Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FDAA656FC47E6C1B8E756A69B4BA301980AF5D8F.cer
File:                     FDAA656FC47E6C1B8E756A69B4BA301980AF5D8F.cer (raw, json)
Hash identifier:          iCNXZZfe0ahMiUeHiAZ4JN0d0GGnKRI0185n5eAPMXs=
Subject key identifier:   FD:AA:65:6F:C4:7E:6C:1B:8E:75:6A:69:B4:BA:30:19:80:AF:5D:8F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6253261B3F9EED318576E062F558A7DC6FC8E267
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/FDAA656FC47E6C1B8E756A69B4BA301980AF5D8F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 23 Oct 2024 15:30:14 +0000
Certificate not after:    Wed 22 Oct 2025 15:35:14 +0000
Subordinate resources:    AS: 268398
                          IP: 45.160.24.0/22
                          IP: 2804:5098::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:53:26:1b:3f:9e:ed:31:85:76:e0:62:f5:58:a7:dc:6f:c8:e2:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Oct 23 15:30:14 2024 GMT
            Not After : Oct 22 15:35:14 2025 GMT
        Subject: CN=FDAA656FC47E6C1B8E756A69B4BA301980AF5D8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:12:f8:2d:06:60:02:a4:fb:2d:67:04:b6:89:
                    51:46:b6:34:e3:3c:3d:77:c6:d6:45:3f:a3:0a:d1:
                    28:eb:6e:a5:31:8c:24:bc:b0:f4:03:9a:95:3a:e4:
                    c9:65:05:4b:87:2a:60:a0:5d:d4:c8:54:5b:b4:b8:
                    9a:10:76:b4:e3:6e:aa:97:6f:40:80:9b:d5:5e:a6:
                    4f:ef:06:b5:2d:f9:a9:6e:ad:ca:d0:c8:85:2c:46:
                    6e:b0:a6:66:b3:cf:be:3c:19:1f:48:1a:3f:0c:ec:
                    8d:ac:0b:1d:38:77:3e:16:bc:d1:8c:6d:a8:1f:d1:
                    24:10:e2:31:e5:55:80:17:8a:68:73:50:c1:e1:94:
                    8b:57:ff:56:c2:64:b6:34:4b:a7:88:97:02:d2:c6:
                    27:e3:6b:13:fd:78:ef:23:d6:45:92:8d:3d:98:da:
                    ef:12:60:15:c9:47:f1:cb:e8:22:43:36:d5:b5:1e:
                    8c:14:97:36:6f:86:a4:42:f9:ca:3e:5a:e0:7b:65:
                    57:3a:95:9e:33:22:ca:5f:d4:b0:4e:e7:e8:65:80:
                    32:07:63:ce:fd:8b:48:cc:17:81:91:b2:6d:34:36:
                    49:db:b2:cb:5b:1e:83:3f:b6:43:9f:f5:d2:db:a3:
                    56:8e:0a:4b:e2:2d:a6:1d:91:bd:11:68:1f:12:31:
                    8c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:AA:65:6F:C4:7E:6C:1B:8E:75:6A:69:B4:BA:30:19:80:AF:5D:8F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/0/FDAA656FC47E6C1B8E756A69B4BA301980AF5D8F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.24.0/22
                IPv6:
                  2804:5098::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268398

    Signature Algorithm: sha256WithRSAEncryption
         d3:ea:5d:2d:58:44:48:c0:f5:61:7d:31:c3:98:78:8d:75:57:
         be:29:1e:03:3f:d2:42:41:ba:7a:b6:58:8e:a2:4d:67:8a:9a:
         bc:44:37:c2:50:69:7a:17:ff:16:9d:2e:7f:cd:48:3a:0f:5d:
         8d:d7:98:8f:0d:68:8e:cd:ec:51:6f:17:9a:77:6e:94:3c:21:
         d9:17:77:34:f0:78:02:14:6d:53:61:ec:f3:5f:e5:91:6f:71:
         19:e8:e1:a4:8c:9e:42:55:10:dc:e6:7d:c9:08:dc:c7:78:54:
         09:8d:67:20:53:63:f5:55:77:cd:ab:ee:61:a5:3f:23:73:f3:
         7e:af:9d:d5:cd:3d:3b:10:f5:5f:d9:e6:b0:9e:a1:7c:58:cb:
         bf:92:d8:33:b4:e2:f6:b6:8c:e9:bf:24:4d:d0:9d:5e:67:d6:
         ec:60:30:3d:cf:bd:63:6a:36:11:8d:fd:3c:7e:49:2e:98:51:
         b8:b9:db:cf:57:17:11:22:96:2d:11:4c:35:3e:d2:92:e9:7c:
         83:37:dc:5d:2e:4e:2b:b8:fd:43:4f:47:33:42:06:c7:ec:b1:
         0d:e5:86:cb:86:32:58:d1:60:c7:20:f5:eb:f8:d3:b7:25:8b:
         6c:22:76:da:81:f0:2a:b2:a8:16:9b:69:e7:70:9e:1f:ba:56:
         56:12:ab:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:44:42 2025 by rpki-client