Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E9FFB74BC6E77853BA3620D32D32557B2927C70A.cer
File:                     E9FFB74BC6E77853BA3620D32D32557B2927C70A.cer (raw, json)
Hash identifier:          pzov0K/ORZ+gTFFzNKyj+/baEKzKGHaMDeFAsoFVZLo=
Subject key identifier:   E9:FF:B7:4B:C6:E7:78:53:BA:36:20:D3:2D:32:55:7B:29:27:C7:0A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6249FC6E843D957E1BF35DFC34B3CD3A5D0A87F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/1/E9FFB74BC6E77853BA3620D32D32557B2927C70A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 14:16:26 +0000
Certificate not after:    Fri 06 Mar 2026 14:21:26 +0000
Subordinate resources:    AS: 264105
                          IP: 45.166.20.0/22
                          IP: 2804:555c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:49:fc:6e:84:3d:95:7e:1b:f3:5d:fc:34:b3:cd:3a:5d:0a:87:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 14:16:26 2025 GMT
            Not After : Mar  6 14:21:26 2026 GMT
        Subject: CN=E9FFB74BC6E77853BA3620D32D32557B2927C70A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:55:53:65:21:dc:3a:b9:94:98:44:ce:27:3b:
                    6c:88:66:0b:59:b1:14:60:ba:27:31:c0:a5:2b:52:
                    1c:58:16:ae:14:11:55:2f:75:67:a7:b6:81:06:1f:
                    05:ac:89:07:aa:bc:18:cb:68:e2:15:86:2a:78:69:
                    4a:4a:f5:c1:b7:04:7e:04:9b:a6:66:0c:d9:09:ad:
                    e6:90:bc:2b:58:9f:af:92:b0:09:3d:42:bc:a9:32:
                    b1:d6:8b:df:f9:e5:60:36:56:e1:43:7b:68:10:27:
                    43:74:62:23:db:62:f0:8c:c9:51:d3:f0:09:36:0f:
                    41:b8:3d:8f:80:a9:af:22:ca:a2:ee:8e:bf:25:ec:
                    28:38:2c:b0:49:77:47:16:58:6c:07:d8:52:1f:2b:
                    95:1d:63:2f:f1:2e:eb:fa:21:98:c3:b0:13:88:3e:
                    0e:d5:cf:26:cc:95:b9:c0:f3:5c:22:83:00:84:b3:
                    31:db:86:9c:27:a4:fe:d2:5d:b8:fd:f4:aa:8e:57:
                    89:68:bf:ee:fb:a9:56:34:26:90:b3:0f:73:3b:f9:
                    56:af:69:e5:f8:58:68:62:c0:74:a0:35:61:70:6b:
                    c9:2c:c7:6e:ee:3b:16:6d:fa:9f:04:d9:64:7a:fc:
                    76:6e:23:71:51:4a:df:01:d6:08:f6:be:b0:41:52:
                    fb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E9:FF:B7:4B:C6:E7:78:53:BA:36:20:D3:2D:32:55:7B:29:27:C7:0A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A6Jv5P21ryQCg6UtP5fVQvmr2BZeM7QUiVhFa2YsCmWc/1/E9FFB74BC6E77853BA3620D32D32557B2927C70A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.20.0/22
                IPv6:
                  2804:555c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264105

    Signature Algorithm: sha256WithRSAEncryption
         45:89:8c:13:0a:93:ff:c9:65:1c:db:e3:b0:e5:84:12:19:4b:
         35:14:f4:d8:b1:52:23:35:af:5a:83:16:b5:c8:6f:51:b3:05:
         1e:f9:53:c8:12:8a:a8:d3:2c:98:9a:5c:83:56:51:71:ff:9d:
         60:b0:f2:e2:64:3a:c5:7e:0d:b8:9b:4c:ee:c6:55:f9:15:a6:
         87:33:12:c5:78:16:4e:f1:1a:17:90:b3:48:a7:a6:7b:1f:b2:
         87:6e:33:ac:5a:b2:20:60:ed:75:80:31:2b:67:8a:4b:d9:20:
         40:04:a4:92:ae:ba:5f:8a:8d:6e:51:27:66:a3:03:e5:2e:f2:
         f7:bb:a6:af:60:3a:c1:c4:c8:60:57:38:bd:40:fd:a3:55:a7:
         7e:98:39:74:03:8c:1f:dc:fc:e0:9b:30:7a:ef:2c:dc:44:99:
         c1:b3:19:35:90:51:3b:2a:b2:5e:0d:47:79:d8:98:7c:15:d9:
         58:6c:4e:7e:53:ee:33:75:e4:78:00:37:ef:6d:5b:08:ac:06:
         ff:80:f7:81:99:1b:fa:9d:cf:65:9a:6a:ee:0d:13:07:19:f4:
         91:39:0d:12:c1:e6:9f:58:e6:37:7d:ba:7a:5e:be:83:71:94:
         78:8a:a1:4d:7c:97:6e:59:a4:dc:b7:61:be:26:69:09:e7:af:
         66:0b:75:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:14:06 2025 by rpki-client