Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer
File:                     FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.cer (raw, json)
Hash identifier:          zGjZL35jFYqXOIFlfTU9fJiLL08xIISwm/0h3berHac=
Subject key identifier:   FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       09372D74CA70D9371AA49704688D7DE4BDAE961B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 16:49:48 +0000
Certificate not after:    Thu 05 Mar 2026 16:54:48 +0000
Subordinate resources:    AS: 270277
                          IP: 200.124.164.0/22
                          IP: 2804:698c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:37:2d:74:ca:70:d9:37:1a:a4:97:04:68:8d:7d:e4:bd:ae:96:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 16:49:48 2025 GMT
            Not After : Mar  5 16:54:48 2026 GMT
        Subject: CN=FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c6:11:70:02:cf:52:ae:4f:ca:90:24:e9:57:
                    1b:98:95:bf:fa:69:da:e9:06:6e:8d:45:b5:18:f7:
                    e5:ab:17:c4:d8:8c:92:a4:5a:7c:5f:e1:07:bb:79:
                    c3:57:51:b5:ac:e9:06:1b:03:1d:34:0f:bc:27:03:
                    6d:02:7a:76:a9:46:cb:cb:1e:fd:3a:8d:90:51:3e:
                    3d:70:cf:08:73:04:04:11:63:36:98:1e:81:89:a4:
                    f8:38:df:23:20:c3:c2:0e:78:6e:13:76:b7:74:24:
                    c7:37:ec:35:97:c8:8e:96:55:17:4f:ff:20:0d:5c:
                    7b:15:68:fc:75:17:2c:71:e7:77:21:0c:83:c3:84:
                    0b:4b:6a:8c:be:7c:62:a2:39:fc:b3:76:e5:b5:b7:
                    31:9d:a8:ce:30:df:48:0d:32:03:28:42:f6:75:2d:
                    54:59:c0:20:66:bd:6a:b8:a7:1f:30:9b:b4:47:6c:
                    b5:c6:ef:91:0b:f6:2b:18:67:98:a3:28:d0:7a:06:
                    06:72:2f:79:05:4e:65:59:f4:5f:28:95:7b:12:09:
                    56:7b:44:8c:c8:0f:5c:e3:25:42:b8:47:0c:28:e7:
                    5e:37:c7:4f:7f:42:46:51:11:83:f8:5a:ed:62:9d:
                    51:81:95:56:5c:0b:1e:83:33:8d:60:a4:1d:65:1e:
                    98:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:3C:84:64:3C:F0:CF:DE:C3:F3:2D:E5:AE:63:E8:8B:CF:A9:F7:C9
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5Ak36WiYMf88tuy7WtVJBExk6Uo2mbYFGgYaBYLsUEkz/1/FD3C84643CF0CFDEC3F32DE5AE63E88BCFA9F7C9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.164.0/22
                IPv6:
                  2804:698c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270277

    Signature Algorithm: sha256WithRSAEncryption
         6f:6a:8a:ac:49:ec:91:ca:49:bb:86:c8:c9:4d:fe:7c:58:39:
         e6:f8:5f:55:76:33:18:7c:76:90:0f:10:4c:fb:a6:f4:29:a0:
         83:f2:1f:c6:03:82:9b:df:7b:67:02:02:53:41:35:46:c0:1f:
         62:55:da:3f:31:0c:bb:7f:2a:a1:d6:58:dd:a4:1b:f4:51:5e:
         d2:d8:6c:37:a0:0a:c7:e1:b9:9b:2b:69:e9:ab:40:3b:24:f0:
         89:fb:19:a5:98:77:7c:72:7c:9a:2b:bd:61:3e:be:54:f0:6d:
         28:a2:18:68:fd:4d:4a:83:14:9d:0b:e5:26:6b:aa:9f:31:16:
         15:e6:cc:07:f1:84:0a:44:4a:73:a8:cd:26:3a:a0:dc:a8:e7:
         87:c2:5e:9e:7b:c4:aa:11:63:dd:56:40:2c:bf:a7:2b:71:56:
         7b:e0:58:2c:87:46:66:23:77:97:85:87:f9:cf:8a:45:24:02:
         50:f8:ab:c7:5f:53:65:b5:df:99:9b:03:37:64:9c:22:7c:ea:
         61:56:43:78:af:6b:59:b0:c2:df:6e:55:f0:97:52:cd:0a:d5:
         c3:e3:39:d2:bc:c0:ac:19:da:ec:43:91:fe:92:29:8a:53:df:
         0c:5c:81:24:9f:68:29:a1:57:3b:eb:19:2e:94:9b:b4:1b:1b:
         24:fa:60:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:26 2025 by rpki-client