Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EEAED5639DA591A226FB7469252567652499ADA3.cer
File:                     EEAED5639DA591A226FB7469252567652499ADA3.cer (raw, json)
Hash identifier:          KowgohXoXzjAEuy5yZnYg6DkdM1M3BpVJdb2ZWJBPL0=
Subject key identifier:   EE:AE:D5:63:9D:A5:91:A2:26:FB:74:69:25:25:67:65:24:99:AD:A3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6821D9BB70C32C0A88959578E2C6117E70DFC1A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/EEAED5639DA591A226FB7469252567652499ADA3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 18:25:44 +0000
Certificate not after:    Thu 05 Mar 2026 18:30:44 +0000
Subordinate resources:    AS: 268077
                          IP: 45.168.168.0/22
                          IP: 2804:57a4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:21:d9:bb:70:c3:2c:0a:88:95:95:78:e2:c6:11:7e:70:df:c1:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 18:25:44 2025 GMT
            Not After : Mar  5 18:30:44 2026 GMT
        Subject: CN=EEAED5639DA591A226FB7469252567652499ADA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:86:fd:c0:5c:49:f1:e5:ac:60:f4:08:e2:03:
                    53:01:65:77:9b:54:07:d2:b4:05:f0:d9:05:74:dc:
                    19:4c:62:c7:f3:af:b4:2a:18:b0:65:74:d3:9e:0c:
                    9c:36:40:90:0e:7f:71:d0:8c:0d:23:f1:7a:ae:ec:
                    f8:df:68:1f:13:08:c4:a9:95:20:1d:85:ef:6c:ad:
                    4c:27:87:e8:09:f9:29:75:e0:88:97:8a:30:b8:a4:
                    bf:83:ac:8d:47:7d:52:c3:5a:cd:0b:fd:64:7e:2e:
                    36:e7:37:85:29:44:31:6b:9e:d9:6d:80:2c:5c:c9:
                    67:d3:8e:83:e2:52:87:6a:06:7b:0a:21:3f:fb:0d:
                    16:40:df:a5:77:ee:4b:7d:1e:0d:ab:e1:c0:2e:2c:
                    73:73:34:01:31:7a:78:44:11:3a:ec:55:7b:0d:e9:
                    71:a8:5b:59:c2:14:99:3c:47:0f:99:2e:60:5d:01:
                    88:32:8c:14:eb:7d:36:8f:4e:ae:b8:bf:b4:7d:a8:
                    28:c1:61:73:3b:c4:e5:6f:66:92:9c:c9:bb:52:9d:
                    dc:8d:9d:69:6d:a0:00:2f:90:58:5f:3c:cb:5a:16:
                    4f:fd:07:de:11:35:f6:d7:a8:62:20:3e:4f:7e:b8:
                    d8:b7:0a:ce:18:5f:09:0c:3d:90:5c:ae:77:54:fd:
                    43:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EE:AE:D5:63:9D:A5:91:A2:26:FB:74:69:25:25:67:65:24:99:AD:A3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4CNMbSPu8pM5DgMTLftGuFN5JupeQnnLQ2p3o7bHuQv7/1/EEAED5639DA591A226FB7469252567652499ADA3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.168.0/22
                IPv6:
                  2804:57a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268077

    Signature Algorithm: sha256WithRSAEncryption
         27:1b:ce:19:ed:ef:3e:c5:5a:85:52:91:04:e7:58:e6:30:3a:
         21:01:23:a2:31:ca:60:fc:82:ee:65:80:31:6b:aa:8d:b8:ec:
         e8:84:c7:3f:89:2f:05:f8:dd:b6:ca:9c:a4:85:bd:8a:fa:c0:
         67:67:71:06:fa:78:20:15:e3:54:90:91:42:ea:a6:64:e6:6e:
         83:5a:79:90:1d:76:9a:8f:bb:0a:db:6a:6f:4f:38:c0:89:6e:
         cb:8e:7c:84:a8:1b:c7:61:9f:6c:77:83:45:8b:52:29:5f:12:
         7d:76:4f:94:86:e9:9c:65:6e:09:48:2d:34:1f:b7:f3:37:4c:
         62:d6:33:52:c5:0c:83:36:07:e4:2d:c1:60:f1:e9:f2:91:df:
         5a:3e:56:fa:a7:1f:30:6f:72:b8:c1:b6:55:59:6b:a8:3a:9e:
         dd:00:fe:d2:a6:5d:e7:fc:a8:6b:a1:9c:1e:42:28:3b:93:81:
         47:1f:bf:27:e9:e1:cd:99:d7:93:d6:2a:2c:ef:74:ba:06:10:
         4b:98:f3:6c:f9:2a:21:c7:68:13:da:b9:a2:34:f6:39:a7:b4:
         a6:b3:be:ac:0e:fe:39:95:c6:58:39:98:ca:f3:39:ff:6e:e3:
         31:c9:34:d6:92:b4:bb:23:88:eb:de:c9:52:40:7b:f5:ab:7c:
         c0:2b:04:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:24:47 2025 by rpki-client