Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/77570FAC77508AD3070A2732DBD19271C2614647.cer
File:                     77570FAC77508AD3070A2732DBD19271C2614647.cer (raw, json)
Hash identifier:          0yYVSnFE3YdqxB6N6BnQW154JG2KdF+gfdW6lXPRnmc=
Subject key identifier:   77:57:0F:AC:77:50:8A:D3:07:0A:27:32:DB:D1:92:71:C2:61:46:47
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3BE54D5B0F1ACCF0644BD3EC5845670F1808FD31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/77570FAC77508AD3070A2732DBD19271C2614647.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 08 Feb 2025 22:46:40 +0000
Certificate not after:    Sat 07 Feb 2026 22:51:40 +0000
Subordinate resources:    AS: 262820
                          IP: 138.117.120.0/22
                          IP: 186.251.0.0/21
                          IP: 2804:288::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e5:4d:5b:0f:1a:cc:f0:64:4b:d3:ec:58:45:67:0f:18:08:fd:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  8 22:46:40 2025 GMT
            Not After : Feb  7 22:51:40 2026 GMT
        Subject: CN=77570FAC77508AD3070A2732DBD19271C2614647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b5:10:7c:b9:12:07:54:85:50:8a:76:7d:00:
                    68:1d:b6:86:95:01:80:fd:22:b6:a1:14:bd:b0:3c:
                    ba:1b:dc:51:20:c6:fa:ab:61:cc:24:80:ae:05:ec:
                    22:1a:55:c6:38:6d:c7:a3:cb:2e:cd:84:19:4d:8e:
                    96:1a:d5:55:e4:89:9b:b4:4e:9f:f5:9c:68:af:e1:
                    6f:1b:91:23:1b:04:40:5c:a8:63:10:6d:7f:6e:ed:
                    cf:67:17:81:86:ac:60:e1:b4:3d:35:ed:42:d8:26:
                    62:7f:b6:e4:a2:3e:7b:46:f6:40:97:c3:86:0b:8a:
                    31:d0:c1:1e:50:bf:08:55:a4:14:c3:dc:b6:24:13:
                    76:fd:27:83:51:04:2a:64:0b:e5:d7:7d:0e:5f:13:
                    95:d9:50:2c:fa:05:c7:2c:3a:2f:7f:3f:99:96:ff:
                    7a:a0:73:1e:15:2f:de:be:f2:b5:94:f6:f9:b2:7c:
                    11:22:58:e3:cc:d9:05:df:18:0c:d6:15:c8:78:c5:
                    a1:b4:fb:fa:28:06:c1:02:92:84:ab:27:b2:f6:bf:
                    a3:3f:54:49:e6:39:88:a6:2e:15:a9:7e:2f:5e:61:
                    db:07:48:29:e7:e0:98:be:b8:0c:b1:9c:9a:de:71:
                    88:da:29:2c:3f:fc:8b:b5:e7:3e:10:8f:a1:06:0b:
                    7a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:57:0F:AC:77:50:8A:D3:07:0A:27:32:DB:D1:92:71:C2:61:46:47
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7fpm6Ps7XcjgaG4JuA2gxV8nfkftGbVy79Yf4W7tHkRL/0/77570FAC77508AD3070A2732DBD19271C2614647.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.120.0/22
                  186.251.0.0/21
                IPv6:
                  2804:288::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262820

    Signature Algorithm: sha256WithRSAEncryption
         cd:d8:b2:66:4b:47:17:cb:2a:86:a8:1b:a3:89:5c:b1:a9:10:
         ec:49:02:6d:e5:cd:2e:0b:79:42:b5:2e:ce:66:4e:b6:7c:4d:
         8a:f7:58:29:2b:d6:cc:2b:07:c4:f7:50:b6:ad:e2:32:09:e2:
         96:6a:c8:aa:9f:2c:a4:c1:dc:cb:87:e9:60:0e:f9:42:40:9c:
         9f:83:9d:7b:2e:ee:b0:f4:1e:7a:60:ad:fc:8d:14:a5:47:9e:
         e9:57:70:2c:42:6e:54:ec:a5:b4:26:02:63:e1:8d:dd:9e:2a:
         48:bd:60:cb:df:b9:59:da:74:d4:cd:8b:c5:7f:ad:e2:0d:c9:
         a0:4a:de:d9:73:7c:03:4e:3d:13:5b:7e:eb:3a:d1:f6:39:a3:
         d6:60:d4:36:20:73:6f:cf:19:67:d4:eb:0c:82:98:a6:1c:bc:
         de:ae:af:14:00:b6:bc:ea:f4:3a:4b:73:65:20:c5:7e:bf:03:
         28:d5:21:88:f9:ce:8a:38:8d:db:24:c3:46:d0:9e:b5:86:d5:
         99:78:57:d8:06:24:ef:bb:d4:64:85:33:b3:40:d0:7c:1e:43:
         91:73:52:e2:db:f9:6b:bf:c8:9c:03:17:5a:79:8f:2f:d7:58:
         4b:bb:a6:ab:31:70:46:7a:d8:11:57:a0:2e:ca:39:26:0b:a7:
         62:4f:0e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:39:20 2025 by rpki-client