Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F2210BF6C7D232B88B5DFBCCAC836A607E8D44AE.cer
File:                     F2210BF6C7D232B88B5DFBCCAC836A607E8D44AE.cer (raw, json)
Hash identifier:          f4UzO3j9ExrxLfRSODWzoab+q/yeoww1uztXv5N0pAA=
Subject key identifier:   F2:21:0B:F6:C7:D2:32:B8:8B:5D:FB:CC:AC:83:6A:60:7E:8D:44:AE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       48138FE531145F5080BF9EAF224FF905F80D42DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/F2210BF6C7D232B88B5DFBCCAC836A607E8D44AE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Dec 2024 19:53:52 +0000
Certificate not after:    Mon 15 Dec 2025 19:58:52 +0000
Subordinate resources:    AS: 271712
                          IP: 177.21.148.0/22
                          IP: 2804:7fd4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:13:8f:e5:31:14:5f:50:80:bf:9e:af:22:4f:f9:05:f8:0d:42:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 16 19:53:52 2024 GMT
            Not After : Dec 15 19:58:52 2025 GMT
        Subject: CN=F2210BF6C7D232B88B5DFBCCAC836A607E8D44AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:be:c2:d3:27:e3:30:07:61:23:3e:65:bf:2f:
                    70:d5:80:ec:05:6a:83:21:21:28:0f:43:c1:93:b1:
                    8a:cc:88:89:b2:8f:8a:d4:42:0a:84:f0:ef:c2:95:
                    2d:69:f6:64:26:f5:73:fe:b9:3e:23:de:fc:b2:69:
                    df:8c:c3:87:f6:f4:7d:64:41:86:b8:81:33:e4:f3:
                    90:04:28:37:17:ac:74:e9:5f:8a:46:0d:fb:07:74:
                    06:6e:f7:1a:58:71:3b:d0:0e:c1:dd:1f:af:2e:18:
                    81:a7:73:e1:b5:88:ca:95:41:de:09:50:f3:15:a5:
                    34:09:54:43:da:ed:12:13:92:42:3d:cb:5d:eb:6f:
                    ba:e9:29:0b:fd:96:46:c9:87:21:7f:5c:46:4f:a0:
                    e4:92:85:c7:10:41:d1:e6:55:0f:8d:10:fb:5a:75:
                    96:dc:35:95:ab:d3:67:e8:a6:b5:5c:ea:da:59:e3:
                    47:d0:12:06:de:d0:2b:47:d2:42:c8:d1:f7:3d:59:
                    18:cb:12:92:58:1f:d0:63:69:34:fd:9b:4e:33:84:
                    31:a8:0a:4c:53:4b:fe:5e:bd:b8:a5:4d:c7:9e:4d:
                    e6:40:b1:07:72:bd:d5:8b:95:96:27:97:21:f3:af:
                    ca:dc:12:9e:98:58:39:5e:13:ca:8c:74:ea:a2:cc:
                    2d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:21:0B:F6:C7:D2:32:B8:8B:5D:FB:CC:AC:83:6A:60:7E:8D:44:AE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5PySNaTpMYxV7sQMnK6aMNp5bZyDgFTc3o9nKMZdR7Xn/0/F2210BF6C7D232B88B5DFBCCAC836A607E8D44AE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.148.0/22
                IPv6:
                  2804:7fd4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271712

    Signature Algorithm: sha256WithRSAEncryption
         1d:f7:70:ca:67:17:b4:44:d8:7e:1a:3d:ca:70:d6:a8:88:3e:
         b2:ea:5e:8a:e8:2d:5e:43:22:cc:ef:ce:97:d5:c7:ed:f2:0f:
         83:77:21:13:ae:3a:16:da:c4:b4:5a:2e:e9:9c:c5:31:45:b7:
         a3:de:28:c7:26:01:da:2c:98:f0:51:66:96:a0:17:57:ad:27:
         01:4f:ee:1e:d2:eb:fc:63:3b:5a:0b:94:3b:f0:7b:4b:97:48:
         03:65:51:f2:15:b0:9a:d7:3b:c1:4e:e1:73:46:cc:24:3f:2f:
         f0:56:9a:41:09:b2:3c:02:0e:a5:1e:dc:51:8b:1b:f9:1f:c7:
         b6:fb:44:28:a8:6c:5d:43:b4:83:d1:c9:0e:6f:bc:53:a0:e6:
         31:ff:28:a7:7d:3f:2a:f8:92:1e:8d:73:ee:d3:af:84:01:ff:
         25:d2:4d:a0:04:ec:58:1a:4f:1d:94:3e:50:d5:b5:97:98:80:
         f7:6b:fd:19:1b:42:50:3b:b0:bc:2b:b2:b5:31:28:a3:4c:09:
         41:ff:af:11:ed:db:22:59:55:81:16:cb:99:af:95:f2:a0:1e:
         68:f2:1f:3d:7c:c6:dc:06:0e:ac:6c:b0:27:b4:51:a8:87:0e:
         a7:15:74:e3:af:70:38:73:a2:2d:ef:41:ac:b5:eb:17:60:3e:
         43:cd:b6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:51:59 2025 by rpki-client