Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0.cer
File:                     0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0.cer (raw, json)
Hash identifier:          1C9LdIkaM2Nq3HJ5zlN9+MBYPJSryT01dUS/thv47rQ=
Subject key identifier:   0C:90:7E:91:2B:5E:F3:B8:3A:EA:E8:54:6F:7A:1D:DB:DC:55:51:A0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       496D295897FDAD5241B37C2ADBE081C2325A7EFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/1/0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 23:17:02 +0000
Certificate not after:    Thu 05 Mar 2026 23:22:02 +0000
Subordinate resources:    AS: 52608
                          IP: 177.86.143.0/24
                          IP: 2801:80:1bf0::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6d:29:58:97:fd:ad:52:41:b3:7c:2a:db:e0:81:c2:32:5a:7e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 23:17:02 2025 GMT
            Not After : Mar  5 23:22:02 2026 GMT
        Subject: CN=0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5f:65:68:53:60:ae:f6:01:e7:cd:60:d4:2b:
                    a6:e5:48:6a:f1:eb:1f:a2:13:29:61:c5:03:45:ae:
                    ba:97:fb:9e:e5:f9:65:e5:31:61:fd:22:bc:e2:35:
                    92:07:6d:c6:8a:b1:72:fc:26:b0:43:3b:60:0e:0b:
                    7a:1a:cc:92:a2:b7:e6:f0:8a:f4:16:a8:08:af:14:
                    43:5f:d6:80:c2:c7:35:4b:06:f3:99:23:f5:85:09:
                    63:d5:1b:7d:76:4a:05:03:c8:24:69:fc:82:73:13:
                    27:26:df:80:b5:e3:9e:f6:02:b2:37:31:68:c4:8f:
                    f1:2d:6f:50:43:c4:f9:d1:71:d5:15:05:44:7a:53:
                    cc:cb:34:88:e5:6f:76:28:eb:25:54:ef:15:ce:aa:
                    5b:18:c7:f8:ef:3c:64:39:42:30:94:9f:8f:32:96:
                    ca:7c:f7:6a:e9:7a:40:4c:2f:c2:47:f8:9d:27:f5:
                    24:ff:14:fd:5e:38:54:c4:32:80:22:54:8a:32:74:
                    b3:67:8e:6a:21:b5:8d:2e:95:3c:3f:8c:11:d1:2a:
                    84:96:a6:f7:0f:f7:0b:80:99:b7:19:f5:33:64:b5:
                    15:f4:6d:9b:64:27:b4:94:ec:44:c5:5f:8d:6e:cb:
                    b0:5b:84:ef:2d:33:9a:cd:03:be:34:ff:40:f6:f9:
                    67:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:90:7E:91:2B:5E:F3:B8:3A:EA:E8:54:6F:7A:1D:DB:DC:55:51:A0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4KPUCoxQgy7xk9PQ59vyzy4eJ5wGXibUeSEErkauq3Y1/1/0C907E912B5EF3B83AEAE8546F7A1DDBDC5551A0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.143.0/24
                IPv6:
                  2801:80:1bf0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52608

    Signature Algorithm: sha256WithRSAEncryption
         71:8d:4d:89:0e:99:a1:3e:37:85:88:6e:00:3c:ae:d8:a7:04:
         3c:ae:1b:54:2c:0d:0f:71:fb:c6:ea:80:e5:5b:df:7a:63:7e:
         b3:9a:46:90:56:bb:ee:bb:a4:b9:b3:1a:e9:a9:4b:ea:4c:bc:
         4e:d2:56:e1:22:9c:4c:b7:2e:cc:e4:f7:58:ff:c5:9f:03:e5:
         36:ee:98:5d:76:35:cc:a0:c8:a2:d0:0f:06:5e:84:83:97:f9:
         c3:5b:31:59:27:42:b3:73:e3:55:eb:0d:86:b7:4b:78:8a:c9:
         60:62:54:07:1b:fa:19:c6:b9:52:f1:8a:15:f7:9d:34:e2:12:
         04:d8:26:8f:55:02:f3:86:18:fe:f7:c2:5c:a7:dc:62:e6:14:
         15:27:b9:4b:4e:80:ec:fd:1a:7f:5b:98:0c:f5:a1:6a:18:29:
         d9:08:ea:34:c7:fb:89:9d:21:00:39:5e:ed:a9:b3:15:9a:d2:
         b6:1f:52:17:23:2b:1c:af:62:25:9b:1f:e7:40:d0:ee:a0:2d:
         60:46:46:dd:1c:bc:6b:24:ce:36:f4:42:68:16:ec:33:53:3c:
         dd:54:8b:04:2b:8b:bb:b8:07:b9:3b:2b:b9:8f:12:49:39:c5:
         bc:2f:cb:09:ad:13:27:27:83:74:29:5e:92:b0:3b:92:e8:a6:
         10:1a:4a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:33:35 2025 by rpki-client