Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer
File:                     B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer (raw, json)
Hash identifier:          fmc60UE5QGAq88c5fMQMXr2HrNTuWilG+g5R2RnxWuE=
Subject key identifier:   B3:9B:B9:AA:D8:3E:BF:DF:74:6E:9B:87:3C:0E:1F:FA:FD:07:1E:31
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       707113CF88374DAE61FD5A180595757487D96597
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 07:34:06 +0000
Certificate not after:    Thu 03 Apr 2025 07:39:06 +0000
Subordinate resources:    AS: 268925
                          IP: 45.176.4.0/22
                          IP: 2804:5cb4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:71:13:cf:88:37:4d:ae:61:fd:5a:18:05:95:75:74:87:d9:65:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  4 07:34:06 2024 GMT
            Not After : Apr  3 07:39:06 2025 GMT
        Subject: CN=B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c8:f1:3e:80:f9:12:3e:b7:74:58:bc:d2:37:
                    56:14:5a:b1:a9:22:d5:ab:b3:3c:cf:4b:9e:5d:2c:
                    84:a0:38:8d:08:00:f1:f5:05:f4:26:81:84:0e:93:
                    91:c2:51:c8:dd:10:a3:64:60:97:61:62:54:af:11:
                    94:7e:23:f8:a2:6d:69:86:f4:65:64:72:3d:12:27:
                    80:be:d7:ec:29:96:48:72:43:98:ac:ef:49:39:80:
                    94:9f:e1:a8:4f:00:fe:f3:96:07:98:0c:c8:28:a6:
                    c4:67:f2:62:43:0c:90:e3:aa:c1:ba:3e:97:c2:3c:
                    3c:24:f9:97:3e:5d:0e:1b:85:cf:d4:04:e9:b1:80:
                    6a:01:b3:a7:c7:87:e8:90:55:93:06:e5:81:ec:e8:
                    d5:7e:33:05:bf:73:cf:21:98:f9:69:65:23:81:47:
                    a4:db:06:27:8d:63:f3:d6:e5:32:b6:bb:cb:09:9b:
                    1b:37:75:ac:9f:df:62:e9:7b:5c:a1:d3:18:75:f5:
                    32:98:57:17:9c:bc:a4:6d:e9:1e:36:c1:ce:4a:40:
                    a8:50:61:05:64:b9:31:c9:03:4c:d8:66:5e:2c:04:
                    35:29:de:03:08:fd:d8:41:55:04:c3:4a:ec:c4:25:
                    53:80:2a:8f:6f:4e:96:f5:e3:cf:fe:d1:67:ef:0a:
                    cf:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B3:9B:B9:AA:D8:3E:BF:DF:74:6E:9B:87:3C:0E:1F:FA:FD:07:1E:31
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.4.0/22
                IPv6:
                  2804:5cb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268925

    Signature Algorithm: sha256WithRSAEncryption
         d3:5a:d6:73:1c:4b:05:98:2f:50:f4:de:eb:49:b0:c6:26:29:
         4e:57:a5:0f:60:45:14:87:7d:bb:e1:cb:23:d7:a0:83:8b:c7:
         bf:ae:07:0b:75:b4:2e:48:0c:39:a3:ad:ae:49:8c:d0:e9:44:
         fd:5f:24:73:69:c4:ca:4e:2b:92:6f:25:bd:31:f5:a6:8a:ab:
         8c:58:bb:f2:be:2d:45:e4:88:0c:53:2b:52:85:20:d7:62:d1:
         79:4a:3f:0a:83:ad:e1:f8:e4:a8:0a:1f:1f:8f:50:31:ee:77:
         d4:53:08:07:ef:b8:01:47:91:d0:b9:12:73:91:33:6d:87:97:
         59:0a:97:1e:a3:9d:45:b3:b4:d1:f7:8c:78:82:7f:df:71:bf:
         b9:55:a4:d3:d0:bc:e4:7b:91:25:20:41:62:6d:19:98:29:58:
         48:ad:fc:d3:f4:9c:7a:4d:27:ec:1b:9f:7b:4b:e4:e9:74:13:
         49:6f:b6:b7:79:39:d1:59:d6:51:da:cb:cd:58:82:dc:b5:09:
         1f:75:7d:f9:5e:64:1a:11:43:9f:40:bf:84:a3:73:1d:df:c2:
         60:2f:e5:1f:7e:f0:a9:ea:c6:2a:1a:70:52:bf:66:02:ec:c9:
         be:3d:2c:2a:b1:e3:47:a4:7b:a2:f0:58:3d:af:3e:d0:41:7b:
         23:61:5e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:15:25 2025 by rpki-client