Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/72B246961AE39F1657B95A43A3A8C381ED03EC7C.cer
File:                     72B246961AE39F1657B95A43A3A8C381ED03EC7C.cer (raw, json)
Hash identifier:          7pF1IZriYoLYvgu0DE4yFCNzlo/g/2GLNXaC514ocZ4=
Subject key identifier:   72:B2:46:96:1A:E3:9F:16:57:B9:5A:43:A3:A8:C3:81:ED:03:EC:7C
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       139FD347E82BE310B7B1B4AE39C11F9583991AC2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J6gXJQkj5JyozSnVVvxpHpqS4bNAVWBScTYfA1AS2vcR/0/72B246961AE39F1657B95A43A3A8C381ED03EC7C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J6gXJQkj5JyozSnVVvxpHpqS4bNAVWBScTYfA1AS2vcR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 20 Jan 2025 14:01:33 +0000
Certificate not after:    Mon 19 Jan 2026 14:06:33 +0000
Subordinate resources:    AS: 272280
                          IP: 2804:84c4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9f:d3:47:e8:2b:e3:10:b7:b1:b4:ae:39:c1:1f:95:83:99:1a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 20 14:01:33 2025 GMT
            Not After : Jan 19 14:06:33 2026 GMT
        Subject: CN=72B246961AE39F1657B95A43A3A8C381ED03EC7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:e9:8d:ef:9a:30:88:61:bc:6d:8a:19:d6:
                    d9:b4:06:a7:93:20:f4:2a:04:99:57:85:b3:d0:26:
                    18:87:0e:9e:45:82:e6:4d:94:4f:58:71:10:3d:f7:
                    75:42:09:af:69:7a:0b:97:63:c3:1c:fd:94:99:99:
                    03:fc:2e:59:e8:e9:a7:73:ac:89:40:b4:a4:18:de:
                    54:ea:3d:20:cd:9d:4f:64:61:1f:55:9d:fa:17:43:
                    93:88:9f:e4:c8:67:09:c4:a5:08:8d:2b:ce:47:14:
                    44:73:90:17:24:2d:4d:e1:98:76:3a:dd:3d:c2:56:
                    3f:c4:66:9c:2a:ff:f8:c0:47:ed:5f:dd:c6:3e:22:
                    1b:c3:b2:a2:20:61:3c:02:0d:b0:a5:27:97:1e:e2:
                    53:52:8e:ab:4d:08:5a:76:f7:52:29:b7:93:d6:89:
                    42:64:bc:3f:9c:f9:57:88:18:9f:ea:43:f9:b6:e3:
                    be:fb:8a:2f:79:e8:e1:82:36:80:5d:75:ab:0e:7d:
                    15:2e:bf:61:d1:e7:7a:c3:6e:43:f7:d9:09:41:a3:
                    54:31:79:f5:52:48:2e:f9:04:c7:93:96:c9:27:a0:
                    d7:3b:6e:3a:0e:df:2d:f0:e5:7f:79:c7:63:39:f5:
                    50:44:56:7d:52:19:8e:9a:43:8a:f7:67:1e:1c:b9:
                    f0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:B2:46:96:1A:E3:9F:16:57:B9:5A:43:A3:A8:C3:81:ED:03:EC:7C
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J6gXJQkj5JyozSnVVvxpHpqS4bNAVWBScTYfA1AS2vcR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J6gXJQkj5JyozSnVVvxpHpqS4bNAVWBScTYfA1AS2vcR/0/72B246961AE39F1657B95A43A3A8C381ED03EC7C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272280

    Signature Algorithm: sha256WithRSAEncryption
         74:27:12:89:d3:1e:99:e4:68:eb:57:a9:e6:82:c5:63:73:8c:
         ea:c0:b1:8a:0f:42:0a:17:74:98:59:73:48:e7:c6:dc:85:e8:
         82:08:2a:00:79:31:8c:12:96:fc:b2:41:cb:80:6b:c1:04:7f:
         1e:b1:18:51:70:ce:66:83:63:bc:2d:ef:a4:73:71:a7:c9:53:
         62:6a:a1:21:5a:04:7d:b3:62:4d:65:3f:02:0f:e4:75:2f:1a:
         38:e5:91:2e:9f:08:f0:99:88:99:72:27:39:54:41:71:a0:72:
         72:ac:17:02:14:aa:63:c3:5a:9c:75:ce:9e:79:46:f0:cc:ea:
         c5:cc:21:4d:2b:2a:31:21:32:ed:95:e2:c9:90:9b:3b:93:8b:
         a5:17:e1:84:bd:2e:fe:4f:5f:a8:6a:8a:3b:2e:e1:ef:06:bc:
         2a:00:d8:a2:46:de:ce:e1:27:c5:73:cc:78:30:e9:4e:96:17:
         64:3e:63:4b:44:68:39:24:62:67:ba:e0:50:ba:a5:2f:b7:76:
         24:f8:0e:9c:96:4d:dd:de:dd:d2:d9:f0:00:13:e9:d1:a1:01:
         d2:aa:c6:9e:61:a1:bf:5e:53:d8:29:e6:aa:94:a5:56:31:71:
         5e:6b:1c:c1:83:60:26:29:a5:b1:93:92:11:a8:73:e8:ff:e6:
         ca:b5:a5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:44:04 2025 by rpki-client