Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.cer
File:                     F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.cer (raw, json)
Hash identifier:          dW1pe5k11swbV6pOci2H7hMq+zy6RHnib9eB28C++8M=
Subject key identifier:   F0:90:C1:B1:E7:CE:0D:D0:BC:17:FD:70:96:B3:9B:80:E8:B2:53:1C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       60D38F5254891855748C3EACD267BF9623FB1156
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 20 Jan 2025 17:13:20 +0000
Certificate not after:    Mon 19 Jan 2026 17:18:20 +0000
Subordinate resources:    AS: 262625
                          IP: 177.86.80.0/21
                          IP: 2804:4968::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d3:8f:52:54:89:18:55:74:8c:3e:ac:d2:67:bf:96:23:fb:11:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 20 17:13:20 2025 GMT
            Not After : Jan 19 17:18:20 2026 GMT
        Subject: CN=F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6b:2e:d4:6b:35:65:97:23:e8:e1:17:71:be:
                    07:50:66:75:f6:65:eb:f9:80:42:3d:e6:8d:a0:c3:
                    2a:49:4c:ad:5f:7f:fb:36:79:e6:3d:da:02:79:99:
                    66:40:f7:88:31:26:1a:81:de:b1:f2:15:b1:d5:fb:
                    dc:78:54:28:01:2c:28:42:84:c6:47:68:aa:cf:70:
                    b3:2a:02:36:ea:b3:32:c2:98:f4:34:31:40:5b:d0:
                    c4:be:c3:3a:e9:8c:2f:5d:4b:8e:72:f0:0e:6a:1a:
                    60:1a:80:39:05:a6:17:53:df:ec:52:21:ad:59:17:
                    b0:a9:b7:2e:d5:d8:f0:2c:0b:b0:c2:2d:d1:0b:7f:
                    04:dc:8e:92:c7:33:2b:64:4d:cc:05:ce:4d:25:24:
                    59:03:77:98:f2:4e:4c:e0:d4:9d:c3:59:5f:ab:f0:
                    d5:ba:ec:f4:39:44:4c:14:56:a5:84:4a:4c:dd:39:
                    a4:94:68:c5:47:64:31:46:48:ea:c2:08:97:d3:75:
                    6b:62:e1:4f:26:27:6a:1b:d5:a3:85:73:6e:69:07:
                    2b:5d:80:09:7c:32:a9:2c:a1:f8:9e:7d:73:f7:6a:
                    41:c3:a4:8d:c5:cd:32:c3:db:35:53:22:f4:b3:51:
                    2b:0f:b2:42:7f:44:d0:eb:38:c7:4d:7b:4b:c8:4f:
                    74:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F0:90:C1:B1:E7:CE:0D:D0:BC:17:FD:70:96:B3:9B:80:E8:B2:53:1C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.80.0/21
                IPv6:
                  2804:4968::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262625

    Signature Algorithm: sha256WithRSAEncryption
         39:46:89:bc:fc:37:e3:47:d3:7a:39:85:e8:71:60:84:6d:41:
         39:42:24:cc:0d:fd:b1:9a:17:ef:16:69:d8:c6:2e:98:35:b8:
         85:1c:0a:44:57:48:0e:60:9e:4a:89:0b:48:9e:b2:d5:a0:2b:
         6a:24:ad:a3:6d:39:a9:14:16:9b:89:1f:7f:64:83:c5:30:f3:
         b0:33:ed:45:6f:98:a2:a0:c0:d1:d0:a3:36:25:08:95:87:74:
         c4:6b:6a:73:c1:4a:16:80:e0:83:a6:79:89:8e:af:7b:2e:c5:
         d6:c0:5b:ab:17:1c:75:7c:69:66:49:64:44:eb:6f:14:3c:b0:
         ff:85:c4:41:d0:ac:1d:c5:23:8e:3d:40:d9:d8:21:dd:4b:d0:
         eb:03:d9:d5:68:49:06:2f:b2:f8:91:d5:26:07:eb:c1:46:c6:
         46:c1:64:66:ca:19:30:d6:24:e4:93:53:84:27:83:79:01:a1:
         23:45:a8:7d:94:49:c5:3d:90:03:40:ef:15:88:93:fc:15:a0:
         27:88:3b:59:50:fc:93:ff:f3:15:64:0c:ac:93:c4:f9:3f:66:
         60:b0:a3:10:b9:cc:08:ab:44:ee:d0:eb:a3:57:cd:ce:83:e1:
         89:fb:46:d6:49:32:73:7e:9e:ed:ce:df:07:b9:91:d6:c3:56:
         be:eb:32:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:49:23 2025 by rpki-client