Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
File:                     91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer (raw, json)
Hash identifier:          Byjd3QABoKTZGFhWhCXMKDRkmNh/igSMn5AkneU0Br8=
Subject key identifier:   91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0D5276EDF2E29F893E9D685EE1FCA7D2E32543DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Jan 2025 12:23:51 +0000
Certificate not after:    Mon 26 Jan 2026 12:28:51 +0000
Subordinate resources:    AS: 264381
                          IP: 131.100.144.0/22
                          IP: 131.161.172.0/22
                          IP: 168.205.148.0/22
                          IP: 170.78.176.0/22
                          IP: 170.81.44.0/22
                          IP: 170.83.164.0/22
                          IP: 177.11.56.0/22
                          IP: 177.22.208.0/20
                          IP: 201.149.100.0/22
                          IP: 2804:1d9c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:52:76:ed:f2:e2:9f:89:3e:9d:68:5e:e1:fc:a7:d2:e3:25:43:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 27 12:23:51 2025 GMT
            Not After : Jan 26 12:28:51 2026 GMT
        Subject: CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:71:85:c4:65:9d:fc:9a:6d:bd:92:13:12:
                    98:e1:11:74:2a:08:91:16:fa:31:94:cf:a1:2d:89:
                    13:3f:6f:e6:eb:a6:44:bf:fa:2c:10:84:a2:f5:75:
                    ad:78:19:31:dc:8b:63:dd:a7:9f:d1:e8:be:05:1d:
                    67:1b:7d:18:76:fc:34:c1:07:34:a4:2f:bc:56:2f:
                    49:16:75:a5:eb:55:48:8b:e1:95:74:47:92:b9:53:
                    d3:80:d4:de:f1:47:66:a6:f2:43:37:30:d0:cc:3a:
                    dc:6a:f1:bf:c9:70:01:b5:3a:62:af:06:67:56:fd:
                    0b:89:02:9b:f5:e1:e5:2f:39:c6:5d:c5:d0:90:31:
                    93:10:75:86:1a:29:74:76:64:db:4f:cf:28:ea:f1:
                    c9:04:84:9b:60:90:0c:ac:62:46:22:db:09:0c:9e:
                    01:4a:ad:f0:16:cf:31:53:81:82:30:5f:0d:b7:9a:
                    da:be:51:77:85:b8:2d:f5:7c:44:96:4a:db:71:c7:
                    bb:66:a7:26:b5:69:a9:48:5f:92:a5:76:60:91:10:
                    b8:54:e2:9b:df:3d:21:33:29:07:b9:df:d1:ac:d4:
                    33:d6:bb:45:c6:0a:9e:db:08:c5:91:ca:27:2f:04:
                    fb:bb:93:a3:01:10:13:df:fb:0b:73:2f:b2:b6:8f:
                    a4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.144.0/22
                  131.161.172.0/22
                  168.205.148.0/22
                  170.78.176.0/22
                  170.81.44.0/22
                  170.83.164.0/22
                  177.11.56.0/22
                  177.22.208.0/20
                  201.149.100.0/22
                IPv6:
                  2804:1d9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264381

    Signature Algorithm: sha256WithRSAEncryption
         1b:ab:3f:15:1d:d1:66:10:24:98:1f:8c:ed:82:ae:cd:23:41:
         69:68:be:a0:a3:46:ef:52:23:cb:2d:87:be:8a:49:02:cd:fe:
         60:85:47:4a:69:3d:3c:06:77:53:d8:30:4a:f9:e1:ce:bc:37:
         fd:f5:a6:ac:80:ba:b6:9b:fc:b6:7a:af:0b:69:8f:a7:13:4d:
         52:4c:a4:1d:dc:0f:a6:8d:72:65:e4:4c:d7:5d:38:47:bb:7e:
         e0:ad:86:81:10:49:67:d7:2f:da:d7:a0:c0:4a:db:48:02:63:
         e4:be:fa:61:25:ec:92:bb:ec:13:59:d6:ca:76:82:7d:58:cc:
         9d:70:4c:01:20:b2:0c:a4:8e:e4:f5:d0:27:cc:f7:03:ec:93:
         d1:f9:34:2a:1d:f5:eb:a8:e6:04:80:44:0c:c6:d3:76:55:96:
         77:36:ba:0a:f2:ab:f9:d3:4a:9a:36:00:62:68:02:5f:1c:ff:
         ad:81:cd:f2:73:1e:83:97:30:b8:57:51:5d:f1:63:49:ff:ad:
         c7:24:85:8c:54:4d:ae:99:fb:71:d1:a6:e2:d4:81:be:4c:d7:
         fa:bd:45:4c:96:3f:fc:38:b4:ae:fd:bb:fb:f6:99:4b:58:fc:
         62:5e:29:08:e0:2c:71:ff:b7:62:19:02:aa:cc:30:72:57:0a:
         7b:8b:b4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:55:08 2025 by rpki-client