Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F519D15386DA423A1E940A04F10CC7E07C4554F8.cer
File:                     F519D15386DA423A1E940A04F10CC7E07C4554F8.cer (raw, json)
Hash identifier:          8d2Sp/YOwjD5bV1tFkL1B1RNjRaC0ju+FDcZ7AeezhQ=
Subject key identifier:   F5:19:D1:53:86:DA:42:3A:1E:94:0A:04:F1:0C:C7:E0:7C:45:54:F8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3C0258AEFF861BCBD56174F7205618F3F85E630B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/1/F519D15386DA423A1E940A04F10CC7E07C4554F8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 14:37:14 +0000
Certificate not after:    Fri 06 Mar 2026 14:42:14 +0000
Subordinate resources:    AS: 264872
                          IP: 168.227.48.0/22
                          IP: 2804:2f1c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:02:58:ae:ff:86:1b:cb:d5:61:74:f7:20:56:18:f3:f8:5e:63:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 14:37:14 2025 GMT
            Not After : Mar  6 14:42:14 2026 GMT
        Subject: CN=F519D15386DA423A1E940A04F10CC7E07C4554F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:10:6a:a0:14:14:82:4b:32:a9:a8:88:9b:6a:
                    31:af:fc:53:6b:44:aa:8c:e2:c7:b2:0b:3f:30:e6:
                    0e:05:ba:67:93:72:e8:5e:25:ec:f7:1a:42:d8:3a:
                    53:bd:fb:db:74:27:66:37:3b:a5:ae:0f:d6:72:84:
                    c4:5c:53:22:92:a2:d2:4e:be:4d:95:a1:26:da:43:
                    ca:8d:fc:b6:89:e0:21:6b:0e:da:ad:97:79:63:11:
                    da:4a:ac:ff:da:fe:67:d3:e2:96:40:85:be:88:00:
                    c7:64:71:d0:95:af:06:f4:ff:3c:d5:6a:97:0c:16:
                    9b:78:b4:40:2a:49:f4:7a:03:47:fe:68:dc:56:80:
                    ce:7a:09:ff:93:82:c7:a2:7e:3d:67:bb:f2:20:6a:
                    7c:3e:2e:49:e2:81:42:43:a8:2a:31:c6:42:b4:a5:
                    96:40:0d:de:a7:9c:e6:f8:bf:bc:95:56:ab:70:47:
                    4c:63:b6:47:44:6b:89:f1:9d:dc:46:50:68:a7:c7:
                    ed:64:94:9e:cd:b6:40:5d:1e:9e:3c:fe:67:7a:6f:
                    44:d7:47:3a:cc:00:92:48:9e:9f:50:e7:c9:b2:d8:
                    c7:f8:1b:fb:58:cd:26:3b:ad:3c:b9:ca:fa:87:1e:
                    8f:f4:fd:aa:1b:9c:47:66:41:8b:95:52:69:4b:e8:
                    fc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F5:19:D1:53:86:DA:42:3A:1E:94:0A:04:F1:0C:C7:E0:7C:45:54:F8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/1/F519D15386DA423A1E940A04F10CC7E07C4554F8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.48.0/22
                IPv6:
                  2804:2f1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264872

    Signature Algorithm: sha256WithRSAEncryption
         da:4e:58:90:81:5a:d5:17:1c:85:fd:f2:95:c8:bd:9e:88:fc:
         ce:a2:3c:4d:83:6c:e0:f6:fd:03:03:3f:5e:14:75:1e:d0:20:
         da:00:0e:5e:3a:57:aa:0b:b8:30:fb:8f:57:b5:d9:cf:9a:38:
         35:b1:d7:46:b6:8f:fe:57:45:ee:c9:c7:38:7d:dc:8f:39:f5:
         66:24:99:c2:a5:fb:b1:32:14:60:cf:83:6f:2c:8e:18:f9:17:
         a6:9b:87:d8:23:09:38:e8:be:3b:f8:64:af:9e:3b:63:dc:d2:
         c6:b7:f7:6f:63:e6:87:9a:22:10:ef:96:f7:e1:8a:72:40:b4:
         50:10:74:d7:d3:76:8b:77:61:d6:ec:93:0d:a1:92:90:08:cc:
         aa:fe:c6:99:5d:39:2f:83:ec:85:26:56:7c:21:05:55:75:2c:
         72:ce:a6:7c:39:76:1f:35:54:2d:ea:06:52:18:45:9c:6b:eb:
         78:25:1a:fe:cf:8f:0f:ad:b3:f3:29:7d:d2:d7:d2:7d:1e:3e:
         2e:56:28:25:17:0c:6a:b7:45:56:b7:5a:dc:83:56:12:f1:a2:
         3e:47:a9:72:8d:c8:20:6e:f6:4e:1c:60:bc:d4:25:02:54:b5:
         69:ea:8b:00:00:16:b5:ca:74:f0:ee:ed:58:d8:f5:e5:06:be:
         f1:90:1b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:03:21 2025 by rpki-client