Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F149F6074E69BD8DF1483B6F1B74571591827C7E.cer
File:                     F149F6074E69BD8DF1483B6F1B74571591827C7E.cer (raw, json)
Hash identifier:          YwoS+l1zh2ObJ1Nd9fvaYqgjS/2HPh4kZgZCI3jCoAw=
Subject key identifier:   F1:49:F6:07:4E:69:BD:8D:F1:48:3B:6F:1B:74:57:15:91:82:7C:7E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4DB85331532EE3DD2D35F067B7C7C9D4006DA721
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/F149F6074E69BD8DF1483B6F1B74571591827C7E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 19:57:16 +0000
Certificate not after:    Thu 05 Mar 2026 20:02:16 +0000
Subordinate resources:    AS: 28665
                          IP: 177.12.0.0/18
                          IP: 177.136.128.0/19
                          IP: 189.1.128.0/20
                          IP: 2804:f88::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b8:53:31:53:2e:e3:dd:2d:35:f0:67:b7:c7:c9:d4:00:6d:a7:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 19:57:16 2025 GMT
            Not After : Mar  5 20:02:16 2026 GMT
        Subject: CN=F149F6074E69BD8DF1483B6F1B74571591827C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0a:d8:2d:2d:26:df:5f:ce:e3:e4:69:0e:9f:
                    3c:e5:05:0d:25:c4:7e:71:e8:62:3e:7d:c6:eb:ae:
                    fc:fe:78:26:f2:80:89:44:a4:4c:d8:31:e1:1c:f2:
                    d4:91:46:4c:66:13:f3:e5:cd:51:cd:9c:69:7b:a8:
                    6e:da:dc:9e:13:4a:a2:83:25:61:2d:13:c5:a2:ad:
                    9b:b4:44:b1:36:12:1b:2a:eb:84:ed:c2:25:57:29:
                    dc:84:35:fa:f4:df:12:58:bb:28:61:64:40:2a:7a:
                    5c:b8:17:4e:91:0e:d8:07:89:c1:7c:f5:d6:80:b2:
                    f0:31:72:b7:c8:14:3b:5d:e5:db:66:d3:30:b6:d3:
                    ca:22:de:3b:f9:5c:c5:47:8f:9d:bd:d8:8c:25:98:
                    c9:b8:4a:74:14:aa:e1:df:ba:ef:9b:bb:fc:c5:62:
                    e6:7c:14:70:06:ff:bf:ff:07:01:da:ea:fc:90:b9:
                    50:7a:ca:7f:27:d6:a7:c1:b4:9c:45:df:4e:56:8a:
                    02:6a:11:d3:02:8c:5c:97:95:d9:ee:76:cf:14:fa:
                    99:94:2f:de:57:29:68:c1:a5:43:65:59:2e:4b:f9:
                    ea:99:df:0f:a9:00:a3:0c:c8:29:fb:4d:4b:8d:b4:
                    d0:c7:4a:1c:14:cd:9e:e1:12:a6:a7:0b:62:fa:a0:
                    f8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:49:F6:07:4E:69:BD:8D:F1:48:3B:6F:1B:74:57:15:91:82:7C:7E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/67BFvffteLmRFNrTdg3PMkpsmV1PdrAntwwtMCFGqdov/2/F149F6074E69BD8DF1483B6F1B74571591827C7E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.0.0/18
                  177.136.128.0/19
                  189.1.128.0/20
                IPv6:
                  2804:f88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28665

    Signature Algorithm: sha256WithRSAEncryption
         b6:05:50:32:63:e6:8d:a4:28:eb:3f:69:f2:75:a5:f4:ad:9c:
         e8:23:de:11:76:13:7c:8e:52:95:84:a4:c5:a9:66:99:70:18:
         46:d4:8a:8f:b6:99:3c:9f:35:e7:c5:9a:26:55:23:18:2e:1e:
         da:2d:29:2d:b6:e2:f6:6b:37:9f:e7:2b:ec:43:08:76:6e:e6:
         a8:5c:fb:c1:5e:3d:ff:b8:ab:83:97:c2:b1:ee:ea:94:1f:13:
         b8:ae:19:23:fe:04:be:c2:5a:a0:cf:f8:84:61:ae:bc:fe:78:
         2c:5e:22:94:ef:c6:bc:22:17:d7:75:7e:f7:24:dd:ec:73:06:
         1a:5f:b3:fa:96:9a:e0:c6:63:9f:a1:f6:12:d8:05:60:99:8e:
         01:46:2f:42:f2:d3:5f:5e:ab:b7:98:cc:25:07:fd:2e:9d:ac:
         be:96:52:03:aa:49:2f:3f:42:1d:9d:0b:2a:69:bb:2a:63:8a:
         b9:c2:c8:be:12:8f:1b:22:d1:6f:00:8e:cf:99:29:0b:02:11:
         79:45:52:92:62:7b:d2:90:40:f5:31:bb:8c:33:83:b8:a3:e4:
         fe:d5:f1:b3:f6:e8:f8:f8:82:16:22:96:f6:56:45:c8:80:d9:
         3b:4a:81:b0:3b:3e:6e:ae:2b:c8:0b:eb:a9:b2:ee:ba:92:6c:
         ce:73:70:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:46:35 2025 by rpki-client