Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer
File:                     FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.cer (raw, json)
Hash identifier:          F4tP7lt0PeD/PmmGFs7SIniLZOWz33rdWOTl0CrKL08=
Subject key identifier:   FB:27:EA:38:8A:79:41:1B:BB:22:F3:2F:5F:CD:5A:EA:08:44:BF:AF
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       66A6CFC02814375DA573B3BAAA8912281AA270C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 15:36:59 +0000
Certificate not after:    Fri 06 Mar 2026 15:41:59 +0000
Subordinate resources:    AS: 267614
                          IP: 45.71.108.0/22
                          IP: 2804:43fc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:a6:cf:c0:28:14:37:5d:a5:73:b3:ba:aa:89:12:28:1a:a2:70:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 15:36:59 2025 GMT
            Not After : Mar  6 15:41:59 2026 GMT
        Subject: CN=FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:97:11:cd:da:69:02:4d:ef:d0:29:6b:dc:69:
                    c6:04:da:43:9d:94:ea:b5:67:27:ac:6c:54:85:95:
                    4c:00:0b:63:ab:ac:b1:bb:12:f4:4a:06:1c:54:1c:
                    05:58:d8:d3:6b:4c:49:e0:d0:6e:73:ac:a3:10:0b:
                    4d:4c:98:14:40:62:b5:38:33:30:f4:81:77:55:fb:
                    28:23:40:ca:7d:cb:25:77:76:2d:9c:79:6c:7a:81:
                    ba:c4:a5:b5:6f:54:da:9b:77:71:8f:27:2f:71:cf:
                    a1:22:80:25:ae:0b:15:1e:ca:28:e9:41:23:f0:b7:
                    4d:8a:7f:be:d0:4c:35:57:f5:e8:12:1b:c4:1f:87:
                    a8:a2:25:52:58:98:ad:2c:1b:73:dc:6a:1a:a5:96:
                    3f:9e:31:01:e2:2e:b0:bc:89:a6:7b:0f:bd:86:f7:
                    c7:e7:c1:da:90:2d:11:a5:ba:56:9a:4a:3b:18:b7:
                    14:ea:84:e1:b7:fc:fc:84:26:42:d0:af:f4:d6:36:
                    db:c8:ae:59:5a:58:7c:12:36:7a:a9:cf:fc:21:17:
                    1b:b0:0e:82:99:ed:1d:ef:e6:9a:71:7b:32:fa:e0:
                    40:9e:b6:2a:16:5d:73:9c:3c:6d:94:db:6c:0c:a2:
                    78:2c:e4:a7:90:83:da:03:00:79:42:82:65:83:f1:
                    99:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FB:27:EA:38:8A:79:41:1B:BB:22:F3:2F:5F:CD:5A:EA:08:44:BF:AF
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CSM72zchW4tanioxbpy78PRdJgnsiNNJckBFtGa11bHB/1/FB27EA388A79411BBB22F32F5FCD5AEA0844BFAF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.108.0/22
                IPv6:
                  2804:43fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267614

    Signature Algorithm: sha256WithRSAEncryption
         96:45:af:6e:7b:35:8b:ed:f3:0b:d9:3a:a7:f9:35:60:00:61:
         d2:a2:37:9d:0c:09:dc:41:3f:c1:0d:3b:dd:d1:1c:35:ff:c0:
         e1:9a:e9:a9:58:3a:7a:19:a5:30:e2:d7:fc:c2:92:c0:60:8f:
         e8:96:7b:b7:0c:cd:7a:1e:fd:9a:41:88:9c:e3:f2:6d:68:e1:
         54:4e:49:d8:07:b1:54:7f:c4:ab:4c:85:a8:2c:a8:10:ae:27:
         6c:a8:9f:2c:33:62:aa:12:8a:22:cd:f5:64:d9:64:8e:51:90:
         2e:81:ed:c3:75:3f:e5:30:e9:4f:e3:89:16:8b:eb:6b:ed:dc:
         4a:d2:fb:ac:e2:0c:2d:64:b7:e4:10:76:c6:44:44:37:b3:1c:
         58:36:ca:6c:a6:34:5c:02:84:20:d7:d5:e5:15:d6:12:6e:6e:
         3f:db:c0:7d:bb:46:01:15:14:52:68:ea:d7:5e:f7:1b:07:66:
         38:63:09:56:6e:52:b0:f9:77:7a:2f:af:f1:e0:00:b9:b6:22:
         fc:da:62:ac:f7:1a:32:e1:d6:33:36:54:36:47:8b:35:61:da:
         9d:55:3d:91:af:e9:09:d5:84:10:6d:44:4c:7a:46:c0:f5:5e:
         f6:f1:0a:ae:a3:a2:9e:80:0c:5b:e9:84:4c:69:0b:b8:e5:59:
         5e:5b:63:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:20 2025 by rpki-client