Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/79B76923CA9A21155FD942CEC21E727585C5B2F7.cer
File:                     79B76923CA9A21155FD942CEC21E727585C5B2F7.cer (raw, json)
Hash identifier:          Dk+WLXh23RsSSkj9wfSQQ5ifQyxwwwugGp8YJCiQUOs=
Subject key identifier:   79:B7:69:23:CA:9A:21:15:5F:D9:42:CE:C2:1E:72:75:85:C5:B2:F7
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       14FEE78742011D4FFF1892444FC2AC1460580D87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/79B76923CA9A21155FD942CEC21E727585C5B2F7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Feb 2025 11:04:17 +0000
Certificate not after:    Wed 04 Feb 2026 11:09:17 +0000
Subordinate resources:    AS: 270929
                          IP: 186.26.96.0/22
                          IP: 2804:73a8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fe:e7:87:42:01:1d:4f:ff:18:92:44:4f:c2:ac:14:60:58:0d:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  5 11:04:17 2025 GMT
            Not After : Feb  4 11:09:17 2026 GMT
        Subject: CN=79B76923CA9A21155FD942CEC21E727585C5B2F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ba:fb:1a:ef:3f:51:8a:b6:43:38:ba:c9:11:
                    4a:3d:15:d6:e1:94:44:07:34:b7:7d:ef:4b:d7:45:
                    ca:a4:ac:9f:35:61:9e:13:9a:32:f4:6d:92:a4:82:
                    1c:3b:eb:bc:b8:84:4b:58:eb:c9:d5:37:a4:fc:a4:
                    6d:85:28:cd:21:c1:ec:b1:5a:13:07:8a:2c:1f:a3:
                    1e:1b:ab:d9:59:a6:24:3e:8d:91:d8:78:ee:7c:c9:
                    69:1a:69:9c:fd:2e:37:56:77:48:59:16:51:f0:55:
                    69:63:32:33:f5:87:c3:2c:17:7d:ad:57:df:3c:fd:
                    ee:ba:3f:f5:ec:20:45:85:61:5a:b0:ee:d9:71:60:
                    09:48:12:36:a9:dc:99:4d:ee:41:25:0f:b9:e7:47:
                    d5:33:fc:35:8c:25:67:24:e7:b3:63:9e:13:c5:0b:
                    04:34:b2:1f:e8:e1:57:f6:59:cf:97:5d:46:35:a1:
                    4f:de:2c:12:54:6f:c9:3a:03:8a:3d:be:80:94:4f:
                    b1:f1:cf:f7:ad:bd:18:a2:81:17:e7:60:ac:39:79:
                    d9:c7:32:c6:91:49:96:8b:53:8f:49:1f:6a:90:9a:
                    c7:21:e5:c8:48:d1:47:cf:1c:6d:93:4a:c0:78:18:
                    04:ec:50:9b:ab:83:65:91:1f:f9:a8:82:05:fc:c2:
                    3b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:B7:69:23:CA:9A:21:15:5F:D9:42:CE:C2:1E:72:75:85:C5:B2:F7
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7iJ3x1q7wJ12aX5y3BXWwkdvgghfQJNyc2vxuYVjQX9J/0/79B76923CA9A21155FD942CEC21E727585C5B2F7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.96.0/22
                IPv6:
                  2804:73a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270929

    Signature Algorithm: sha256WithRSAEncryption
         04:15:16:5c:62:c1:43:3b:a3:68:06:74:58:10:42:6e:a6:bf:
         60:22:41:76:b3:d0:16:5c:50:46:87:8f:14:25:08:75:70:0f:
         f9:fc:39:55:9e:e9:d7:08:32:3e:8d:7f:18:7e:e7:64:5d:32:
         2e:43:b4:65:a0:0f:97:9f:bb:d9:45:6c:4f:81:e9:1b:8c:c4:
         b9:40:b2:88:36:4f:c5:3e:48:c5:ef:fe:34:31:28:9d:e9:3f:
         80:e7:c6:6c:a8:60:5e:62:db:4f:cc:12:5f:da:1c:8c:e8:b5:
         f2:87:e2:a6:df:18:eb:5d:04:7f:b0:86:c5:32:e0:1a:b9:3a:
         e6:33:80:78:7f:f3:1f:d3:3c:67:af:00:14:02:2c:58:7d:93:
         25:e8:66:0c:77:0f:e9:c5:31:7d:23:64:dc:f4:a4:25:c8:83:
         39:3a:25:8c:f1:b8:65:f3:14:90:44:fa:1a:a7:ca:30:a1:0f:
         99:8f:f8:4e:58:b3:cb:94:88:a4:17:34:ff:fa:95:22:a6:80:
         55:3f:8c:6b:e1:c2:36:a3:d3:a6:6b:70:10:35:a0:81:ee:17:
         8e:67:3c:b6:0a:24:e9:49:be:e5:69:3b:fd:9b:40:a9:1a:2e:
         c8:30:44:ba:d3:92:07:0e:35:13:27:6a:d4:e7:a8:0f:5e:a9:
         16:08:41:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:26 2025 by rpki-client