Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F9AA4548FC56DE800F12B58EFA6C206EA63B0585.cer
File:                     F9AA4548FC56DE800F12B58EFA6C206EA63B0585.cer (raw, json)
Hash identifier:          ZlIoRerEvUMm7Kcq2bQk2QotL1im6BauFvQrMOkcBAI=
Subject key identifier:   F9:AA:45:48:FC:56:DE:80:0F:12:B5:8E:FA:6C:20:6E:A6:3B:05:85
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       721A8BEC1952BE075A51F17FFA7187E1FB01FEB1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/F9AA4548FC56DE800F12B58EFA6C206EA63B0585.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 25 Jan 2025 19:04:50 +0000
Certificate not after:    Sat 24 Jan 2026 19:09:50 +0000
Subordinate resources:    AS: 267942
                          IP: 45.166.4.0/22
                          IP: 2804:5590::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:1a:8b:ec:19:52:be:07:5a:51:f1:7f:fa:71:87:e1:fb:01:fe:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 25 19:04:50 2025 GMT
            Not After : Jan 24 19:09:50 2026 GMT
        Subject: CN=F9AA4548FC56DE800F12B58EFA6C206EA63B0585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:72:01:63:e0:7a:92:08:93:25:a2:cd:45:
                    1f:a9:80:32:f3:86:87:99:eb:20:ba:2b:e8:d1:a9:
                    83:65:8a:40:be:fb:b0:62:e1:1d:b0:12:a2:85:c1:
                    73:8c:ef:8b:23:1b:46:f9:5e:66:ae:43:da:b4:76:
                    79:37:9e:fc:79:14:55:09:a8:e7:eb:cc:31:c5:0f:
                    21:aa:d8:db:78:6e:54:f2:83:fa:01:5e:30:8f:aa:
                    e1:94:98:e2:6f:c7:30:b5:8b:6c:ce:78:86:6d:0a:
                    96:08:ad:7d:63:40:89:90:c0:a1:51:03:8c:ba:ab:
                    76:05:04:90:6d:f4:55:76:28:b5:a9:a3:d9:42:64:
                    0f:7e:30:ef:fd:26:fe:42:1e:ad:86:4e:e8:b1:d6:
                    86:53:eb:9d:93:70:d6:3a:7e:dc:a4:cb:03:bf:13:
                    e6:e8:db:36:f1:9d:96:22:10:d1:61:47:41:30:fd:
                    cc:b8:a6:9f:ca:cb:23:68:ee:55:6b:9e:1f:ae:e4:
                    23:b5:9b:cd:ef:f4:52:39:2c:2e:c5:53:21:65:be:
                    37:99:24:3c:a4:0d:f1:0b:15:76:99:3d:44:66:e1:
                    5e:5e:8a:63:9f:c1:9e:59:fd:da:87:85:4b:11:fb:
                    dd:37:9c:c7:85:94:ca:67:eb:8b:d6:f7:4f:e7:5a:
                    69:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F9:AA:45:48:FC:56:DE:80:0F:12:B5:8E:FA:6C:20:6E:A6:3B:05:85
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/F9AA4548FC56DE800F12B58EFA6C206EA63B0585.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.4.0/22
                IPv6:
                  2804:5590::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267942

    Signature Algorithm: sha256WithRSAEncryption
         18:5a:bb:af:25:90:2a:bd:61:9b:96:7a:bc:b4:5c:89:43:39:
         20:3a:a5:4e:d9:af:f1:0d:16:fc:fd:b2:c4:8f:5a:aa:f3:48:
         c4:81:2c:3e:b4:d1:0c:ee:c6:49:8e:89:b6:17:d3:d8:59:59:
         01:03:02:40:ff:af:76:a7:28:f5:2c:43:c7:94:7a:ff:5b:9d:
         19:6c:ac:ff:2a:a7:c5:86:17:e7:cc:d2:fc:f9:f7:8c:b7:2a:
         5b:87:1c:16:09:14:9a:f3:14:bf:d4:99:9a:a7:eb:77:a4:30:
         9b:00:fb:a4:86:dd:5f:b5:a2:09:aa:91:60:17:52:6c:95:34:
         93:a9:f0:d6:09:df:de:c7:17:31:5e:15:fe:22:10:8b:4a:57:
         63:69:9c:09:36:51:be:40:5b:c6:71:0e:12:af:5d:3d:69:f6:
         cc:6e:73:56:cb:ec:64:54:31:9a:62:2c:f4:12:00:3e:0f:94:
         7c:29:59:e7:d5:cf:ae:19:b1:3c:01:d8:8b:5b:3a:22:93:5a:
         8c:07:af:4f:64:31:64:0a:a9:82:da:e0:3b:ef:f4:ea:50:03:
         8b:c1:73:f2:5c:cc:23:fe:61:75:40:9a:c0:e7:59:87:05:4f:
         63:17:a5:17:77:ff:27:51:84:2c:a7:4c:17:26:ba:62:22:b2:
         7d:6a:8e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:33:56 2025 by rpki-client