Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/545E87EB1E4C261C305886520F752BA4183E3A9C.cer
File:                     545E87EB1E4C261C305886520F752BA4183E3A9C.cer (raw, json)
Hash identifier:          oopGvSWIohRLQhX2BDDKZcGDssC/HV01AjJrVUkWjTQ=
Subject key identifier:   54:5E:87:EB:1E:4C:26:1C:30:58:86:52:0F:75:2B:A4:18:3E:3A:9C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3AD0A38448AB42C8705064EACA11DAFC2BE9ECA3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8TgRJg1VZmU935LYCdJUCSdetnAi77GUjHB74PjV4xGw/1/545E87EB1E4C261C305886520F752BA4183E3A9C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8TgRJg1VZmU935LYCdJUCSdetnAi77GUjHB74PjV4xGw/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:26:34 +0000
Certificate not after:    Wed 02 Apr 2025 18:31:34 +0000
Subordinate resources:    AS: 268747
                          IP: 45.171.40.0/22
                          IP: 2804:5a14::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d0:a3:84:48:ab:42:c8:70:50:64:ea:ca:11:da:fc:2b:e9:ec:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:26:34 2024 GMT
            Not After : Apr  2 18:31:34 2025 GMT
        Subject: CN=545E87EB1E4C261C305886520F752BA4183E3A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7a:d2:fd:53:ef:fc:f2:8c:54:da:42:c4:f9:
                    4e:7c:fa:63:ca:1d:1a:7c:e3:87:d6:4d:ed:07:22:
                    7f:f2:1f:d1:0a:8a:3e:0a:14:d4:d8:54:ec:78:f6:
                    26:16:03:b8:2e:64:c6:4e:e5:66:64:60:53:2a:50:
                    66:22:97:ad:d2:81:c0:3d:a2:4e:4c:02:a7:b8:05:
                    16:49:e6:79:5d:f0:e4:bc:ce:0d:43:ea:66:4a:ad:
                    06:23:98:a8:27:14:f3:10:95:bb:17:37:52:b5:36:
                    2f:d4:46:97:64:f8:6b:3f:d1:f9:77:7f:8b:b8:38:
                    78:25:05:e7:da:8a:a1:6d:41:f4:e9:35:aa:13:e5:
                    e4:f4:ec:43:b4:e9:66:91:0f:5f:e9:57:0b:8a:1f:
                    86:cf:ad:76:96:f1:9d:69:71:58:a1:12:00:b3:58:
                    ee:de:03:b6:8f:b1:be:c9:37:85:ed:31:64:43:b0:
                    56:e2:b5:58:87:1f:1e:f1:84:c5:57:bf:86:2e:bc:
                    52:c7:39:31:a9:43:c6:59:96:e0:4c:b1:d2:2d:16:
                    6a:68:98:b3:fd:6e:24:e0:0e:95:08:f2:0f:fd:f4:
                    0b:bd:8c:06:5a:03:d3:af:fd:ec:6c:ab:41:ee:e6:
                    a3:c4:67:7b:93:b1:cd:ef:fa:3a:c2:8a:6e:3c:e8:
                    63:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:5E:87:EB:1E:4C:26:1C:30:58:86:52:0F:75:2B:A4:18:3E:3A:9C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8TgRJg1VZmU935LYCdJUCSdetnAi77GUjHB74PjV4xGw/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8TgRJg1VZmU935LYCdJUCSdetnAi77GUjHB74PjV4xGw/1/545E87EB1E4C261C305886520F752BA4183E3A9C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.40.0/22
                IPv6:
                  2804:5a14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268747

    Signature Algorithm: sha256WithRSAEncryption
         07:c6:6e:34:61:56:f6:7f:cf:f5:0e:da:35:b2:37:03:38:98:
         fb:0e:c7:6e:51:ec:6e:81:09:ca:8b:c8:4a:b4:00:40:b8:62:
         fb:c9:d4:1a:e0:cd:e1:92:67:2a:4a:8c:b1:ac:c0:b4:73:00:
         23:bd:9a:6a:7c:45:d9:4b:2a:82:8e:9b:07:ee:db:f7:fa:d0:
         f0:f2:cc:bc:c5:55:66:08:93:5c:3e:bb:f0:cf:4c:bc:63:c7:
         b0:2e:b7:39:2c:ef:4a:e6:86:d8:29:5f:ed:e3:66:35:30:11:
         d9:58:18:0e:20:64:d9:e6:d2:44:f4:b5:c5:f7:65:12:22:dd:
         71:98:74:41:19:cf:0b:2a:0c:9c:f7:be:db:82:bc:b9:12:93:
         55:ec:f4:cd:f6:f0:2f:6a:e1:27:b8:b7:d1:1c:eb:42:06:13:
         34:a3:2f:04:24:d6:b1:a6:c1:b3:f0:6e:bb:86:f1:f8:81:ba:
         8b:f0:3b:0e:67:93:44:1b:f6:8b:59:b7:a1:29:25:b4:b7:67:
         99:d0:87:1b:44:b8:cb:76:ea:5f:97:3b:73:42:39:08:a4:62:
         7e:68:ce:4e:5d:ed:7e:f3:d7:b8:2c:f0:c7:af:b8:5a:67:b9:
         6d:3d:5c:ee:a7:45:4d:d0:26:f0:23:8f:59:f8:2e:5f:65:d5:
         7a:84:bb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:27:56 2025 by rpki-client