Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer
File:                     0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.cer (raw, json)
Hash identifier:          hihdqIgAMHsK1QuySI9UfkjZPIj8XIvD9m7Nt2MuxJE=
Subject key identifier:   0E:F7:13:1E:83:15:CF:BC:2A:0C:8E:B2:A6:84:48:B4:0D:F9:DD:EB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0282049AA6D7A91343547891CB14E431D3B77A16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 12:31:13 +0000
Certificate not after:    Fri 06 Mar 2026 12:36:13 +0000
Subordinate resources:    AS: 271541
                          IP: 181.232.250.0/23
                          IP: 2801:80:3e70::/47
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:82:04:9a:a6:d7:a9:13:43:54:78:91:cb:14:e4:31:d3:b7:7a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 12:31:13 2025 GMT
            Not After : Mar  6 12:36:13 2026 GMT
        Subject: CN=0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6a:c7:78:52:b8:c2:b1:4c:ba:a6:76:16:1e:
                    38:55:b3:7f:a8:b3:dc:c4:a9:da:e2:1a:f2:15:e4:
                    e5:72:ef:5e:a3:ff:73:04:6d:d3:69:58:a6:bf:dc:
                    9f:d3:19:78:0c:2e:d5:be:32:56:05:a2:55:65:d5:
                    7b:3d:c6:01:55:d1:9a:36:87:fc:b5:22:d2:0d:4f:
                    ba:ff:e3:8c:9e:7c:18:b1:9a:7d:3d:ca:87:67:4c:
                    c6:da:05:77:6f:89:75:0a:3d:50:35:1e:82:76:cd:
                    8b:4b:7d:1a:fa:c1:d5:da:f1:a8:ee:65:46:95:0d:
                    75:21:70:f5:17:3c:d4:4d:4a:c4:70:14:bc:7c:ea:
                    99:d3:67:4a:56:ba:90:a2:97:8f:72:6d:42:d4:c4:
                    59:12:00:72:ec:e4:64:40:c0:2d:20:e8:51:f0:f7:
                    69:13:04:7e:40:7e:04:fa:21:ec:01:e9:e6:bd:f3:
                    97:2b:d3:5c:92:59:01:ae:ff:c9:48:79:ef:e7:ea:
                    62:11:2a:17:85:6f:e6:bf:0c:5c:ce:4b:a7:45:b8:
                    7a:d8:37:9e:63:09:bf:6a:00:4e:94:af:ad:16:32:
                    5a:7a:90:ea:b2:f9:37:c1:d7:ab:c4:d7:36:9b:80:
                    49:a3:da:d8:66:12:26:81:02:a0:3e:70:f2:31:c4:
                    3f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:F7:13:1E:83:15:CF:BC:2A:0C:8E:B2:A6:84:48:B4:0D:F9:DD:EB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ba518Sn5CYhwJvEihytxCvJePu6wy4yHEX6efLyiAXFA/1/0EF7131E8315CFBC2A0C8EB2A68448B40DF9DDEB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.250.0/23
                IPv6:
                  2801:80:3e70::/47

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271541

    Signature Algorithm: sha256WithRSAEncryption
         b3:52:6f:23:65:97:64:44:87:17:b5:3d:a3:4d:51:c0:ae:9c:
         8f:c2:47:6c:fc:aa:5b:be:ea:d4:27:9d:50:71:06:a3:29:10:
         1b:dd:a6:e6:bb:f8:b7:ea:4a:25:da:8b:9f:31:09:26:35:bd:
         a7:b6:e2:5d:9d:9f:1a:3c:6d:f6:d1:2b:5b:11:bc:72:80:8b:
         f0:30:01:ee:19:8f:ad:28:a0:cf:e8:d6:fe:ba:19:38:fb:9d:
         b5:25:56:44:35:d6:23:d7:b9:54:b1:85:30:15:15:f2:38:2c:
         06:61:f6:22:e6:fb:a9:78:f2:5b:38:3f:af:93:36:31:b5:c5:
         5d:f4:85:42:af:77:3c:1b:b6:8e:06:18:97:e9:da:f0:dc:9f:
         04:0d:e3:a0:a0:d6:62:eb:e8:24:0a:5f:2b:05:36:58:d5:f2:
         dc:53:48:94:9a:db:8a:00:09:eb:17:f5:95:ed:ce:ee:a6:d4:
         c1:a6:31:e8:00:7e:88:42:5b:a5:6c:9f:23:c8:3b:08:06:7a:
         4a:e1:94:a0:f8:ab:9f:2c:dc:ec:90:3f:d8:19:4e:17:22:1f:
         be:ec:2d:e3:c8:72:74:49:0a:b7:01:02:2c:88:ea:89:56:c0:
         b8:4d:3a:fa:f3:98:11:08:43:74:8b:36:49:49:dc:21:43:fa:
         ce:2b:be:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:48:24 2025 by rpki-client