cer
File:                     E3BD401A6D367E821B7AC7E5ABB510B6DE6649A5.cer (raw, json)
Hash identifier:          XIExS2W1GwWfHFkkRT65+x+sfLQHqC8il77CvoOzSKU=
Subject key identifier:   E3:BD:40:1A:6D:36:7E:82:1B:7A:C7:E5:AB:B5:10:B6:DE:66:49:A5
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7418361908C03359ACC94B3217F9D4CD697B939A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/E3BD401A6D367E821B7AC7E5ABB510B6DE6649A5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Mar 2025 18:13:29 +0000
Certificate not after:    Thu 12 Mar 2026 18:18:29 +0000
Subordinate resources:    AS: 268726
                          IP: 45.171.184.0/22
                          IP: 2804:59cc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:18:36:19:08:c0:33:59:ac:c9:4b:32:17:f9:d4:cd:69:7b:93:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 13 18:13:29 2025 GMT
            Not After : Mar 12 18:18:29 2026 GMT
        Subject: CN=E3BD401A6D367E821B7AC7E5ABB510B6DE6649A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:86:71:34:00:aa:6c:1c:79:0c:89:9b:61:86:
                    64:4f:c9:8c:57:1f:34:dc:0e:9a:ee:f4:65:0a:49:
                    d5:a9:c1:8a:44:e9:aa:4e:fe:b9:75:ec:e4:63:e2:
                    29:8f:95:c2:7c:47:2b:5a:53:7e:51:54:2b:42:c2:
                    20:26:67:99:99:50:6d:3a:67:2e:5c:21:11:75:94:
                    e9:74:4e:7a:8f:6b:d3:b8:f6:0b:ad:dc:d8:41:07:
                    63:f5:52:fb:a4:21:4c:38:a7:3b:11:01:b8:b7:da:
                    29:d7:ba:85:88:18:a9:b3:f4:31:fa:c6:b8:6e:32:
                    cd:41:b3:59:9d:aa:f8:45:09:6c:66:a3:42:4c:c2:
                    4b:80:19:4c:cd:b2:77:f4:c8:ea:59:0b:68:ae:2f:
                    7f:1d:4f:30:7f:35:e9:7e:47:a8:73:da:ff:d2:5a:
                    2a:7a:a3:75:23:29:54:41:1d:df:14:6d:59:10:8a:
                    13:6e:6f:e5:ca:20:82:67:f8:b9:68:3f:89:68:94:
                    58:ab:7b:91:05:d7:79:88:73:8f:4b:3e:42:28:39:
                    3a:e5:1d:28:58:22:7e:ee:c8:a2:ce:e1:86:61:d6:
                    c5:33:e6:8c:bb:4c:40:6c:78:11:59:df:81:d4:2e:
                    15:d3:fb:0f:dd:39:83:a3:95:fa:0c:33:6c:f0:b2:
                    be:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E3:BD:40:1A:6D:36:7E:82:1B:7A:C7:E5:AB:B5:10:B6:DE:66:49:A5
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EXtbdXeeRzkfG9hkNFd2vqddQwT4RdvoFwm7ZvHtau2A/0/E3BD401A6D367E821B7AC7E5ABB510B6DE6649A5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.184.0/22
                IPv6:
                  2804:59cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268726

    Signature Algorithm: sha256WithRSAEncryption
         54:85:79:ab:ac:ce:84:a3:b8:65:02:69:28:0e:e0:e5:cf:2c:
         b7:bc:0c:b7:71:70:f3:e0:ca:a9:76:9b:36:be:ee:10:b1:06:
         05:13:6a:d4:f8:14:95:a0:96:e1:f2:75:84:96:fd:42:f6:64:
         38:82:4f:f1:89:ac:65:10:4c:31:de:ba:12:47:73:a6:b6:c0:
         0f:6c:c3:db:c7:1e:e2:b1:07:e7:cb:65:72:69:37:82:46:20:
         43:23:28:2e:49:ab:89:88:8c:62:50:d4:8f:56:8b:ad:7b:09:
         fc:02:44:c7:8d:93:a9:03:4c:8e:57:5b:6f:b1:55:77:28:6c:
         3a:e4:b4:21:6e:3d:50:09:12:0a:eb:07:52:95:42:28:b6:dd:
         a0:1e:10:3c:5c:67:df:52:97:a1:c3:10:4e:66:22:0a:90:ae:
         77:4f:52:2e:28:a2:98:dd:b7:77:fb:30:aa:34:81:95:07:00:
         fd:0e:1b:3f:70:16:c8:78:ef:29:45:e8:35:29:2e:db:02:aa:
         83:09:5d:5b:d4:3d:24:31:dc:5d:05:4e:e6:8a:00:ec:88:ec:
         fc:96:18:0c:78:ca:c4:60:15:cb:7b:4c:e7:50:a9:49:b1:98:
         08:4b:bd:ca:09:05:2a:3d:4d:95:a9:4c:ce:50:99:f2:5f:6e:
         77:80:5d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:08:23 2025 by rpki-client