Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1.cer
File:                     EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1.cer (raw, json)
Hash identifier:          FyakQy2VGkwJ0+FkzFuF6pjKk/QWrEs7YpnfYRwWES4=
Subject key identifier:   EE:5C:96:CB:0A:BB:BD:6C:86:6C:20:58:3C:9C:BB:E2:F2:1F:4C:A1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3D75372BA0D3973BCD32227D9C1A6133AAEAB1D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/1/EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:57 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:57 +0000
Subordinate resources:    AS: 272262
                          IP: 2804:8478::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:75:37:2b:a0:d3:97:3b:cd:32:22:7d:9c:1a:61:33:aa:ea:b1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:57 2025 GMT
            Not After : Mar  4 18:40:57 2026 GMT
        Subject: CN=EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ae:79:6a:8c:a7:22:c3:2d:5e:bf:ea:52:3b:
                    20:ea:0e:0d:fc:28:bb:37:52:a8:6d:0d:2a:a0:1a:
                    c6:b6:50:cd:37:ec:ec:ba:91:56:9b:69:88:3f:aa:
                    7c:1a:4b:a6:e6:3a:00:90:1b:dd:0f:14:74:23:cc:
                    28:df:a0:35:32:95:a8:84:e5:98:b6:41:58:2f:7d:
                    82:88:b9:89:9d:57:a2:85:4c:3f:ca:79:ad:10:a6:
                    8e:50:11:a5:06:3a:b0:cf:9b:64:c3:f1:b7:3e:4d:
                    d6:83:ad:ec:fb:62:57:e8:80:05:f4:30:65:2d:6c:
                    89:a9:70:40:c9:30:80:98:62:13:ff:90:55:ef:d7:
                    29:0f:34:84:7b:98:44:29:8b:5a:69:25:14:1e:ad:
                    af:8d:82:93:af:9c:c6:08:9f:a2:df:73:64:41:e2:
                    2f:45:9c:c1:0d:c6:7b:0b:56:13:b0:6f:98:01:98:
                    77:08:4c:13:67:07:d3:10:c4:63:73:27:5c:fc:e7:
                    ca:1c:68:c6:79:d7:8d:f3:93:79:fb:33:02:76:0f:
                    1f:9d:2c:6e:bc:da:5b:a0:71:4b:dc:b5:68:cb:4a:
                    8f:77:21:10:3b:f2:0a:8a:f3:c5:ed:b1:dd:dd:7c:
                    1b:43:be:50:e5:00:86:03:5d:a1:b1:ee:3f:90:f3:
                    ad:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:5C:96:CB:0A:BB:BD:6C:86:6C:20:58:3C:9C:BB:E2:F2:1F:4C:A1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/1/EE5C96CB0ABBBD6C866C20583C9CBBE2F21F4CA1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8478::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272262

    Signature Algorithm: sha256WithRSAEncryption
         97:42:4e:ec:c4:e6:02:3d:b5:39:c0:59:10:23:a9:01:3f:e3:
         a5:22:4c:f3:53:50:80:c8:88:5c:a7:f5:9f:fe:58:7f:18:c2:
         69:04:64:ac:56:dd:54:70:fb:84:25:dd:69:f0:cd:ce:9f:de:
         40:bb:ed:4f:5b:c2:6e:1e:4f:f0:80:1c:63:4d:46:5a:b2:cb:
         0a:66:6a:f5:b7:79:aa:7b:cc:73:ef:a9:c4:39:9a:91:fc:a2:
         be:97:cc:2a:34:5d:9b:58:1e:fe:f4:08:53:4f:bc:f1:45:c3:
         b3:db:ce:4b:24:2f:9a:a3:b8:ac:28:1d:42:b9:c8:a2:ce:2c:
         71:c9:a1:d2:55:fc:1c:08:8d:64:7e:4a:31:20:02:89:33:74:
         0b:76:fb:5f:e2:1c:e7:38:b3:5e:dc:5d:0e:0f:f8:04:50:03:
         82:f9:bc:60:70:6f:6b:11:fe:5b:48:b7:4e:ae:9e:12:20:b6:
         a2:94:50:2f:b1:a5:a0:d5:26:f8:a6:18:16:44:24:f2:1a:b5:
         64:6a:71:e2:6b:84:58:f1:c9:80:42:88:44:72:aa:ad:04:0b:
         a8:df:d9:09:66:19:5a:b7:3b:29:89:0f:08:9c:14:2d:e3:eb:
         0b:31:ee:67:cd:d7:3f:9c:a9:c6:62:36:19:83:34:33:3b:15:
         6e:9f:00:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:32:30 2025 by rpki-client