Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer
File:                     7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.cer (raw, json)
Hash identifier:          mRQwVP8IxE+wRZcIncdGvJX/F1/Ul3/n/5pwhma5brM=
Subject key identifier:   7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5CDFD4166871FE74FB10B180C254D2C455573728
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Feb 2025 18:57:48 +0000
Certificate not after:    Fri 06 Feb 2026 19:02:48 +0000
Subordinate resources:    AS: 52527
                          IP: 177.152.80.0/21
                          IP: 200.150.252.0/22
                          IP: 2804:dec::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:df:d4:16:68:71:fe:74:fb:10:b1:80:c2:54:d2:c4:55:57:37:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  7 18:57:48 2025 GMT
            Not After : Feb  6 19:02:48 2026 GMT
        Subject: CN=7AEB959150456EC1674E91E084F2C4EF5B1A7EB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:20:ff:ae:ef:53:61:17:f9:d5:9b:6e:13:c0:
                    c5:9d:62:4e:a2:bb:07:8e:db:a9:8f:ba:3b:d3:a0:
                    52:f9:33:d4:a0:4a:93:1e:e4:23:34:f2:3f:5e:68:
                    f4:d2:27:8b:14:47:55:e0:6b:18:f2:ca:04:97:45:
                    af:1e:be:77:60:fb:86:05:c9:04:ff:db:39:11:07:
                    8c:17:bc:f5:d2:12:b2:2d:b8:e0:16:da:a7:5c:74:
                    cc:e8:ec:79:df:ca:40:cc:8b:10:ee:ac:1a:de:34:
                    05:6e:23:b7:4b:e4:ee:fa:7b:44:58:94:a8:c7:45:
                    ff:3d:99:36:ba:5c:8c:93:ce:15:6f:1e:f4:47:6e:
                    ba:5e:9e:07:5a:f2:7a:38:32:e8:a6:b6:11:66:19:
                    3f:c9:72:c4:1b:b4:b9:4b:ae:4c:10:dd:e1:4a:6a:
                    ba:35:b5:ab:02:b2:66:4c:7b:f4:f7:ed:c7:96:4c:
                    a9:dc:2d:b5:06:82:9d:a4:81:a6:8c:d2:c6:b2:52:
                    da:1e:d4:0d:27:39:13:71:c7:30:83:36:26:24:16:
                    06:b9:6b:63:fc:0c:b3:2d:6e:54:66:45:d5:c2:1e:
                    97:7f:53:c5:61:68:63:c1:b0:99:de:d1:fa:b9:24:
                    14:c1:bd:ee:00:12:08:e1:a8:da:4f:16:5f:6b:0c:
                    54:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:EB:95:91:50:45:6E:C1:67:4E:91:E0:84:F2:C4:EF:5B:1A:7E:B4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HLXXHEh6R4BWABwZ6JtcRPiuKDQiNZfs7GY9WdeggZJJ/0/7AEB959150456EC1674E91E084F2C4EF5B1A7EB4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.80.0/21
                  200.150.252.0/22
                IPv6:
                  2804:dec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52527

    Signature Algorithm: sha256WithRSAEncryption
         9c:1d:f6:8a:05:df:5c:d5:51:3b:6b:a2:c7:b7:31:59:00:4e:
         83:48:0a:d1:0c:36:1e:c9:4d:f9:21:31:12:b0:30:53:8f:07:
         40:52:9e:23:5e:49:4a:64:c4:7d:ad:a5:3d:f2:22:1f:ae:56:
         e6:ea:f3:cd:b1:49:d3:b2:a4:02:39:0f:cd:72:ac:02:18:a2:
         97:77:c4:b5:67:58:e9:2c:11:58:ac:d5:62:67:73:22:22:9a:
         4d:8e:34:13:2f:d5:bd:56:71:26:5d:45:1e:bb:52:d6:0d:4e:
         28:eb:a4:38:31:96:77:34:39:99:9d:90:f6:4c:3b:6e:2e:32:
         49:c6:b8:cb:2b:c1:75:fe:e5:ee:4b:7c:23:c9:18:a7:da:cd:
         18:03:37:cc:c2:5a:f9:45:25:46:12:cc:0a:09:7f:b0:65:b6:
         97:8d:24:c5:84:04:6f:df:84:f3:9e:3e:18:83:97:a1:8c:bd:
         99:0f:06:6e:b4:70:78:97:f4:c5:73:35:b7:47:e4:67:55:36:
         03:cc:8c:68:70:57:4c:ed:fc:60:e3:65:0f:6c:b7:9f:d0:6a:
         9e:b4:d9:d5:ae:d1:17:7a:1b:3c:e5:62:c9:57:d4:16:58:85:
         5c:01:41:a0:70:5c:d5:6a:87:4b:34:16:fb:28:e2:8f:e0:58:
         8a:04:e4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:34:29 2025 by rpki-client