Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/778CA68DB3D9CB5F6CB90E4ACE65F99873BFF561.cer
File:                     778CA68DB3D9CB5F6CB90E4ACE65F99873BFF561.cer (raw, json)
Hash identifier:          x9zi79LSaxlgWadWQVHGg7Ps0Qh0sJJXqhhmD6dvkk0=
Subject key identifier:   77:8C:A6:8D:B3:D9:CB:5F:6C:B9:0E:4A:CE:65:F9:98:73:BF:F5:61
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6EDBEDF64E95262A429CAC9D4BEA3E08540539F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/778CA68DB3D9CB5F6CB90E4ACE65F99873BFF561.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Dec 2024 14:54:11 +0000
Certificate not after:    Mon 15 Dec 2025 14:59:11 +0000
Subordinate resources:    AS: 28246
                          IP: 187.1.32.0/20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:db:ed:f6:4e:95:26:2a:42:9c:ac:9d:4b:ea:3e:08:54:05:39:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 16 14:54:11 2024 GMT
            Not After : Dec 15 14:59:11 2025 GMT
        Subject: CN=778CA68DB3D9CB5F6CB90E4ACE65F99873BFF561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1a:9b:4c:4b:ab:18:dd:5f:1e:5d:f2:e2:79:
                    f6:71:fc:27:04:6b:97:68:12:44:c8:c4:54:be:24:
                    9d:a2:c6:cd:87:33:58:81:3a:8a:c6:50:c4:fa:b2:
                    0e:72:13:88:a0:e5:c0:39:bc:26:1d:e9:d5:a0:08:
                    f7:5e:2d:d8:1f:98:5c:ad:86:23:11:b8:35:05:c8:
                    2d:47:c6:46:4f:89:1e:d6:08:80:5f:fe:6f:7f:12:
                    bc:36:ad:69:f1:25:42:90:f3:e0:72:7a:a4:3f:5b:
                    ee:26:83:38:34:b8:86:31:57:04:c6:b0:9d:ad:d9:
                    53:a7:ba:14:52:6c:7e:83:e6:14:c9:e6:c0:51:40:
                    d6:59:a2:33:5a:64:0c:6c:39:2a:5e:0a:6d:32:fa:
                    f0:84:fd:06:3f:ad:7a:eb:62:c2:dd:26:c0:23:7e:
                    2d:e9:23:5c:29:89:a5:4a:aa:cd:74:a5:b3:c9:9d:
                    7f:00:7e:b8:2b:b7:f6:c0:91:3a:9e:ed:95:59:8f:
                    80:7b:c6:6f:ff:44:da:a1:97:e2:ec:16:92:d6:d9:
                    de:ec:84:7c:b6:33:64:2b:16:cf:e3:f7:39:f2:39:
                    23:c0:0f:c5:50:7f:3f:83:c3:3d:a4:e6:5c:ee:17:
                    47:1d:2c:d2:f4:ec:da:dc:0b:84:59:6d:c0:82:82:
                    d2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:8C:A6:8D:B3:D9:CB:5F:6C:B9:0E:4A:CE:65:F9:98:73:BF:F5:61
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/778CA68DB3D9CB5F6CB90E4ACE65F99873BFF561.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.32.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28246

    Signature Algorithm: sha256WithRSAEncryption
         0b:6a:0b:bc:ef:58:e7:47:4a:7a:b9:b2:df:25:d5:b7:c5:7c:
         29:5a:56:df:1e:c7:df:1e:ab:7a:cc:ef:2b:9c:78:c4:2b:be:
         c1:e0:d3:d5:2d:1a:ec:54:e2:e9:98:ab:38:27:25:b5:84:33:
         6b:79:5b:69:fe:a3:cc:a6:03:a4:b9:c4:4f:7f:3a:1a:a7:89:
         e4:b3:d5:34:da:9b:39:1e:c0:a8:f1:ff:91:3d:12:ea:b9:41:
         12:8a:f1:fb:42:5e:6a:f0:f0:05:80:8a:14:95:aa:c4:70:9d:
         8b:5e:aa:5c:8c:b2:39:3d:e1:c8:f9:fc:15:69:ec:a1:54:c1:
         c5:1c:77:64:51:58:d7:d5:30:e2:84:4c:18:ee:a5:3f:27:90:
         b7:30:86:73:c9:f8:72:b0:9a:60:7d:70:16:ce:f8:49:d8:7e:
         81:4a:07:46:9b:8a:27:94:68:1e:a6:31:36:16:f0:06:13:f3:
         60:bc:ca:90:4a:3e:a9:12:cd:3d:c6:d6:6d:04:75:12:65:b8:
         50:e9:15:77:69:7b:ad:9d:44:7a:88:2a:e0:5e:43:9c:42:a0:
         c8:d4:2d:7f:c9:c9:47:ee:a7:8e:82:7d:c3:aa:d9:6c:e0:23:
         9c:e4:e8:20:ff:99:ee:80:29:be:55:95:26:75:c5:71:cf:a1:
         13:e0:96:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:27:40 2025 by rpki-client