Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.cer
File:                     F0CEA2F7CE08B293FB03B54A2852B51A550560CF.cer (raw, json)
Hash identifier:          V+D1y0zgouVsf3zxgdbF9i8brSM0KJ/WqULhk14fxco=
Subject key identifier:   F0:CE:A2:F7:CE:08:B2:93:FB:03:B5:4A:28:52:B5:1A:55:05:60:CF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       34AA1AA77524802D1E62C4778A314DD9ED80056C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 17:49:43 +0000
Certificate not after:    Thu 05 Mar 2026 17:54:43 +0000
Subordinate resources:    AS: 271177
                          IP: 179.51.184.0/22
                          IP: 2804:776c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:aa:1a:a7:75:24:80:2d:1e:62:c4:77:8a:31:4d:d9:ed:80:05:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 17:49:43 2025 GMT
            Not After : Mar  5 17:54:43 2026 GMT
        Subject: CN=F0CEA2F7CE08B293FB03B54A2852B51A550560CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:90:8a:b5:27:0b:fa:cd:fa:64:71:3f:9c:a9:
                    c6:c1:67:4a:29:88:f0:79:36:f8:35:ae:e6:5d:bc:
                    21:6c:57:2a:0e:84:a9:ba:97:56:18:51:bb:97:8d:
                    e9:4e:c7:0d:fe:58:d2:27:32:61:34:29:40:42:5f:
                    f3:23:93:69:6d:78:d6:c4:7b:91:de:16:53:0c:58:
                    a7:fb:55:b8:83:14:8d:43:dc:4c:42:79:1a:48:44:
                    d0:0e:81:bf:93:cc:8d:bd:04:4a:91:2c:9e:35:b7:
                    1f:fd:0b:ff:b1:3a:6c:46:99:7d:81:71:8f:e9:46:
                    23:25:88:83:1b:b4:03:0c:43:fb:ca:24:51:3c:a8:
                    f1:e0:84:17:4d:57:0e:36:96:ad:10:bb:23:50:37:
                    df:29:83:86:9a:a2:a8:8f:e1:0c:22:57:eb:8f:ce:
                    43:0a:bc:94:2a:d3:ee:0a:67:20:ce:07:c7:e8:e9:
                    27:27:da:d7:86:ad:5f:d4:82:16:18:7b:63:9a:bc:
                    79:9d:bf:53:1c:44:7f:9b:96:e7:aa:48:30:fd:98:
                    80:89:52:00:35:ef:ac:2d:ff:ee:b7:e9:ff:03:cf:
                    41:6c:05:3c:76:8e:e5:e5:a2:db:36:47:29:35:07:
                    9b:58:d2:31:89:ee:8f:b3:6d:0c:7d:5f:a0:ab:70:
                    fb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F0:CE:A2:F7:CE:08:B2:93:FB:03:B5:4A:28:52:B5:1A:55:05:60:CF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/1/F0CEA2F7CE08B293FB03B54A2852B51A550560CF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.184.0/22
                IPv6:
                  2804:776c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271177

    Signature Algorithm: sha256WithRSAEncryption
         6c:47:69:2a:48:d4:a4:09:8e:6c:8a:fa:22:bc:65:dd:9d:46:
         58:62:13:3e:4f:32:7f:4d:7b:90:f2:58:d4:ca:03:d6:ad:5c:
         db:ff:e1:2d:ff:31:81:20:63:23:71:46:05:39:23:a9:48:e4:
         99:76:46:4d:04:ea:e2:49:2c:b1:cd:07:9b:4e:d3:d0:88:a3:
         88:a9:59:a3:92:c5:48:b8:29:35:e7:5e:4b:62:eb:43:d1:62:
         d8:3f:05:a9:e5:81:64:86:d9:a2:5c:26:4a:37:ef:35:99:b2:
         30:13:98:cc:ad:5b:c4:fc:14:b6:4e:11:1c:a1:15:bf:fb:2d:
         08:6d:78:46:bb:cd:75:49:20:72:a0:54:0e:43:bc:64:8e:d1:
         40:ec:10:88:cb:6f:be:d3:c6:e3:27:f4:f2:bb:a9:ba:7f:4f:
         87:06:8d:16:c0:35:d0:55:d3:0f:52:ed:59:cc:5f:90:fb:5e:
         72:8c:8b:29:c2:3f:f5:13:69:e2:d7:78:84:63:bb:85:25:07:
         12:94:2f:6f:10:52:d9:44:ca:18:2a:38:93:21:2e:3a:95:11:
         26:bd:4e:84:a5:b1:3f:0c:86:99:6a:a6:7c:73:08:31:83:c0:
         e8:9a:8b:66:cc:de:2b:a6:82:8a:fe:64:5b:b9:5a:9a:07:8d:
         41:6b:c7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:40:54 2025 by rpki-client