Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F97FB7CDC75EF93F4DC2E43C0CF4E41685276A0E.cer
File:                     F97FB7CDC75EF93F4DC2E43C0CF4E41685276A0E.cer (raw, json)
Hash identifier:          XSJtLMGp/GY3d0lfO3PEtG7dfoFiIWHTlmpn9AEuYOE=
Subject key identifier:   F9:7F:B7:CD:C7:5E:F9:3F:4D:C2:E4:3C:0C:F4:E4:16:85:27:6A:0E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       46C68B213894A727F6C9F1EEBD64E7BBAD4A6BBD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/F97FB7CDC75EF93F4DC2E43C0CF4E41685276A0E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Nov 2024 19:06:19 +0000
Certificate not after:    Fri 28 Nov 2025 19:11:19 +0000
Subordinate resources:    AS: 270695
                          IP: 181.192.112.0/22
                          IP: 2804:6fec::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c6:8b:21:38:94:a7:27:f6:c9:f1:ee:bd:64:e7:bb:ad:4a:6b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Nov 29 19:06:19 2024 GMT
            Not After : Nov 28 19:11:19 2025 GMT
        Subject: CN=F97FB7CDC75EF93F4DC2E43C0CF4E41685276A0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e3:cf:7f:55:26:d4:86:f4:4b:3d:3b:86:05:
                    b6:95:96:b9:29:ab:54:37:26:5b:68:9f:2e:2c:8b:
                    3c:cc:34:d7:39:ee:ba:66:3f:89:b3:b4:46:17:fd:
                    ff:16:3c:5d:37:81:2a:88:2b:50:6d:5c:0d:69:16:
                    b5:e3:a9:16:e2:e9:35:9a:75:b0:fc:09:d2:1f:0b:
                    d0:f1:4f:64:1d:ac:ce:ab:a7:d1:11:a8:ef:c5:a2:
                    1e:f2:3a:50:7a:75:53:d7:0d:de:94:fe:a4:88:49:
                    31:aa:3b:a7:e7:6a:eb:52:be:38:6f:70:5f:c3:2a:
                    56:66:c3:16:21:45:af:aa:85:c7:5f:2f:38:02:54:
                    2e:cd:9a:25:56:93:6e:68:74:4d:6f:32:f1:c6:94:
                    44:e9:fc:c8:eb:b5:77:eb:b8:0a:95:98:09:a2:c1:
                    ae:90:02:21:a7:19:5a:e2:4c:3f:7a:fa:9e:a8:67:
                    fe:90:79:c4:74:60:7b:bc:c2:eb:8a:ed:9d:35:23:
                    0b:96:c8:da:15:26:ed:dc:1f:02:f9:ed:33:f7:55:
                    40:0f:cb:2f:1c:e2:06:61:b5:e2:25:ac:4e:95:fa:
                    77:f8:56:20:37:2f:40:5b:c2:2a:d1:68:ea:69:21:
                    f0:6b:a6:fc:d6:d0:04:ae:67:9a:a9:90:dd:03:36:
                    2d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:7F:B7:CD:C7:5E:F9:3F:4D:C2:E4:3C:0C:F4:E4:16:85:27:6A:0E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/F97FB7CDC75EF93F4DC2E43C0CF4E41685276A0E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.112.0/22
                IPv6:
                  2804:6fec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270695

    Signature Algorithm: sha256WithRSAEncryption
         20:69:cc:8e:d2:84:f9:6a:89:9b:59:bc:ca:17:6b:43:d6:08:
         0d:c9:b6:8a:28:9e:29:58:72:bd:46:09:c4:4f:54:bc:d8:cc:
         25:1b:db:68:27:fe:7d:62:ef:e5:0d:d7:ce:aa:6a:d0:35:30:
         15:2f:51:d3:ff:7c:32:90:2a:4c:22:97:33:65:09:d3:fa:3b:
         16:0f:44:18:09:f6:2f:b5:ba:84:4b:2c:50:14:7c:61:62:26:
         69:c6:c5:e9:a3:89:2e:8a:89:fc:f5:d1:80:36:45:3a:c0:88:
         47:b5:3d:4f:38:df:10:84:57:1a:77:d8:07:a1:61:77:a8:8f:
         61:22:eb:5a:5d:71:53:cb:2c:f9:98:c2:39:98:79:2d:3c:0c:
         d6:44:e3:3d:a6:e4:bf:39:7a:bf:85:66:4c:7e:3c:cd:62:b2:
         bb:c0:60:1d:b5:9f:28:60:bd:3f:f5:77:1f:de:20:ef:bb:f1:
         16:cd:85:1d:47:d5:3d:7f:8d:69:3e:ed:0d:e8:00:d5:d3:61:
         c5:ea:03:52:fe:ad:40:00:a3:24:13:ef:ac:2c:8f:8d:49:b8:
         f0:00:78:7a:7d:ed:a1:65:6b:5f:d5:91:f2:ee:ff:6c:35:74:
         43:9c:77:83:4b:20:e2:26:35:9a:89:59:28:e7:fe:fa:2e:cd:
         72:30:3e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:54 2025 by rpki-client