Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E4BC959F2814C50C32B3647442E7A327D6946E27.cer
File:                     E4BC959F2814C50C32B3647442E7A327D6946E27.cer (raw, json)
Hash identifier:          h8tMLEhX1g190iVxZKKr3YXHXELttFEyCIMwBXUr+vQ=
Subject key identifier:   E4:BC:95:9F:28:14:C5:0C:32:B3:64:74:42:E7:A3:27:D6:94:6E:27
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6AD1AF3895D0FB2530D689B7FAB13A9E910E5DC8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6HsUFLjPNhw58NdRHgKFqDem7ua7S24ZsmcHAEkjSVhJ/0/E4BC959F2814C50C32B3647442E7A327D6946E27.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6HsUFLjPNhw58NdRHgKFqDem7ua7S24ZsmcHAEkjSVhJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Feb 2025 17:38:32 +0000
Certificate not after:    Fri 27 Feb 2026 17:43:32 +0000
Subordinate resources:    AS: 271733
                          IP: 45.227.124.0/22
                          IP: 2804:8028::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d1:af:38:95:d0:fb:25:30:d6:89:b7:fa:b1:3a:9e:91:0e:5d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 28 17:38:32 2025 GMT
            Not After : Feb 27 17:43:32 2026 GMT
        Subject: CN=E4BC959F2814C50C32B3647442E7A327D6946E27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b3:18:8e:0f:fd:6e:87:c3:1b:17:70:03:2f:
                    2f:f2:49:29:5d:9a:b6:c8:6b:cd:76:ab:33:3d:18:
                    f4:c6:6b:f2:0a:35:df:8d:61:29:0c:00:3e:a6:02:
                    3c:ea:37:bc:af:23:5e:5d:ad:3b:6f:a8:7d:f4:07:
                    59:f5:47:79:04:c7:82:5b:60:63:e6:86:57:e7:45:
                    e8:08:dd:8e:d2:ea:96:75:c5:ed:36:f5:1d:90:53:
                    20:4d:80:b6:c2:99:30:e6:54:ce:3c:9d:7c:81:6f:
                    ca:70:3c:41:6c:f9:ad:06:f9:96:22:f6:e2:63:f9:
                    d8:a7:80:7c:5b:e0:df:d5:00:cc:5c:e9:6f:d8:79:
                    80:51:3a:bb:e0:21:d9:74:c4:f0:82:50:2f:a8:73:
                    92:63:19:74:e5:11:3e:ef:49:11:18:80:6f:09:bd:
                    2d:e5:88:f7:bd:ea:40:b0:e3:dd:52:17:15:c3:bf:
                    ca:ac:c4:c3:27:87:e7:67:65:6e:39:ff:b4:cd:47:
                    d1:53:e0:5c:f0:ea:fc:e8:b7:1e:18:ca:06:be:c2:
                    35:35:59:e2:5a:e1:26:16:18:8d:29:3b:92:3a:71:
                    19:6a:7c:47:a1:77:1a:2c:93:94:1f:b8:c3:15:34:
                    11:62:f1:24:29:b5:1c:00:aa:c6:82:2d:68:3b:48:
                    32:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E4:BC:95:9F:28:14:C5:0C:32:B3:64:74:42:E7:A3:27:D6:94:6E:27
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6HsUFLjPNhw58NdRHgKFqDem7ua7S24ZsmcHAEkjSVhJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6HsUFLjPNhw58NdRHgKFqDem7ua7S24ZsmcHAEkjSVhJ/0/E4BC959F2814C50C32B3647442E7A327D6946E27.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.124.0/22
                IPv6:
                  2804:8028::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271733

    Signature Algorithm: sha256WithRSAEncryption
         08:04:68:42:69:f0:82:ee:7a:a4:b8:cc:f3:05:06:82:eb:7f:
         21:0e:04:66:e4:62:cf:5d:c6:e5:52:26:a2:1f:61:4a:3e:56:
         83:11:ed:15:07:6e:54:37:a9:73:26:19:1f:5f:5b:0d:a6:86:
         0a:11:c5:5e:67:b0:dd:4e:38:ed:6e:89:c6:7a:df:b5:c3:f7:
         03:77:43:2b:71:b4:7a:48:dc:cf:7e:6c:df:02:24:7d:13:fd:
         dd:93:3e:71:c4:32:d9:05:0c:4a:0e:c8:b7:af:28:70:34:bb:
         a8:f8:a1:48:f5:dc:cc:d2:45:ef:78:ba:4e:6d:d3:90:40:e9:
         6c:1f:42:53:d2:10:bc:9d:08:a0:44:d4:a8:05:7d:32:14:d1:
         33:6d:51:76:8d:77:6c:46:0c:f0:57:0b:c9:fb:67:9a:f5:bc:
         e3:6f:93:20:be:16:4d:8a:c3:02:21:6d:aa:fe:24:96:86:33:
         73:5d:8d:56:73:82:47:d8:60:c3:05:ad:b2:3c:a0:af:e1:1a:
         68:10:a7:7b:bc:8e:73:fe:3d:bb:c6:cc:d8:79:08:13:d1:14:
         d5:5f:e1:88:24:cb:0b:cb:4c:94:b4:34:22:9d:cf:f0:1a:03:
         fa:f9:f0:96:0d:41:8f:05:a9:f0:26:55:f1:99:38:8a:fe:fd:
         63:1a:c8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:34:33 2025 by rpki-client