Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28.cer
File:                     FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28.cer (raw, json)
Hash identifier:          eUaBdbHYh+ljnLGwKb20n60/Ls7QvygUP2SChxC7vAE=
Subject key identifier:   FD:F4:72:92:5F:FF:60:FC:8F:7D:3F:64:15:7C:DC:51:AC:3D:EF:28
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1FE7C9351990B1E47F3554AB5568FBDB3376081C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Jan 2025 12:54:24 +0000
Certificate not after:    Thu 22 Jan 2026 12:59:24 +0000
Subordinate resources:    AS: 270306
                          IP: 190.112.164.0/22
                          IP: 2804:6a04::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e7:c9:35:19:90:b1:e4:7f:35:54:ab:55:68:fb:db:33:76:08:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 23 12:54:24 2025 GMT
            Not After : Jan 22 12:59:24 2026 GMT
        Subject: CN=FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:20:4f:56:17:77:0b:40:08:7f:77:5c:17:30:
                    2b:d1:d7:a3:4f:ed:b6:ea:7f:03:86:70:f8:3d:c3:
                    3c:7d:92:3d:2b:f8:5a:e5:85:da:17:28:3c:42:93:
                    e6:34:0f:25:c3:c2:05:76:ad:4f:4e:4b:90:87:2f:
                    5b:2f:28:f9:e8:cc:a2:39:47:b4:eb:20:80:1c:d8:
                    e4:5e:2a:15:a9:d9:df:a8:4c:6a:7a:d0:d2:74:2f:
                    0b:5c:a5:d4:64:a2:35:30:00:d3:a7:ec:23:36:c4:
                    5d:6d:af:0b:96:8d:2a:0f:de:b6:ce:6c:72:e9:19:
                    ff:41:0f:76:d3:2f:58:5e:8d:f0:92:3b:30:92:7b:
                    89:29:d3:a9:e9:eb:15:09:a1:70:91:1c:0c:11:f0:
                    00:89:7b:99:82:ca:3a:2a:96:04:d5:34:e6:85:b3:
                    9b:3c:2c:1e:54:d5:ce:6c:a9:1e:d2:8e:01:31:36:
                    71:65:7c:92:91:2b:8e:2d:11:72:42:ad:3d:68:df:
                    0e:1f:3c:7c:b7:45:0b:12:c0:e0:0e:a0:1b:15:29:
                    d3:4b:cd:e6:ac:c4:2d:35:39:03:a9:2c:d7:1a:9c:
                    09:45:38:ce:75:32:b3:ef:70:88:b7:7a:bd:a7:7c:
                    e7:70:a7:88:63:ab:db:9d:be:56:41:3b:5d:e1:24:
                    51:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FD:F4:72:92:5F:FF:60:FC:8F:7D:3F:64:15:7C:DC:51:AC:3D:EF:28
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.164.0/22
                IPv6:
                  2804:6a04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270306

    Signature Algorithm: sha256WithRSAEncryption
         97:56:57:8f:78:51:24:84:a4:78:c5:59:78:f8:0b:cd:ea:7d:
         74:18:50:5a:ec:6d:92:b2:34:59:5a:c1:a8:df:46:6e:37:bb:
         f3:32:f2:92:3d:14:f4:36:48:23:54:24:91:2b:da:46:38:8e:
         1c:15:45:56:af:80:32:14:c3:54:f8:ee:fa:54:dc:3a:00:cc:
         9e:b2:86:ef:a2:27:dd:73:42:db:f8:e0:7f:da:9b:6d:8c:08:
         39:ef:ee:8f:a5:a9:cb:5b:55:5c:8a:0c:85:0e:24:84:43:5f:
         03:62:1c:0d:b3:92:7f:b4:3f:2c:82:28:04:3e:fc:f0:de:fe:
         10:1b:69:8a:76:61:19:c7:32:06:d3:03:81:da:83:7d:b3:f9:
         7b:17:4b:19:4b:f7:3c:9e:5f:35:d8:5a:00:69:9c:89:e2:95:
         d7:19:6e:c2:11:38:7f:b2:19:ac:de:52:f0:1b:af:db:b0:41:
         53:78:a7:8f:eb:1f:d0:19:29:23:76:dd:c3:bd:5a:af:83:fb:
         65:6b:2c:65:4b:22:49:f6:e6:c9:f7:bb:de:c0:40:f6:98:9d:
         f0:7b:3f:56:a8:5c:b3:1f:e0:51:13:85:ad:d3:2c:84:53:23:
         c1:09:ab:0a:56:7c:39:8c:0a:0f:dd:e4:49:fb:dd:cd:81:bf:
         d0:0f:3a:ea
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUH+fJNRmQseR/NVSrVWj72zN2CBwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMjMxMjU0MjRaFw0yNjAxMjIxMjU5MjRaMDMxMTAvBgNV
BAMTKEZERjQ3MjkyNUZGRjYwRkM4RjdEM0Y2NDE1N0NEQzUxQUMzREVGMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZIE9WF3cLQAh/d1wXMCvR16NP
7bbqfwOGcPg9wzx9kj0r+FrlhdoXKDxCk+Y0DyXDwgV2rU9OS5CHL1svKPnozKI5
R7TrIIAc2OReKhWp2d+oTGp60NJ0LwtcpdRkojUwANOn7CM2xF1trwuWjSoP3rbO
bHLpGf9BD3bTL1hejfCSOzCSe4kp06np6xUJoXCRHAwR8ACJe5mCyjoqlgTVNOaF
s5s8LB5U1c5sqR7SjgExNnFlfJKRK44tEXJCrT1o3w4fPHy3RQsSwOAOoBsVKdNL
zeasxC01OQOpLNcanAlFOM51MrPvcIi3er2nfOdwp4hjq9udvlZBO13hJFGLAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT99HKSX/9g/I99
P2QVfNxRrD3vKDAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vN0VK
VFNhRUJLYmVKWlpTeDFNcTdYU0NKSzE1THJZZGdZTUFGUE1nbkxCRzkvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzdF
SlRTYUVCS2JlSlpaU3gxTXE3WFNDSksxNUxyWWRnWU1BRlBNZ25MQkc5LzAvRkRG
NDcyOTI1RkZGNjBGQzhGN0QzRjY0MTU3Q0RDNTFBQzNERUYyOC5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCvnCkMA0EAgACMAcDBQAoBGoEMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQf4jANBgkqhkiG9w0BAQsFAAOCAQEAl1ZXj3hRJISkeMVZ
ePgLzep9dBhQWuxtkrI0WVrBqN9Gbje78zLykj0U9DZII1QkkSvaRjiOHBVFVq+A
MhTDVPju+lTcOgDMnrKG76In3XNC2/jgf9qbbYwIOe/uj6Wpy1tVXIoMhQ4khENf
A2IcDbOSf7Q/LIIoBD788N7+EBtpinZhGccyBtMDgdqDfbP5exdLGUv3PJ5fNdha
AGmcieKV1xluwhE4f7IZrN5S8Buv27BBU3inj+sf0BkpI3bdw71ar4P7ZWssZUsi
Sfbmyfe73sBA9pid8Hs/Vqhcsx/gUROFrdMshFMjwQmrClZ8OYwKD93kSfvdzYG/
0A866g==
-----END CERTIFICATE-----