Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EA2AC1DA783CFEA5BE275D4B1841F5D20BFFB1F4.cer
File:                     EA2AC1DA783CFEA5BE275D4B1841F5D20BFFB1F4.cer (raw, json)
Hash identifier:          Nby6hXrT6KuwcRsVLdC7KnsAgVGDhd9qxumOV/toTYk=
Subject key identifier:   EA:2A:C1:DA:78:3C:FE:A5:BE:27:5D:4B:18:41:F5:D2:0B:FF:B1:F4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0F2BEC00AE1C3E15DBB84DC80A5D417323DCD16D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dn56FQL5v9Emc4YLCuMrsMHnZ4SrQw3EhE95LTGSn5nV/1/EA2AC1DA783CFEA5BE275D4B1841F5D20BFFB1F4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dn56FQL5v9Emc4YLCuMrsMHnZ4SrQw3EhE95LTGSn5nV/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 05:57:50 +0000
Certificate not after:    Thu 05 Mar 2026 06:02:50 +0000
Subordinate resources:    AS: 269255
                          IP: 45.183.24.0/22
                          IP: 2804:61c4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:2b:ec:00:ae:1c:3e:15:db:b8:4d:c8:0a:5d:41:73:23:dc:d1:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 05:57:50 2025 GMT
            Not After : Mar  5 06:02:50 2026 GMT
        Subject: CN=EA2AC1DA783CFEA5BE275D4B1841F5D20BFFB1F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cb:fc:3e:16:f0:5a:8c:f6:b6:cd:01:90:19:
                    ac:17:ef:d0:a5:e4:f3:c3:69:b0:59:d5:15:dc:1d:
                    79:1a:b4:8f:b7:b8:00:b0:83:4f:34:0c:70:50:19:
                    3c:33:80:8a:2d:31:f2:92:a5:5f:51:7f:28:63:30:
                    64:fc:c5:b1:7c:65:ff:ea:25:6b:f5:8e:ae:82:c2:
                    4a:74:93:78:fc:dc:d0:0d:80:24:a6:42:a4:4f:cc:
                    ef:cc:0f:ae:12:9c:54:e4:c7:fe:31:4b:c6:a4:81:
                    05:3f:01:cb:f3:b9:51:92:4b:c6:a0:b6:80:9e:2f:
                    33:36:31:02:b5:63:7e:73:39:ac:46:06:45:55:54:
                    8e:07:f5:72:54:79:f1:de:13:59:b5:56:59:88:5d:
                    0c:27:22:bf:dd:c8:6f:ab:7e:97:81:63:f1:ac:81:
                    d7:c3:11:23:bb:24:15:64:73:c7:88:b7:19:a9:c9:
                    44:25:8f:fd:e3:fc:12:c2:45:07:01:29:0c:22:ba:
                    07:7d:52:e5:de:5c:c1:08:c8:f5:c6:35:bd:ec:87:
                    a4:a6:64:5f:20:82:b3:a5:c6:ff:d1:2c:0e:90:66:
                    f8:aa:3b:86:be:54:fb:70:8a:31:19:b2:cf:d8:14:
                    60:54:7d:91:71:40:df:1a:1e:e0:66:6e:68:6a:c8:
                    ac:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EA:2A:C1:DA:78:3C:FE:A5:BE:27:5D:4B:18:41:F5:D2:0B:FF:B1:F4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dn56FQL5v9Emc4YLCuMrsMHnZ4SrQw3EhE95LTGSn5nV/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dn56FQL5v9Emc4YLCuMrsMHnZ4SrQw3EhE95LTGSn5nV/1/EA2AC1DA783CFEA5BE275D4B1841F5D20BFFB1F4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.24.0/22
                IPv6:
                  2804:61c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269255

    Signature Algorithm: sha256WithRSAEncryption
         95:70:5a:fc:c5:21:1a:b7:ed:bb:24:3c:c1:15:69:31:dc:67:
         5c:6e:a7:65:f1:57:5e:85:91:bf:b5:06:8b:d5:cd:e4:98:5d:
         eb:50:1f:01:75:a0:ee:ab:fd:10:e2:0f:0c:26:9f:2d:83:4c:
         31:5c:c2:95:f8:a1:ed:e6:be:f9:6d:28:6c:df:91:1f:e9:a1:
         38:9a:69:d4:6c:88:fb:d7:98:57:0b:6e:d9:af:bd:d1:00:ae:
         ba:f8:de:0f:64:75:aa:aa:2c:82:59:3e:97:59:d7:63:83:62:
         cf:5e:25:27:04:d1:e3:ff:73:97:42:05:4b:b0:bc:14:08:6d:
         92:18:2a:3b:b4:6d:b7:a5:a0:96:bd:6b:0b:0d:df:75:e8:8e:
         dc:07:42:19:31:84:0a:2a:f1:43:b7:65:a2:26:b3:88:36:3b:
         71:3b:9d:a1:18:b3:be:14:4f:8e:05:a3:ed:d1:a6:22:c9:a6:
         de:21:57:67:4f:2d:56:c5:2e:a9:1b:4e:1b:9a:9c:4a:f5:2f:
         de:85:2c:32:a7:8f:ad:13:66:89:15:26:17:4c:65:d1:d5:b8:
         07:f0:20:18:7c:11:40:b3:fa:dd:1c:ca:4c:a9:e6:96:3c:e5:
         07:03:1a:d4:d1:8e:93:9d:3e:72:78:f8:02:29:04:8f:61:3e:
         38:0b:3e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:44 2025 by rpki-client