Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
File:                     8BCC3BCD747996DEA6D7F16098CF132148801B30.cer (raw, json)
Hash identifier:          mzpPUB3sDpr04mF8mRojObY9sRhtWRnl2BgxBYPAHww=
Subject key identifier:   8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4A747F25163F12A7CB0FDE758084170B564B8936
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Jan 2025 12:25:39 +0000
Certificate not after:    Mon 12 Jan 2026 12:30:39 +0000
Subordinate resources:    AS: 264036
                          IP: 143.137.120.0/22
                          IP: 2804:29d0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:74:7f:25:16:3f:12:a7:cb:0f:de:75:80:84:17:0b:56:4b:89:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 13 12:25:39 2025 GMT
            Not After : Jan 12 12:30:39 2026 GMT
        Subject: CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8c:7e:07:29:2f:90:e2:1a:bf:2a:8e:1d:55:
                    82:c3:fa:af:c0:31:62:7d:e4:cd:97:e5:8d:f3:d7:
                    4b:d1:8e:4b:bd:ce:9b:5b:57:b5:c5:6b:9d:c4:84:
                    ce:6b:8b:ed:ce:27:d4:c7:cb:e8:b5:43:75:81:f2:
                    a8:a2:06:65:46:6a:cc:d3:73:8d:0c:88:6a:13:ee:
                    e4:63:cb:91:44:91:96:7a:7d:75:74:00:a2:c8:c2:
                    16:da:a9:91:b0:d6:a4:ce:60:89:8b:ea:12:ba:98:
                    7f:ed:97:c5:e6:0b:79:ac:64:95:27:11:73:6a:71:
                    86:4b:28:b1:de:e3:36:1f:9c:50:ba:4e:15:c6:95:
                    8a:42:7e:dc:bc:f7:62:c2:07:3f:70:9c:7f:4d:c8:
                    6a:3f:8e:9b:dd:f7:91:b7:1e:1e:e1:04:f2:65:f1:
                    a8:24:ef:db:5f:6a:fb:1c:59:53:d8:01:e8:d1:67:
                    22:91:aa:ab:13:07:d8:cf:94:44:0f:08:d4:b0:17:
                    84:0b:0d:f1:79:88:2d:91:a6:a4:14:bf:80:a1:07:
                    7a:80:f4:a2:6f:20:93:9e:cd:29:8c:57:8d:2f:92:
                    8d:1d:92:4c:97:3e:3c:45:59:06:c5:f5:6b:a3:03:
                    4d:ad:c7:86:c6:c7:b1:47:a5:aa:c9:58:d9:ee:74:
                    3a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.120.0/22
                IPv6:
                  2804:29d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264036

    Signature Algorithm: sha256WithRSAEncryption
         3a:f0:25:7d:03:36:2f:88:1c:0b:bb:a1:72:87:bd:b3:54:41:
         6c:06:a4:9c:33:2c:a2:59:da:7f:be:80:71:c6:52:ac:55:bf:
         c3:60:90:7f:18:31:34:2c:67:34:bc:1b:5b:6b:ec:22:77:a8:
         30:30:14:02:9a:6f:32:94:6e:cf:57:ca:ff:84:36:73:f3:16:
         40:9b:16:49:a4:cc:b5:61:4a:7b:cb:77:98:cd:4b:28:06:f2:
         0e:04:c0:4a:55:17:6d:bd:54:b5:4a:37:3e:2e:45:df:c5:c0:
         6e:f4:fa:0a:10:f6:bb:86:29:70:6b:79:cb:e8:ef:77:ef:ba:
         c7:22:bc:b6:7a:2c:93:e8:7a:24:e3:c1:38:fc:b2:15:8e:fe:
         bc:e7:52:a4:39:81:4f:b8:20:90:74:28:e3:b6:f7:71:49:59:
         e9:c7:fb:3e:96:9d:ce:1c:94:96:03:74:fd:0d:63:0a:54:2e:
         4e:3f:ce:42:21:78:3e:4b:6d:2d:05:51:89:cc:f4:1b:ed:a6:
         66:dc:36:92:37:ab:88:5e:6b:0f:99:bf:f0:86:ba:7d:f3:70:
         73:7e:14:41:c9:41:b7:88:e6:d7:ed:e8:72:14:f9:02:d1:8a:
         3b:71:16:60:10:de:1c:1b:28:03:6b:2a:a0:d3:09:a8:89:ed:
         be:95:4a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:42:45 2025 by rpki-client