Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer
File:                     0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.cer (raw, json)
Hash identifier:          2myS2Cy1RQWGbDJcwtQkGV7F13feUf9rS3U6lKVlUEM=
Subject key identifier:   0D:74:BF:A3:D0:BD:CC:2C:C6:2E:DD:9E:FB:11:FC:02:83:74:37:65
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1CB4EA2A2898B8A66F254611932A5731F0B6280D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:06 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:06 +0000
Subordinate resources:    AS: 61779
                          IP: 201.148.220.0/22
                          IP: 2801:80:ae0::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b4:ea:2a:28:98:b8:a6:6f:25:46:11:93:2a:57:31:f0:b6:28:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:06 2025 GMT
            Not After : Mar  4 18:40:06 2026 GMT
        Subject: CN=0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a7:fb:61:5b:29:94:04:30:7e:8e:17:e0:d2:
                    6c:11:de:b3:6a:e3:ba:c0:15:64:e3:5f:a2:86:5d:
                    29:8a:98:b6:c7:f7:65:f9:df:f6:b9:a3:c0:96:7e:
                    85:7e:22:2f:2a:64:d6:2c:66:6b:1b:82:73:47:d7:
                    b1:36:1e:f8:10:20:58:f7:1a:b3:e6:c3:2e:ee:ce:
                    18:89:f8:22:72:0a:ad:6f:e7:99:58:18:2f:56:05:
                    97:cc:7a:35:2e:6c:83:cd:00:d4:54:98:71:e3:21:
                    ee:52:7f:be:67:7c:c0:29:3c:7d:e0:33:6e:30:78:
                    ca:2e:7b:5a:fa:12:ae:b0:66:2b:8a:a3:a3:75:f1:
                    19:d8:5f:8c:6d:04:8b:54:d4:fa:29:14:45:4d:56:
                    4a:6d:fa:07:43:a1:f4:29:be:56:23:95:f5:4e:3e:
                    14:cb:92:a3:a5:a1:2b:3a:91:6b:98:4d:0b:be:36:
                    da:b9:81:0a:b3:c4:b9:3d:9a:be:40:68:48:17:5b:
                    eb:f8:3a:e5:62:34:6e:d4:4b:5c:7c:ad:b8:4c:ed:
                    87:dc:89:88:b4:74:14:35:aa:86:a3:e7:b3:47:b2:
                    90:3d:e6:18:8b:60:1a:1f:84:d2:b5:19:aa:6b:45:
                    2a:a6:25:67:df:1f:13:b3:02:a6:27:ef:aa:71:1d:
                    f9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:74:BF:A3:D0:BD:CC:2C:C6:2E:DD:9E:FB:11:FC:02:83:74:37:65
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3FY8QJEexqcz4sfnrUiJntqDhUSU8LSUumrALcs1KaR5/1/0D74BFA3D0BDCC2CC62EDD9EFB11FC0283743765.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.220.0/22
                IPv6:
                  2801:80:ae0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61779

    Signature Algorithm: sha256WithRSAEncryption
         10:d9:b5:26:45:57:81:5d:18:d4:2a:7b:64:15:71:d6:3c:62:
         44:01:9d:61:38:5d:b2:29:6a:b0:3b:59:da:b0:6a:56:17:56:
         ee:0f:3b:f7:25:f1:f7:99:cd:32:71:b9:af:f0:0e:dc:49:2c:
         6e:cc:89:56:79:e1:28:75:c7:03:03:4d:f4:6f:27:2a:f4:76:
         ee:5d:73:9a:1a:36:4c:de:22:39:02:f4:de:08:be:fd:27:ee:
         a2:ac:6d:63:14:97:d1:e1:ee:61:e0:91:57:ac:1a:f5:19:bf:
         b1:a0:3a:6f:72:39:cd:6e:47:81:d6:c9:88:66:67:49:39:2b:
         99:a2:8f:8b:91:cf:63:46:f9:27:1a:5b:9f:60:b8:08:b9:96:
         c3:d5:8a:55:67:e3:1b:6c:79:7d:06:59:54:40:b2:8a:eb:f4:
         29:1f:6a:64:8e:1c:9b:40:7d:bc:0a:31:99:c5:40:9a:df:36:
         83:21:15:13:3d:06:f7:d0:84:57:0f:1f:c5:78:43:fb:c1:b2:
         26:7e:f0:c0:c8:42:ef:77:ac:07:ba:0b:89:13:7f:47:0e:7c:
         fd:92:66:e8:58:98:c1:c3:ed:42:18:a9:2c:fc:8f:16:b7:dd:
         98:e7:e3:21:cd:55:7f:8b:c6:d6:2e:b3:3f:96:50:29:11:cb:
         8d:09:ea:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:41 2025 by rpki-client