Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/72BE3C82AB3EA61E2E8836DFA23D4105FAF206FE.cer
File:                     72BE3C82AB3EA61E2E8836DFA23D4105FAF206FE.cer (raw, json)
Hash identifier:          PEDdo93/hbV2u/RK3v7lNZMFFe2IDs9k6xlgatYb7g0=
Subject key identifier:   72:BE:3C:82:AB:3E:A6:1E:2E:88:36:DF:A2:3D:41:05:FA:F2:06:FE
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       283B8E690C02138D54D457F3D41FFF2D9F4316B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/72BE3C82AB3EA61E2E8836DFA23D4105FAF206FE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 20:55:38 +0000
Certificate not after:    Wed 04 Mar 2026 21:00:38 +0000
Subordinate resources:    AS: 266194
                          IP: 45.5.176.0/22
                          IP: 2804:3c2c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:3b:8e:69:0c:02:13:8d:54:d4:57:f3:d4:1f:ff:2d:9f:43:16:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 20:55:38 2025 GMT
            Not After : Mar  4 21:00:38 2026 GMT
        Subject: CN=72BE3C82AB3EA61E2E8836DFA23D4105FAF206FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:77:8d:73:ad:22:28:ba:a6:28:88:0c:9d:d1:
                    a1:02:0f:a8:10:9b:2a:b1:0e:1d:95:1d:2d:e6:41:
                    d9:38:e0:c5:62:05:b6:6f:93:c1:27:37:e1:29:97:
                    5e:43:06:00:82:18:c9:96:05:8c:b2:b7:f1:44:51:
                    a6:a7:41:4a:93:d9:80:4f:4c:0a:8b:e0:00:3a:20:
                    75:7f:0f:52:e9:30:24:73:ea:1d:5b:47:56:56:b2:
                    dd:d5:c6:0e:8a:58:75:f5:65:02:bc:37:4a:01:a2:
                    ce:4e:6a:05:9f:8f:76:35:f2:47:25:03:e4:da:4c:
                    e4:c5:a4:96:f8:b4:f2:55:ac:e1:81:85:61:45:d1:
                    f3:e3:cf:b9:69:78:62:b3:50:3d:18:48:20:66:33:
                    7a:f5:ec:ae:c5:39:7f:64:56:a7:5c:b8:0d:83:17:
                    4a:70:ad:9d:0f:f0:55:32:a8:73:8a:0c:00:f4:84:
                    43:da:86:ea:b9:33:b7:46:ac:a4:f2:d1:3e:4f:82:
                    34:bf:58:ac:53:d1:68:d6:ec:d7:33:f0:f7:c1:24:
                    73:3d:b4:d6:49:a7:63:71:a2:e5:a8:4d:e7:06:03:
                    46:98:a5:9f:5a:60:ac:c9:8d:75:08:09:9a:e2:20:
                    f3:4f:d5:cd:19:d2:8a:33:10:fd:79:4a:48:d0:77:
                    4a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:BE:3C:82:AB:3E:A6:1E:2E:88:36:DF:A2:3D:41:05:FA:F2:06:FE
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/72BE3C82AB3EA61E2E8836DFA23D4105FAF206FE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.176.0/22
                IPv6:
                  2804:3c2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266194

    Signature Algorithm: sha256WithRSAEncryption
         8d:2a:d3:bc:bf:3a:6e:db:fd:ad:d3:17:15:ed:b1:02:58:25:
         88:be:72:71:c2:2b:e0:08:26:ac:01:27:2a:d1:9a:96:70:4a:
         24:60:26:7d:35:75:6d:cc:7b:68:0c:c0:28:df:8b:26:59:49:
         dd:c4:01:bc:46:1f:5a:af:35:62:fa:ed:ec:b9:64:5a:da:e1:
         aa:81:ff:ff:78:dc:f9:a2:03:8d:ab:64:07:fa:71:50:32:1f:
         71:86:b6:45:14:d1:d5:13:2a:66:d8:77:e2:45:e0:b1:f7:6e:
         1c:f4:28:7c:85:67:12:83:c3:30:97:b0:d1:29:2e:36:79:b8:
         30:92:a9:b8:ac:01:e6:85:1f:f3:d8:10:8d:74:aa:02:a0:bc:
         49:19:76:3a:de:d2:75:48:db:32:a1:1f:de:87:80:ba:6d:2b:
         32:1c:85:55:4e:80:9e:ab:e5:59:98:80:88:d3:60:6d:86:10:
         69:79:2a:1d:cd:bf:0f:01:53:60:e7:83:14:3b:cc:23:9d:4d:
         1b:0e:f8:b3:5a:aa:f0:99:68:2f:ce:56:5c:6a:55:1e:d2:af:
         d1:e6:15:2b:be:25:d0:d2:b1:f1:9d:52:66:8c:e9:3f:0d:b9:
         e3:2c:30:4d:6e:ef:8c:dc:fb:0c:c1:6d:32:c0:b7:a0:bd:f1:
         87:57:fd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:31:08 2025 by rpki-client