Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A8D6F853C127D85A0E619E7DC31EF9248B9C9429.cer
File:                     A8D6F853C127D85A0E619E7DC31EF9248B9C9429.cer (raw, json)
Hash identifier:          4FwLy7NUgXcBCZ0PquSziw0jWik03fiNDL98VkqtZeo=
Subject key identifier:   A8:D6:F8:53:C1:27:D8:5A:0E:61:9E:7D:C3:1E:F9:24:8B:9C:94:29
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0AFB4739CA7DF842CF4D72D37F8669BA7AD1FE3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/1/A8D6F853C127D85A0E619E7DC31EF9248B9C9429.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 18:41:12 +0000
Certificate not after:    Wed 02 Apr 2025 18:46:12 +0000
Subordinate resources:    AS: 267605
                          IP: 45.71.116.0/22
                          IP: 2804:4424::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:fb:47:39:ca:7d:f8:42:cf:4d:72:d3:7f:86:69:ba:7a:d1:fe:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 18:41:12 2024 GMT
            Not After : Apr  2 18:46:12 2025 GMT
        Subject: CN=A8D6F853C127D85A0E619E7DC31EF9248B9C9429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:55:00:80:f0:3b:b4:db:f4:7a:39:9a:c7:e8:
                    20:40:a5:ee:e6:a8:80:3a:d5:19:a4:39:af:ad:f2:
                    c6:85:6f:e5:e1:d4:75:8f:f9:ff:8b:26:ef:e9:fe:
                    94:5e:1a:4e:d2:1b:ed:fa:8e:8b:8b:c3:0b:85:f4:
                    8c:c1:d3:8e:0e:38:f4:84:19:8b:1d:d6:61:d1:a5:
                    f5:16:76:0c:ae:03:8a:07:53:08:ac:57:61:4c:4c:
                    35:1c:d6:60:48:39:b1:94:d9:87:24:85:4b:ac:a1:
                    98:8f:50:41:3b:01:e6:34:ce:fb:85:61:a5:93:56:
                    25:a6:37:50:12:96:11:ab:38:6e:9a:d4:23:0e:92:
                    b9:7a:6d:5f:f7:b5:63:09:34:62:8d:21:97:5c:f0:
                    e9:08:e9:10:f4:10:ad:02:2c:ab:b4:51:64:fa:aa:
                    74:d6:dd:05:4b:f1:69:fa:e1:d5:18:9d:f9:ed:0a:
                    0c:66:52:a0:38:22:48:a1:e4:ec:b0:d1:a1:0b:fe:
                    29:be:58:4e:d2:38:6d:87:07:89:5b:45:23:af:59:
                    66:ef:00:5c:7d:f4:36:d1:d1:01:ae:dd:45:af:46:
                    58:ea:cf:88:d8:9f:c6:5f:ad:ca:24:3c:06:1d:de:
                    fe:c8:c1:d9:b1:0d:2e:80:70:ee:57:89:c8:3f:ad:
                    a5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A8:D6:F8:53:C1:27:D8:5A:0E:61:9E:7D:C3:1E:F9:24:8B:9C:94:29
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FCxtNikLZdFwEFbCxqSd3VLJDCvEPoAi1Ust2LYzZm7G/1/A8D6F853C127D85A0E619E7DC31EF9248B9C9429.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.116.0/22
                IPv6:
                  2804:4424::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267605

    Signature Algorithm: sha256WithRSAEncryption
         4c:ca:bb:7b:2c:13:32:e7:0b:b0:96:9a:9a:ee:c9:cf:0a:1c:
         72:2c:40:5e:d8:22:89:5b:a8:87:0d:62:15:f5:4e:56:d9:d3:
         9c:8b:df:bf:ef:52:f6:ab:f7:c9:13:18:89:f0:f3:20:8a:f0:
         0e:2f:52:68:32:a3:c9:75:f8:62:c9:60:e6:cf:d3:bc:9e:67:
         b4:91:ac:37:74:1a:35:6c:f2:13:8a:30:a9:50:1c:c8:ea:76:
         cf:46:99:b1:4b:33:2a:53:55:28:e5:f9:4f:61:cb:e9:fe:4a:
         eb:1a:46:d8:59:f3:86:d7:12:2b:83:68:55:8e:d3:74:49:0c:
         77:bb:b4:91:d3:9c:a3:e6:54:2e:0d:18:0a:04:75:f0:26:ae:
         bc:97:2a:29:61:a7:3b:00:75:f9:86:3a:dc:f0:9d:6b:3c:69:
         de:81:75:2e:4f:ab:ea:3d:cb:05:d7:9f:87:20:a5:a7:98:ed:
         59:3c:16:b8:05:98:6b:1f:dc:22:e9:16:7f:01:41:be:0b:9a:
         1e:3a:48:5d:b3:2c:34:7d:b0:2c:0d:c2:51:94:a6:db:20:f3:
         df:d5:b3:aa:09:91:d0:8d:d4:ae:a9:06:25:95:30:c3:a0:9a:
         25:e5:bc:f8:5a:7c:01:74:9c:36:3a:46:bb:cb:8e:12:e0:2c:
         86:7f:47:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:50:29 2025 by rpki-client