Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/FF73A17CC4D25E9C9076F559235209BADA365B27.cer
File:                     FF73A17CC4D25E9C9076F559235209BADA365B27.cer (raw, json)
Hash identifier:          jAPYkyOukhcWUkpMoIHds+orebzbIgigCSwgfuoze5Y=
Subject key identifier:   FF:73:A1:7C:C4:D2:5E:9C:90:76:F5:59:23:52:09:BA:DA:36:5B:27
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0898D54D0EA1AE7AE2EB16DF5F8D6413B30D0D38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/FF73A17CC4D25E9C9076F559235209BADA365B27.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 14:41:01 +0000
Certificate not after:    Fri 06 Mar 2026 14:46:01 +0000
Subordinate resources:    AS: 264308
                          IP: 138.122.20.0/22
                          IP: 2804:25e0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:98:d5:4d:0e:a1:ae:7a:e2:eb:16:df:5f:8d:64:13:b3:0d:0d:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 14:41:01 2025 GMT
            Not After : Mar  6 14:46:01 2026 GMT
        Subject: CN=FF73A17CC4D25E9C9076F559235209BADA365B27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:91:38:38:84:bc:f6:e9:5e:fb:dc:b3:89:51:
                    25:ed:bb:2c:cf:ab:00:1a:1e:45:5b:8e:68:6f:82:
                    2a:9b:29:c8:e4:5e:67:66:bf:65:a5:3e:1c:1d:87:
                    5b:40:9e:92:f8:c6:38:33:53:a8:e5:13:f3:3c:68:
                    85:2a:a6:e3:f8:99:26:cc:62:fa:6a:3f:20:36:85:
                    ea:a0:9d:79:8e:22:65:a1:f2:43:fe:56:84:38:dc:
                    eb:2a:81:56:09:07:b7:0c:6e:5f:fe:30:e6:b4:56:
                    8f:ca:b1:de:7e:c1:e2:a9:a0:4a:ab:45:7e:82:38:
                    3f:f8:bb:e8:c5:25:e7:14:4f:01:85:2e:95:f7:5b:
                    06:42:ee:93:29:a3:a5:1f:08:a4:5f:77:1c:9c:95:
                    5f:cf:1a:2c:b3:79:47:23:44:f2:19:8f:92:eb:74:
                    32:d2:dc:82:1b:c5:14:2b:35:57:bc:53:c8:ea:94:
                    76:e8:19:67:1e:0d:5f:95:31:ef:cb:0f:05:e1:b9:
                    1b:16:77:ce:bc:89:81:b9:bb:f2:d1:40:cd:b2:71:
                    bc:bd:08:c3:6d:00:9e:c6:74:a1:f7:df:4e:70:2e:
                    ee:1b:44:d0:9c:9a:bc:58:f0:b3:cf:91:2d:7c:38:
                    a7:03:b1:52:05:9b:04:44:a8:d1:f4:c6:98:c4:e6:
                    ca:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                FF:73:A1:7C:C4:D2:5E:9C:90:76:F5:59:23:52:09:BA:DA:36:5B:27
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/FF73A17CC4D25E9C9076F559235209BADA365B27.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.20.0/22
                IPv6:
                  2804:25e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264308

    Signature Algorithm: sha256WithRSAEncryption
         0f:58:8e:dd:91:35:86:61:62:f2:ce:16:9a:40:27:44:da:6c:
         fc:eb:59:35:dc:37:49:c3:91:4e:ab:46:61:ec:68:e0:66:6c:
         b7:7f:01:53:b9:c8:d8:45:67:06:06:fe:b5:7a:2f:c3:06:43:
         42:4d:17:d4:9a:88:42:f0:26:45:be:d8:eb:7d:5c:72:1e:cf:
         18:6a:a9:8c:78:39:bc:df:9b:17:bb:07:db:a4:20:14:6a:56:
         6a:96:6b:cf:4a:3a:b5:26:d3:5f:84:48:94:8e:2d:17:fc:00:
         e4:66:1f:d8:c4:94:75:90:27:d4:ad:c2:b8:9f:d2:fd:bc:dc:
         55:56:f1:ab:e2:06:3d:4d:9a:4c:27:d3:cf:47:1d:35:7d:a8:
         11:90:99:89:f2:4e:6b:ce:fa:aa:ed:6c:0e:a1:94:2d:c7:91:
         e1:52:30:c1:69:97:d5:65:7c:2c:5a:d3:0a:78:62:2c:92:1f:
         84:5b:32:e6:ff:51:43:f8:1b:b8:5d:39:ab:91:72:3d:10:e4:
         69:3d:de:c4:ad:72:8f:ae:38:e9:72:e4:b9:4c:8a:c1:2d:e8:
         f6:0e:56:03:ae:c2:17:e7:3e:20:cc:1d:1c:35:ae:9c:bd:44:
         b4:fe:1f:67:1e:66:29:5a:1b:55:10:3c:36:8b:b1:80:8f:00:
         d7:91:42:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:15 2025 by rpki-client