Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.cer
File:                     EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.cer (raw, json)
Hash identifier:          Xo2Oy0m2ZwMO2ICkKWQfbp20idSauSa9ScXN6CZzbH0=
Subject key identifier:   EF:D9:D5:35:E1:79:1A:7D:0C:76:38:F6:D5:C7:BC:66:00:35:31:F6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5F46CD3CC3C8E7368DFC8116CD4C48C81A923391
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Feb 2025 16:56:56 +0000
Certificate not after:    Tue 10 Feb 2026 17:01:56 +0000
Subordinate resources:    AS: 269377
                          IP: 45.185.136.0/22
                          IP: 2804:63b0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:46:cd:3c:c3:c8:e7:36:8d:fc:81:16:cd:4c:48:c8:1a:92:33:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 11 16:56:56 2025 GMT
            Not After : Feb 10 17:01:56 2026 GMT
        Subject: CN=EFD9D535E1791A7D0C7638F6D5C7BC66003531F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4a:ae:f3:2b:8c:d6:3b:8c:6b:09:9d:37:27:
                    05:63:94:4a:a3:5c:e7:c7:c1:d0:48:af:2c:8b:67:
                    be:28:62:f7:7a:e1:cd:f7:75:95:42:6d:f8:53:cc:
                    05:c4:e5:df:32:0b:0e:0b:03:ac:6b:14:a3:ca:65:
                    9d:8a:5f:12:d4:56:a5:98:81:d5:db:9a:90:90:5d:
                    db:9b:cd:0b:2d:eb:47:7f:db:19:a4:2e:62:ec:a6:
                    a6:19:94:47:fd:be:0f:62:2b:1c:e7:74:37:a1:ce:
                    88:5f:89:b1:ee:d6:1b:96:34:63:6f:75:15:47:71:
                    b3:03:1a:e2:58:7a:f1:68:91:31:f6:2f:1b:59:c2:
                    43:91:be:a9:4e:81:f6:eb:08:a4:13:2a:9b:29:45:
                    55:d9:d9:09:20:ad:ef:d4:37:a0:05:85:b8:ff:5e:
                    b1:a7:b6:0f:80:9d:f8:60:f0:94:bd:33:75:86:89:
                    87:b9:30:0b:37:40:1d:e2:7f:d8:3b:ab:de:ed:a6:
                    e2:a7:33:71:4b:29:3b:73:f1:92:3b:2f:9b:c6:6c:
                    4d:20:18:49:71:0b:04:13:05:34:07:82:e1:12:1f:
                    b3:84:ec:19:95:04:ef:14:f9:fa:cc:d0:e4:0e:30:
                    46:ca:4b:15:70:26:89:eb:e9:14:ef:78:95:50:40:
                    34:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EF:D9:D5:35:E1:79:1A:7D:0C:76:38:F6:D5:C7:BC:66:00:35:31:F6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DZJt1BaEkQHtLEMcqaUoArZDTkymS2b8FZ4hHbYRhRLG/0/EFD9D535E1791A7D0C7638F6D5C7BC66003531F6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.136.0/22
                IPv6:
                  2804:63b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269377

    Signature Algorithm: sha256WithRSAEncryption
         36:7e:ea:b6:df:eb:98:83:9b:a7:da:08:bf:f7:67:09:e6:2b:
         f3:97:11:0d:29:3f:a7:ae:9c:28:e6:5f:8f:e2:9e:63:8e:91:
         5a:1e:d0:ac:cb:ce:e3:fa:da:2a:d7:9b:c5:2d:04:20:df:2c:
         3d:d7:3d:bd:84:71:9c:14:a7:2b:52:f5:bf:64:36:de:72:0e:
         7a:e1:9e:71:80:6d:a2:65:43:e5:d4:3d:00:cb:92:48:67:b7:
         d8:65:6f:74:34:d9:40:60:ec:61:11:9f:a0:ed:be:21:a8:11:
         f1:2b:22:cc:c2:f3:2f:06:86:54:f7:28:89:43:54:03:7e:fe:
         2f:3c:ba:1d:1a:96:12:80:fd:5a:fe:65:92:48:3d:43:48:fe:
         d4:ab:ea:cf:41:0c:4e:87:19:86:d6:f7:c9:a0:9a:14:1f:63:
         96:73:d1:99:15:28:d9:3a:ae:25:46:3f:6e:5c:e7:72:f0:5c:
         69:8f:03:03:5d:d3:3b:10:58:dc:19:5d:0c:bd:83:d3:86:53:
         70:11:20:66:97:32:9f:e4:50:e2:c7:84:20:ab:38:15:14:76:
         1a:77:ae:d1:a5:61:da:b2:09:89:87:99:0b:56:db:3a:94:a2:
         2f:88:48:db:ae:51:98:03:b1:d9:9d:6c:8e:49:6a:b0:a7:c6:
         09:61:6b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:49:56 2025 by rpki-client