Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer
File:                     E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.cer (raw, json)
Hash identifier:          q/tgSzYc4p0zEX6YDZci6QDLUp7QSDmm0XYvHg6IImQ=
Subject key identifier:   E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       21942A2B6548006EAC81935BF0CFAAA3A6A605FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 11:22:54 +0000
Certificate not after:    Thu 05 Mar 2026 11:27:54 +0000
Subordinate resources:    AS: 269337
                          IP: 45.183.180.0/22
                          IP: 2804:6314::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:94:2a:2b:65:48:00:6e:ac:81:93:5b:f0:cf:aa:a3:a6:a6:05:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 11:22:54 2025 GMT
            Not After : Mar  5 11:27:54 2026 GMT
        Subject: CN=E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:95:33:0f:da:00:16:88:51:4b:b0:e0:b7:f5:
                    45:63:9b:e4:5b:9a:5b:0f:64:f8:e3:2c:a3:8c:f9:
                    95:b2:21:ae:7c:e0:0a:f5:9c:19:50:ec:da:a2:93:
                    3f:39:11:67:76:d8:96:0f:2d:55:bf:66:ef:6d:38:
                    22:b9:ca:70:b4:77:5b:b9:68:70:c2:72:eb:ae:08:
                    35:7e:ce:09:e2:46:c9:ef:23:8e:82:da:ab:a3:66:
                    eb:2f:c8:a6:8d:d2:0e:26:d4:89:4f:f8:ac:a7:b1:
                    26:fd:e7:35:e9:da:d5:5d:e7:dd:c0:04:13:a9:f4:
                    1e:8f:76:53:ad:d5:3f:10:49:fe:95:88:2e:2d:ef:
                    23:cf:65:da:83:42:52:25:35:8f:1e:5c:ff:c7:b9:
                    de:fa:e0:34:7f:d7:c0:24:b0:63:6d:b6:db:f0:8c:
                    48:dc:2f:77:8e:56:e1:ee:7c:57:6d:aa:6f:34:82:
                    6e:d1:64:bd:a7:43:95:53:1b:72:27:89:38:a9:d5:
                    4e:da:cc:58:bf:f4:4f:83:28:9c:93:2d:9d:8c:eb:
                    6c:9a:6c:97:43:f3:09:0b:3c:0d:5a:a3:cf:6b:9f:
                    4d:21:dc:61:42:bb:34:1a:06:58:63:cb:aa:5b:dd:
                    5d:75:b4:0f:45:d0:ad:c8:f0:d3:db:72:30:18:4f:
                    29:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E7:08:AB:F0:39:B1:FF:20:F9:DE:5F:F6:CE:1D:E3:DC:BB:AF:D6:B4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CH46a9tRFtVR5bZFKajVee9Y75vp44C6a34L1YsnUjHE/1/E708ABF039B1FF20F9DE5FF6CE1DE3DCBBAFD6B4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.180.0/22
                IPv6:
                  2804:6314::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269337

    Signature Algorithm: sha256WithRSAEncryption
         69:2c:43:57:42:21:12:f8:e9:a3:67:09:ca:fb:31:91:aa:a0:
         02:a2:48:c1:43:63:d2:63:08:0b:b3:2a:7f:92:b1:28:45:da:
         24:23:34:8c:f4:22:d9:14:cf:bc:e4:a5:2a:26:53:ee:94:f2:
         33:12:34:bf:16:4a:b5:e3:fe:bb:be:fb:32:51:3e:5c:c4:eb:
         6e:a0:1c:c4:f2:0b:e0:ad:42:a2:02:93:4f:57:0a:0a:78:2a:
         ad:54:72:f8:a4:f7:0d:c4:de:6f:e4:77:a9:ec:c5:89:66:2b:
         94:eb:25:0b:69:77:7c:61:a7:3d:f7:78:c1:19:d1:ee:0f:dc:
         a0:89:19:da:92:f0:79:9d:10:05:38:db:42:04:17:cb:ce:47:
         28:ae:7d:59:5b:72:f2:9f:d7:b4:9c:99:ff:9b:04:20:1a:b0:
         b6:4f:62:ee:e4:6c:ca:93:74:33:55:1d:14:6f:c7:98:55:5d:
         a2:5d:6b:ed:30:99:f2:c1:13:9d:80:c8:cf:69:e2:85:23:36:
         43:b6:42:2d:64:45:a6:78:d5:30:19:6b:62:df:5d:48:f3:45:
         2f:e7:ab:db:d1:a8:8e:8e:87:d4:36:1d:2d:47:df:99:af:1f:
         4b:ff:87:70:82:9e:85:7e:63:b2:79:05:1c:ac:0a:ed:af:27:
         5a:49:55:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:18 2025 by rpki-client