Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/202FA7CA4FB68A7F044DBC88811484C065334A74.cer
File:                     202FA7CA4FB68A7F044DBC88811484C065334A74.cer (raw, json)
Hash identifier:          j+o8tsuDW39HtWmvpfLUQyKaXzG+zB+eLRyNFOJSKRU=
Subject key identifier:   20:2F:A7:CA:4F:B6:8A:7F:04:4D:BC:88:81:14:84:C0:65:33:4A:74
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       107F46A82F88B17B3E6ED392ADEDE1E4D9063674
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/202FA7CA4FB68A7F044DBC88811484C065334A74.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 21 Dec 2024 00:14:31 +0000
Certificate not after:    Sat 20 Dec 2025 00:19:31 +0000
Subordinate resources:    AS: 11097
                          IP: 192.207.194.0/24
                          IP: 200.0.70.0/24
                          IP: 200.202.128.0/18
                          IP: 2801:80:1400::/40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7f:46:a8:2f:88:b1:7b:3e:6e:d3:92:ad:ed:e1:e4:d9:06:36:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 21 00:14:31 2024 GMT
            Not After : Dec 20 00:19:31 2025 GMT
        Subject: CN=202FA7CA4FB68A7F044DBC88811484C065334A74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:91:c7:7a:ab:bd:c9:c4:86:ed:75:40:e1:81:
                    cf:d7:c8:f4:73:cc:e7:0a:0d:63:70:2c:21:b9:98:
                    5a:c5:a4:d4:a4:d4:f9:7a:9c:7f:d3:13:35:5a:e7:
                    b9:d7:3b:11:8c:01:e0:ee:3c:53:02:4f:3b:4e:ac:
                    1d:94:ea:71:9a:05:3d:6b:50:9f:3a:7a:d0:34:fd:
                    89:c2:1c:79:57:9e:8d:c0:ca:95:49:99:14:03:7e:
                    24:3c:dd:d0:39:f8:2a:5b:38:12:f3:1d:60:07:7f:
                    24:17:f1:c4:6c:a6:06:5f:2d:c2:77:0b:86:b0:10:
                    b8:8a:0b:52:dd:cb:2d:b8:b8:84:b7:11:90:0b:fa:
                    12:38:e9:93:19:98:bd:58:b2:d4:3a:e2:99:10:fe:
                    1c:51:26:ac:b1:65:04:08:1d:fa:6d:bd:f2:93:46:
                    62:7c:63:86:13:db:5b:41:9f:8b:aa:3c:a8:33:90:
                    d6:af:81:a4:ba:9d:70:69:da:a3:8f:dc:08:f7:71:
                    2d:6d:d0:1b:38:de:ce:53:12:59:4c:28:f2:89:5f:
                    85:8a:8f:08:ba:44:f9:96:9e:55:db:5d:85:0f:4b:
                    d3:e0:36:04:92:a0:48:9b:56:4a:78:5d:4d:e9:fb:
                    2d:ca:63:fd:24:cf:55:41:34:42:82:1c:17:1d:52:
                    86:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:2F:A7:CA:4F:B6:8A:7F:04:4D:BC:88:81:14:84:C0:65:33:4A:74
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/202FA7CA4FB68A7F044DBC88811484C065334A74.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.194.0/24
                  200.0.70.0/24
                  200.202.128.0/18
                IPv6:
                  2801:80:1400::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11097

    Signature Algorithm: sha256WithRSAEncryption
         77:30:d7:92:94:b9:00:68:82:fe:d5:3b:51:a7:aa:e0:47:b5:
         d1:11:3e:7f:af:99:d4:09:79:03:7b:5d:ff:84:55:6c:12:0b:
         5f:73:9c:c6:83:f3:24:01:4c:12:bf:f6:64:8f:d9:ea:0c:0e:
         c1:62:38:69:72:33:ae:68:31:de:4a:52:c7:a6:49:58:25:34:
         90:ef:ab:cc:4e:1e:b2:23:0f:57:97:95:9f:3a:b9:cf:95:c7:
         fb:3c:4a:1d:15:81:31:df:58:dc:d8:ac:2f:52:b8:02:14:93:
         31:09:21:31:42:3e:7d:f6:b6:59:97:4c:b1:ed:c3:fb:aa:fe:
         c4:48:40:77:a9:db:0b:0f:b7:cc:ab:f2:e9:c3:5d:c4:df:31:
         b9:15:2a:b6:0d:06:9d:1e:09:28:c7:42:e4:43:8e:ac:73:97:
         7b:27:68:2f:c8:fe:0e:e2:42:9f:b9:e9:f3:b2:34:7d:9a:cd:
         3a:f7:5d:6f:cf:02:34:78:ec:91:b0:bf:2a:a0:5c:8a:21:d1:
         af:71:59:f6:68:2e:76:fb:5c:ee:82:fa:1d:84:00:58:15:aa:
         bd:33:b1:20:b6:7f:1e:5c:c6:eb:0e:ba:db:39:25:0d:a3:31:
         9e:30:bd:2f:f4:eb:04:67:5f:fd:15:61:d9:f0:e7:cb:21:99:
         72:5b:5d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:21:53 2025 by rpki-client