Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7620726C9318E6BD05E045B45FF2E09CDD039EE8.cer
File:                     7620726C9318E6BD05E045B45FF2E09CDD039EE8.cer (raw, json)
Hash identifier:          bnh90kdiOdDNGg7ieEBtIUsdGngbgDXu8aVIbOmnDbc=
Subject key identifier:   76:20:72:6C:93:18:E6:BD:05:E0:45:B4:5F:F2:E0:9C:DD:03:9E:E8
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5DF265667124183A3FF7905EC12F796560BBB55C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/0/7620726C9318E6BD05E045B45FF2E09CDD039EE8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 23 Mar 2025 20:04:37 +0000
Certificate not after:    Sun 22 Mar 2026 20:09:37 +0000
Subordinate resources:    AS: 268636
                          IP: 45.164.180.0/22
                          IP: 2804:543c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f2:65:66:71:24:18:3a:3f:f7:90:5e:c1:2f:79:65:60:bb:b5:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 23 20:04:37 2025 GMT
            Not After : Mar 22 20:09:37 2026 GMT
        Subject: CN=7620726C9318E6BD05E045B45FF2E09CDD039EE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:41:b7:81:ce:75:3f:e8:29:62:9a:84:bb:
                    8c:d8:51:d0:ca:87:d5:20:6a:88:31:95:ec:2c:a2:
                    5d:d8:d1:83:9f:87:ac:37:b4:4e:37:4d:f2:c3:9e:
                    b7:e0:05:e1:22:e2:cf:31:82:c3:f2:78:82:6c:06:
                    50:4c:ad:e8:5d:19:d9:ca:79:0b:f0:4c:d2:48:9c:
                    49:da:f5:99:7a:c1:c1:18:5b:22:4b:dc:9a:63:b0:
                    97:8b:3a:74:3c:12:d1:95:47:c1:ac:f7:85:bc:6a:
                    9d:75:c0:ba:ee:b8:db:a9:2b:4b:78:28:e3:75:10:
                    96:a9:34:86:5e:17:fe:59:d9:57:6b:ba:0b:f1:fd:
                    7a:b5:0c:40:eb:eb:da:86:27:bd:88:bb:7d:d8:93:
                    e1:ab:4b:03:32:d2:20:c3:42:e4:e0:f5:c5:e7:ff:
                    bc:8d:6f:8b:67:3e:26:3a:1a:7a:f0:bc:b8:9b:38:
                    ef:06:b0:98:4f:34:e4:28:8e:67:59:dd:c6:da:bf:
                    ec:96:e1:a5:7f:a2:07:ec:ff:e7:8d:ad:ce:25:78:
                    55:cd:7d:cf:6e:af:18:ec:38:8c:59:c9:7d:c8:82:
                    76:a2:1b:83:1d:fd:26:42:24:5c:1e:56:9a:50:61:
                    f6:62:66:8b:6a:a3:07:2f:34:11:30:27:a9:91:a6:
                    c6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                76:20:72:6C:93:18:E6:BD:05:E0:45:B4:5F:F2:E0:9C:DD:03:9E:E8
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ArZhjjD2CzfDTzPv7hhtgYMToRBZocWFuMP7tF83knPD/0/7620726C9318E6BD05E045B45FF2E09CDD039EE8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.180.0/22
                IPv6:
                  2804:543c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268636

    Signature Algorithm: sha256WithRSAEncryption
         5b:dd:6f:e0:24:2a:77:43:7e:ba:fc:0d:0e:57:5c:79:c3:dd:
         47:98:56:2c:1c:fb:d0:0f:b0:d4:04:cd:b8:1c:2b:11:a3:60:
         31:b9:90:ea:8f:4a:11:26:3a:b7:41:2b:eb:34:72:da:88:1b:
         46:3a:a7:83:69:92:5e:54:d0:3f:4e:e4:f8:3e:b2:56:01:2c:
         9e:02:3b:0a:b0:9a:db:da:76:43:3e:25:7f:98:dd:83:0f:1d:
         23:3f:21:1e:17:95:04:69:8f:0a:a8:4d:ed:ec:97:a8:7c:7b:
         6b:03:9a:91:f0:3c:72:62:a1:96:f8:38:c8:e3:61:3c:55:64:
         09:11:b1:1a:2f:bb:05:0b:fd:94:3e:c6:69:96:c4:c9:35:2a:
         74:3d:fd:4f:36:2e:98:09:26:73:0a:d2:74:ae:18:d2:17:c8:
         6e:14:65:e3:15:c9:68:80:21:18:bf:23:3a:15:e8:0e:fd:43:
         0b:37:73:95:0d:40:aa:e1:7f:5f:aa:48:95:04:5f:15:a8:e9:
         92:1d:ce:c5:69:ad:52:b9:5c:47:8d:98:53:be:b5:4e:f3:e6:
         cc:7c:98:7e:fa:ea:ed:bf:db:71:92:c8:45:18:26:2e:e0:2c:
         4d:20:4e:8d:cf:7b:19:de:61:a4:f7:30:1e:c5:20:3b:51:ea:
         3d:c1:f1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:36 2025 by rpki-client