Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.cer
File:                     72D52900C8D2771A558290A7492B6EAD982F6B8E.cer (raw, json)
Hash identifier:          xuR4iOauh9pbwvT/engE+7KJwgnzczmPBOEXU6TyZTw=
Subject key identifier:   72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5BF41A7E172127C2EBA3023A2530213E678C4347
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Mar 2025 14:01:23 +0000
Certificate not after:    Thu 05 Mar 2026 14:06:23 +0000
Subordinate resources:    AS: 28160
                          IP: 187.62.144.0/20
                          IP: 2804:3e00::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f4:1a:7e:17:21:27:c2:eb:a3:02:3a:25:30:21:3e:67:8c:43:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  6 14:01:23 2025 GMT
            Not After : Mar  5 14:06:23 2026 GMT
        Subject: CN=72D52900C8D2771A558290A7492B6EAD982F6B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:88:dd:3f:3c:ec:bb:73:96:0b:1d:f4:d9:5d:
                    c8:62:c8:c0:71:66:46:d3:4c:60:0f:98:a5:a2:3e:
                    0d:95:e5:72:b6:03:58:f8:e8:1e:48:b3:d3:42:e1:
                    4c:5b:f7:50:ad:5b:c4:2d:74:07:a6:a0:0b:2a:40:
                    d5:48:e9:38:65:1b:40:53:42:be:e0:45:6a:55:1f:
                    d5:bf:25:b9:dc:ac:00:7c:cb:a7:2c:33:55:c9:a5:
                    90:3a:77:78:49:f7:57:0b:98:0a:68:1c:38:dd:67:
                    c2:8e:06:26:e3:28:49:67:a9:f5:02:b5:d9:e9:e2:
                    b2:50:92:e9:e9:b9:0d:08:0d:d7:fe:3f:cf:0a:41:
                    72:6b:4e:fd:ad:9b:e8:a8:a0:f6:b7:8b:74:6d:ad:
                    71:28:d1:e3:c8:1b:03:a1:cb:9f:13:cf:2a:de:2d:
                    b0:88:3d:34:a7:16:31:36:6d:33:c8:c8:7e:74:b4:
                    18:2a:50:aa:cc:9a:2d:e3:ef:b5:c3:75:e9:56:98:
                    44:cb:28:ee:8c:70:41:22:e7:21:ce:19:8b:92:c9:
                    c8:71:b8:8a:65:b4:00:01:a8:c5:ac:e6:df:84:a2:
                    94:97:02:a7:4b:55:ad:8b:dc:ac:b9:83:ee:38:e5:
                    f5:63:5c:0d:45:3e:99:41:63:b2:57:82:ad:65:59:
                    a8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:D5:29:00:C8:D2:77:1A:55:82:90:A7:49:2B:6E:AD:98:2F:6B:8E
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CvWjUr1SygUCmqZrYEZL2KJzigoERyQg4dAqmafLaAUt/1/72D52900C8D2771A558290A7492B6EAD982F6B8E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.62.144.0/20
                IPv6:
                  2804:3e00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28160

    Signature Algorithm: sha256WithRSAEncryption
         9a:31:02:88:c6:29:e8:3b:18:b7:0c:23:2e:21:51:26:fb:ae:
         ea:c0:34:9c:77:83:fa:76:66:b6:2c:6f:02:29:55:2a:1a:e4:
         2e:0f:c4:e4:d3:05:7d:0a:1c:da:8e:ef:d6:55:a5:6e:79:f7:
         51:dd:1e:b0:f6:24:82:ed:9a:94:41:54:fb:9b:e6:df:ff:b5:
         99:13:e7:fe:da:d4:b9:a9:81:cb:09:eb:dc:e1:e0:81:a0:c0:
         91:37:05:60:38:d3:1a:82:62:1d:84:39:f5:56:5c:1a:40:06:
         1a:37:1f:41:e3:b2:a3:07:66:9f:9a:22:39:88:3e:c7:17:50:
         56:5e:23:5b:c8:16:5a:f2:b9:cb:b7:62:37:7f:1e:82:cb:67:
         cc:a1:d7:88:7a:89:ea:ca:25:72:d8:68:53:19:3a:20:3b:a1:
         e3:c2:5e:cc:28:af:1a:71:6f:18:3a:15:4d:f4:78:e4:0b:6b:
         78:69:28:f3:f3:fa:58:7f:3b:48:53:4b:c0:0e:ea:23:1f:17:
         d5:cb:b6:0f:90:90:ee:e4:10:e0:70:24:50:8c:16:bd:84:1c:
         98:a0:02:50:36:e0:48:d2:1d:e2:41:36:40:83:db:37:39:bd:
         dc:05:cf:85:78:fb:5c:f7:f3:41:43:0a:b5:25:0b:b0:76:31:
         e4:7d:fe:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:05:41 2025 by rpki-client