Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FC8054C13E33D34A2ACD3417AEC6EF030CF52C69.cer
File:                     FC8054C13E33D34A2ACD3417AEC6EF030CF52C69.cer (raw, json)
Hash identifier:          m2n2pKLFTz8a4nKgiS6rQMVLoQ1gdP5FZqrORZtjpgs=
Subject key identifier:   FC:80:54:C1:3E:33:D3:4A:2A:CD:34:17:AE:C6:EF:03:0C:F5:2C:69
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       25606BDC10D8D209008E2A5122E5E3174B1E8CC4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/FC8054C13E33D34A2ACD3417AEC6EF030CF52C69.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 13:55:25 +0000
Certificate not after:    Wed 04 Mar 2026 14:00:25 +0000
Subordinate resources:    AS: 271137
                          IP: 201.54.188.0/22
                          IP: 2804:76d4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:60:6b:dc:10:d8:d2:09:00:8e:2a:51:22:e5:e3:17:4b:1e:8c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 13:55:25 2025 GMT
            Not After : Mar  4 14:00:25 2026 GMT
        Subject: CN=FC8054C13E33D34A2ACD3417AEC6EF030CF52C69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:79:66:5a:7b:8f:c6:82:45:db:33:7c:d9:3f:
                    47:a9:67:72:02:bf:4e:b9:31:75:e2:27:1d:d7:f8:
                    a1:5f:75:e0:05:b0:dd:d4:08:15:1f:ad:65:cb:d4:
                    f5:82:91:c8:7f:72:4e:b1:f7:8b:72:3a:01:ac:86:
                    cc:87:9c:c1:30:00:fe:9d:8a:c6:a9:58:e3:a5:d1:
                    9d:01:52:fc:c4:c1:1f:e7:32:e7:d9:3e:21:29:16:
                    42:6c:ed:3f:95:46:d8:c6:60:94:61:73:78:a3:f8:
                    1a:d6:81:b3:84:af:dc:84:04:dd:fa:79:63:b8:c4:
                    eb:8c:24:5c:8c:c1:ad:65:cb:60:5d:99:de:83:e4:
                    6e:e6:c7:f6:6b:d7:db:2a:fa:47:e1:0f:5b:63:08:
                    2a:ce:c3:75:c2:7d:5f:01:cd:5c:52:11:39:9c:73:
                    9b:6c:61:62:df:e0:3b:58:6b:5b:88:4c:8e:56:89:
                    09:c9:ce:7b:a8:aa:25:01:9b:8c:cf:81:f5:ac:62:
                    3a:f9:65:2d:db:e2:9b:f8:ad:48:47:e2:d9:fa:09:
                    e2:4f:c8:28:8b:07:fe:8e:27:8e:47:82:7c:c1:39:
                    14:e5:c1:41:ab:e9:3b:1f:5c:e8:7a:5a:26:ef:2c:
                    b3:cf:6a:1f:2c:dc:e1:5f:85:23:13:82:63:89:29:
                    6c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FC:80:54:C1:3E:33:D3:4A:2A:CD:34:17:AE:C6:EF:03:0C:F5:2C:69
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/FC8054C13E33D34A2ACD3417AEC6EF030CF52C69.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.188.0/22
                IPv6:
                  2804:76d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271137

    Signature Algorithm: sha256WithRSAEncryption
         9b:10:3f:5e:b8:b0:3d:06:5e:f6:0d:0f:54:a0:f0:13:b1:ea:
         52:1f:cd:bf:ef:96:de:bf:01:97:87:84:f0:cf:1e:23:52:8e:
         60:bd:23:7b:3c:00:76:12:d6:7d:e3:72:96:3e:00:41:9d:8e:
         12:73:2f:2b:06:29:c6:3e:0b:14:bb:dd:a9:3a:61:c2:24:c2:
         e2:05:7d:35:89:0a:77:5a:20:4e:93:77:56:e8:bf:d5:fe:2b:
         cc:56:47:88:c2:f8:cd:64:74:7b:e8:b4:7e:dc:70:18:dd:19:
         d0:5c:48:f5:c8:b5:47:8b:7a:92:cc:a2:6f:47:78:0f:6f:59:
         04:9b:df:36:28:26:09:45:01:6f:3a:52:58:74:96:bf:d5:12:
         50:81:31:78:aa:da:35:a8:06:13:4c:ae:1d:e7:a9:31:04:18:
         ff:9f:03:37:b9:3d:9e:2a:21:fa:d4:62:c7:4a:7b:fc:f0:11:
         a4:86:d0:1c:35:d8:37:90:61:72:57:88:69:78:49:f5:b9:d4:
         ff:bc:b0:8d:8c:37:7b:83:6b:38:a3:7d:3d:ee:71:e2:cd:84:
         46:52:03:02:66:42:66:24:53:9e:56:36:8e:ed:9e:64:08:f9:
         a7:c1:79:43:40:84:48:c0:fc:9b:fa:0b:5f:fd:51:78:e8:ce:
         90:77:b8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:34:14 2025 by rpki-client