Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer
File:                     0330D9252D48F6AC52A800FF3C2E654C5837DA05.cer (raw, json)
Hash identifier:          2qV1lRKc4qTHaCm8SCPNoIgDkhJn22aYs6hPXhO52BY=
Subject key identifier:   03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       206DD2077D89D58994FC2ADBA0FBF86EF7F577FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Dec 2024 19:14:50 +0000
Certificate not after:    Wed 03 Dec 2025 19:19:50 +0000
Subordinate resources:    AS: 271110
                          IP: 160.20.176.0/22
                          IP: 2804:7668::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6d:d2:07:7d:89:d5:89:94:fc:2a:db:a0:fb:f8:6e:f7:f5:77:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  4 19:14:50 2024 GMT
            Not After : Dec  3 19:19:50 2025 GMT
        Subject: CN=0330D9252D48F6AC52A800FF3C2E654C5837DA05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c9:27:f7:23:9e:41:4a:04:3d:24:23:15:82:
                    f3:a5:bf:14:15:0f:35:92:9e:2e:de:36:8b:dd:91:
                    b9:4b:86:fa:a4:0c:f5:42:c9:1b:21:d6:a7:fa:43:
                    08:a7:35:6b:a8:e8:9f:72:b7:62:6e:92:a0:d9:20:
                    db:41:6c:f2:5c:70:70:c9:74:69:06:8e:04:27:f4:
                    94:19:42:ab:c8:06:ba:66:8d:e8:ed:8d:6f:7f:59:
                    06:fe:7e:fb:da:6a:89:08:77:45:e7:6e:26:01:28:
                    2d:df:73:8c:1f:95:e7:b0:4b:57:a8:4d:81:6d:2d:
                    c9:71:67:d4:8f:b0:f3:66:80:39:8a:06:2d:c8:fb:
                    c2:37:76:c5:16:7e:b1:a8:ec:62:cf:0e:75:1b:d1:
                    d7:6d:a1:00:73:97:2d:9a:1b:1d:69:95:c6:e5:8c:
                    17:52:a7:d2:f7:e8:38:ca:91:fc:d6:c4:ac:c2:be:
                    d8:c0:d1:3f:08:da:43:7a:b6:00:36:9b:0a:67:a7:
                    80:1e:e2:04:ea:21:1d:dd:55:1d:cf:af:50:da:ca:
                    f5:4e:7f:64:90:31:76:40:c6:5f:31:41:40:32:a7:
                    27:86:6d:eb:55:c6:b1:65:2a:cc:5f:79:0b:f7:35:
                    2f:86:1e:0c:68:75:3b:96:5a:5c:91:e4:24:ab:3b:
                    9d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:30:D9:25:2D:48:F6:AC:52:A8:00:FF:3C:2E:65:4C:58:37:DA:05
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/0330D9252D48F6AC52A800FF3C2E654C5837DA05.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.176.0/22
                IPv6:
                  2804:7668::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271110

    Signature Algorithm: sha256WithRSAEncryption
         c5:c6:ee:73:5f:bf:41:9b:1a:40:87:f2:e1:ec:af:18:d1:4e:
         1e:ea:92:bb:16:7d:f9:54:7d:cc:ad:99:87:bd:9b:c7:e6:10:
         c1:3c:3b:97:ea:d7:a8:5b:70:d7:4c:65:f5:87:78:93:aa:24:
         4d:a5:0b:9b:c8:f2:78:ff:25:70:95:ed:35:7e:77:52:0b:92:
         a1:3f:55:08:a7:f4:21:ff:1a:e6:dd:66:8d:fe:24:8e:7f:77:
         b4:02:cd:48:65:ea:8f:db:d8:c6:1f:fe:2b:d2:d8:47:ed:ee:
         2a:f3:3e:8d:27:c0:70:da:d8:57:2f:94:5b:80:f6:5c:7b:eb:
         6a:77:a8:b0:b3:73:9e:7e:c1:f3:56:3f:07:44:a4:bb:10:1c:
         e9:87:56:9b:1d:0e:81:db:27:f7:10:37:ec:57:fa:96:ce:22:
         9e:2e:b1:12:65:c3:af:2c:bb:ab:fd:63:dd:8a:0d:6f:02:c0:
         65:f9:b3:1b:31:63:2c:79:72:ab:97:40:27:a5:7d:20:f5:9f:
         df:c5:4b:42:a9:0f:0f:f8:44:ec:c4:fc:9f:ba:fc:09:d3:d3:
         c4:3b:c5:e6:e2:ff:38:d4:e2:fa:12:b1:a3:bc:42:c2:ca:65:
         02:91:f5:d7:9c:4b:91:eb:1e:c6:99:77:ba:03:4d:ef:8f:1f:
         62:eb:14:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:52:05 2025 by rpki-client