Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/72D1B347D7BE5A4B27B0A52D28552F7B647889B3.cer
File:                     72D1B347D7BE5A4B27B0A52D28552F7B647889B3.cer (raw, json)
Hash identifier:          HzVFZvFHA7W+NhMgC6htmy+YlT7doYk7mncq9gA3Q7g=
Subject key identifier:   72:D1:B3:47:D7:BE:5A:4B:27:B0:A5:2D:28:55:2F:7B:64:78:89:B3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3021B105E0B3A64D28FD337EE3AF5A287C5100F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/72D1B347D7BE5A4B27B0A52D28552F7B647889B3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 25 Jan 2025 18:56:02 +0000
Certificate not after:    Sat 24 Jan 2026 19:01:02 +0000
Subordinate resources:    AS: 53123
                          IP: 187.111.192.0/20
                          IP: 2804:6478::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:21:b1:05:e0:b3:a6:4d:28:fd:33:7e:e3:af:5a:28:7c:51:00:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 25 18:56:02 2025 GMT
            Not After : Jan 24 19:01:02 2026 GMT
        Subject: CN=72D1B347D7BE5A4B27B0A52D28552F7B647889B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:39:c1:57:e6:9a:9a:82:bd:29:c8:93:22:5a:
                    a2:40:d2:ec:bb:7f:24:9e:06:6d:b7:47:54:e3:61:
                    f7:98:30:92:1d:c3:3d:64:59:01:bf:c9:c6:3f:ab:
                    c6:f7:75:61:35:8e:dd:d3:a5:6e:e1:f3:69:19:21:
                    5d:2a:3a:ae:56:c1:69:26:8f:9d:08:58:e5:46:db:
                    66:6a:4b:f1:85:46:47:1c:e6:36:c0:8c:0d:82:e3:
                    c3:97:cb:c2:fb:97:06:a0:28:73:18:83:82:23:c3:
                    d4:2a:00:4c:ad:20:25:59:f8:d8:b5:2e:c6:b8:22:
                    75:64:d6:4c:ea:98:3c:3b:de:f7:92:c0:5d:cc:d1:
                    e3:d2:50:81:54:8d:8e:93:be:a7:34:ed:14:58:c5:
                    9b:8b:7c:27:1c:8a:21:a0:fb:5a:96:9a:7b:5f:b2:
                    2e:cd:da:12:3e:ca:4b:85:58:d1:67:f5:d0:af:6f:
                    c1:24:70:d4:93:bb:4f:c4:02:b2:3e:72:45:83:70:
                    21:df:0a:7c:d5:fb:67:7e:0c:71:19:e3:2a:56:fa:
                    23:3c:60:0b:fc:e4:c2:6a:cc:4d:45:a2:05:fd:4a:
                    45:05:06:e5:b3:ef:76:1d:e4:f5:d7:4b:54:5e:1b:
                    89:f0:6d:59:fd:ea:f6:4d:20:1b:64:c3:91:03:92:
                    68:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:D1:B3:47:D7:BE:5A:4B:27:B0:A5:2D:28:55:2F:7B:64:78:89:B3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/72D1B347D7BE5A4B27B0A52D28552F7B647889B3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.192.0/20
                IPv6:
                  2804:6478::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53123

    Signature Algorithm: sha256WithRSAEncryption
         8b:e5:0c:0d:1a:c0:ff:bd:1a:b1:f2:f5:cd:f2:01:ef:0f:46:
         64:69:c5:c0:73:4f:6e:d4:7b:5c:0e:76:d8:7b:e4:60:37:43:
         33:69:1a:19:eb:57:52:8e:73:71:dc:53:10:58:de:c7:a2:83:
         87:74:f7:04:e7:56:21:cd:8f:f4:d1:e5:d4:4b:0f:49:dd:a9:
         e0:e3:02:67:98:f7:46:35:b1:ea:ec:12:27:a4:3a:c9:a7:02:
         6d:b1:d0:21:f9:6c:b4:23:0e:cc:4b:03:70:fe:f0:ca:7f:2f:
         db:3e:4f:38:a5:d0:6e:46:c9:3f:9d:28:f3:98:36:1f:95:b7:
         4b:a9:7a:f9:7c:d5:2d:27:b6:37:08:4e:07:5a:d0:b7:a7:fe:
         a3:26:97:a7:ba:d3:bc:09:39:bf:6e:a5:6f:08:7a:44:94:26:
         9f:92:a6:73:38:fa:c9:a3:82:bc:a1:b5:c8:2f:45:cd:a1:59:
         89:9e:d1:61:eb:4a:d2:ad:06:ca:d9:4b:32:c9:72:aa:55:90:
         54:6c:f9:11:43:ac:cb:6f:cf:a5:64:a3:c9:74:36:7e:29:ba:
         6c:6e:f6:9c:2f:37:a8:a3:db:ee:91:ab:27:9d:0c:38:39:7d:
         30:a4:5a:38:07:5c:e1:f5:18:fc:36:20:79:04:bc:0e:54:ad:
         ae:ea:5b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:37 2025 by rpki-client