Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F1819F336E15B82769119C5B919D4F6F3543575A.cer
File:                     F1819F336E15B82769119C5B919D4F6F3543575A.cer (raw, json)
Hash identifier:          yysfh5WYPTwkHdY9+P7Ur7B2dksKFbFU+eNQADDzCAk=
Subject key identifier:   F1:81:9F:33:6E:15:B8:27:69:11:9C:5B:91:9D:4F:6F:35:43:57:5A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1A8D3D654FA83448A82FEED041731BF48F34657F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/1/F1819F336E15B82769119C5B919D4F6F3543575A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 18:14:07 +0000
Certificate not after:    Fri 06 Mar 2026 18:19:07 +0000
Subordinate resources:    AS: 267299
                          IP: 45.233.52.0/22
                          IP: 2804:4b58::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:8d:3d:65:4f:a8:34:48:a8:2f:ee:d0:41:73:1b:f4:8f:34:65:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 18:14:07 2025 GMT
            Not After : Mar  6 18:19:07 2026 GMT
        Subject: CN=F1819F336E15B82769119C5B919D4F6F3543575A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:29:2c:ae:54:77:00:6e:f0:02:d9:f7:e7:b2:
                    e4:a1:21:66:04:4a:e8:eb:ce:45:64:e9:25:a2:40:
                    bb:f0:ea:6d:32:76:f0:f0:9e:bb:16:c8:e4:bf:2c:
                    92:31:ab:20:90:1e:89:8c:f0:46:d1:34:54:93:eb:
                    24:b9:63:39:39:70:e7:75:66:a7:5b:42:2f:5d:aa:
                    a0:92:7d:7a:70:eb:6e:85:62:c0:39:65:6c:34:04:
                    69:fe:56:b2:5b:57:65:ad:01:31:24:30:a6:d7:f3:
                    08:e6:3d:c0:1b:ea:d3:cd:10:95:9e:e5:5e:5f:53:
                    b2:25:75:90:9e:19:9b:e0:8c:f9:0a:2c:ea:7f:55:
                    9f:6b:cc:6d:15:70:5e:c9:55:16:4e:51:66:41:d3:
                    fb:fb:7c:fd:37:36:e8:61:72:f5:8a:9b:7c:41:df:
                    56:99:56:bb:b4:1b:1a:86:26:be:be:06:08:5d:ab:
                    e3:52:45:d6:de:66:d9:4f:17:d1:09:b4:0d:4a:a1:
                    c1:7c:3a:db:4a:34:99:94:73:92:33:38:2f:40:f3:
                    6d:40:79:69:3d:be:9c:2f:e1:7d:9a:25:fc:16:b9:
                    08:e3:24:6d:00:fa:8d:fe:08:fc:40:66:a0:e3:19:
                    57:b1:bb:cb:37:37:15:40:04:ae:58:46:90:47:07:
                    9e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F1:81:9F:33:6E:15:B8:27:69:11:9C:5B:91:9D:4F:6F:35:43:57:5A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9ht26HaBZhSFaihwFaf77APSWoBuaX62hnVSo355dJER/1/F1819F336E15B82769119C5B919D4F6F3543575A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.52.0/22
                IPv6:
                  2804:4b58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267299

    Signature Algorithm: sha256WithRSAEncryption
         c1:8c:87:1f:ef:23:9e:2a:f1:7f:15:9c:7b:76:5e:03:52:85:
         ec:21:df:10:92:72:e4:13:e1:fc:08:9e:d4:f2:ea:e0:3c:9e:
         a7:b4:cc:16:b4:f3:e7:92:c1:74:69:25:67:d3:e2:4c:c0:80:
         85:0a:c7:7d:3f:a8:e4:c3:e5:f5:8f:81:2f:29:20:8f:4a:0f:
         2c:18:b5:29:95:ff:17:20:96:33:2f:69:65:be:2f:9b:04:58:
         01:00:7e:b5:95:ee:e4:36:be:72:ba:84:cb:28:83:4d:3b:6b:
         bd:9c:3e:b4:57:ae:53:59:48:f1:62:2b:5f:61:73:92:fb:96:
         e8:07:19:c6:8e:8c:8e:46:d3:35:69:38:69:74:9e:e3:5f:04:
         3d:0f:bf:3b:09:fe:05:bf:1f:cc:5e:7d:64:45:7d:62:a6:cb:
         76:e6:f8:16:a9:7d:91:bc:01:5b:2b:53:60:fe:01:bf:7b:b0:
         f0:55:42:55:e4:f3:54:bd:b3:81:09:47:27:c1:26:6f:37:68:
         e6:6c:c2:b9:4a:33:cc:98:02:f8:73:1e:63:b4:0b:6b:d4:1e:
         82:0a:dd:67:d5:aa:47:bf:24:7d:99:6f:50:ae:d5:fc:82:c6:
         96:df:ea:56:d1:0f:ac:99:8d:11:ff:4a:21:21:50:e7:85:e6:
         a4:4d:c6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:37 2025 by rpki-client