Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.cer
File:                     8D0F799DDE369B44B3A0931DBECC6483E27050C6.cer (raw, json)
Hash identifier:          w7SdJuod7eBqDyTlhnwYHQIe1v6VAliD2A96xm7aUfg=
Subject key identifier:   8D:0F:79:9D:DE:36:9B:44:B3:A0:93:1D:BE:CC:64:83:E2:70:50:C6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4ED3A710B6E2EDD1904EEEB67363D8D746AD0AE1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Dec 2024 02:10:36 +0000
Certificate not after:    Tue 16 Dec 2025 02:15:36 +0000
Subordinate resources:    AS: 263574
                          IP: 45.174.96.0/23
                          IP: 138.94.84.0/22
                          IP: 177.185.40.0/21
                          IP: 2804:f44::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d3:a7:10:b6:e2:ed:d1:90:4e:ee:b6:73:63:d8:d7:46:ad:0a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 17 02:10:36 2024 GMT
            Not After : Dec 16 02:15:36 2025 GMT
        Subject: CN=8D0F799DDE369B44B3A0931DBECC6483E27050C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:3f:73:2e:a8:43:25:4d:76:72:fc:10:6c:83:
                    ef:8b:d7:5a:48:5f:38:85:b3:f9:d0:f8:56:a4:66:
                    81:c6:25:0d:f8:84:31:66:8c:76:14:1a:bc:bf:80:
                    a0:cc:ba:93:e1:0f:62:d3:93:4c:32:ac:40:98:24:
                    54:ca:0d:55:98:04:2b:5d:57:c2:4f:58:af:9f:b8:
                    59:8f:4c:45:b4:0b:5b:c3:1f:d7:d6:5c:d9:a1:6e:
                    aa:2a:af:af:fd:ad:e7:61:58:2e:ab:a4:db:de:cb:
                    15:18:c1:5e:5e:d4:52:90:21:04:01:90:15:3f:8f:
                    e5:15:9e:12:70:e2:16:f4:5c:cd:fc:ac:7c:af:7d:
                    fc:bf:d4:92:90:54:3b:92:87:68:82:34:8b:b6:ab:
                    32:f9:1b:26:b3:6f:ad:63:12:74:4a:b0:a6:57:6a:
                    80:a1:a4:ed:02:e4:95:d0:88:b0:9a:6d:0e:5a:d9:
                    4b:a9:e6:af:50:72:06:1c:6c:2e:a9:72:53:7a:31:
                    ce:df:62:4b:da:81:b3:5f:f5:9e:81:8f:a2:b5:0c:
                    5c:76:9c:82:10:3f:56:83:e8:ea:2a:fb:b2:bd:1e:
                    f1:dc:59:35:16:fe:a9:11:06:0f:20:a8:c4:06:93:
                    d5:9b:f4:b6:9a:83:d2:f2:27:b2:c6:ea:5e:32:21:
                    41:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8D:0F:79:9D:DE:36:9B:44:B3:A0:93:1D:BE:CC:64:83:E2:70:50:C6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/13rx2LJUvAMWEtWnPSSsFxDnczpHrSqgcx57VuCLyebr/1/8D0F799DDE369B44B3A0931DBECC6483E27050C6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.96.0/23
                  138.94.84.0/22
                  177.185.40.0/21
                IPv6:
                  2804:f44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263574

    Signature Algorithm: sha256WithRSAEncryption
         ab:3d:74:a2:b6:79:b1:8d:6a:41:6b:a1:4d:e4:44:5b:ea:df:
         fe:e3:d6:c6:4f:e2:e9:7d:5d:50:b5:e9:ba:ea:76:c4:a3:d0:
         91:3f:c8:92:de:93:24:ab:ce:f0:54:f3:fa:3c:76:eb:62:ff:
         6b:b8:c1:ce:0d:e3:55:c5:ae:e9:43:b4:25:ea:b6:34:08:c3:
         4a:16:e9:e4:da:51:31:06:e9:99:df:42:72:22:29:c9:20:a3:
         e7:63:a1:45:7c:90:67:7d:71:a9:8a:be:fa:b2:0e:04:4f:64:
         09:9a:9a:3d:ad:8a:c8:8b:da:38:6f:1e:80:c5:79:69:34:56:
         0e:23:bc:3a:c4:71:cd:95:91:99:71:05:c8:ee:c3:fa:61:ad:
         71:10:dc:94:be:69:2b:af:a4:5d:59:2c:76:6b:91:2d:b7:de:
         51:b6:0d:08:d5:98:6e:5d:e8:95:04:16:e5:8e:3c:75:20:b2:
         ba:3a:a3:3d:00:b3:a5:0f:71:44:e2:a9:20:e3:17:2c:3d:58:
         d7:30:31:8f:bb:c5:0c:5e:34:8b:73:1a:cf:25:85:a2:08:02:
         3f:8f:fa:7a:fb:fb:e8:2a:df:6d:c1:0e:a3:b9:08:91:bb:20:
         dc:e6:5b:e0:4f:72:1b:c6:75:d5:d6:3f:80:81:58:36:44:6a:
         7b:fe:d6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:13:47 2025 by rpki-client