Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7AF6D962033C5C1471A4F9C06C47A9A258571734.cer
File:                     7AF6D962033C5C1471A4F9C06C47A9A258571734.cer (raw, json)
Hash identifier:          pyr2bLGhaPAVcOaWa3zIvuoXEecwYaU/j54HVKbYScY=
Subject key identifier:   7A:F6:D9:62:03:3C:5C:14:71:A4:F9:C0:6C:47:A9:A2:58:57:17:34
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       53DE3C5D8191A05331076F7EA6492FD3D508000B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/7AF6D962033C5C1471A4F9C06C47A9A258571734.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Feb 2025 18:37:45 +0000
Certificate not after:    Thu 05 Feb 2026 18:42:45 +0000
Subordinate resources:    AS: 273748
                          IP: 2804:8bac::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:de:3c:5d:81:91:a0:53:31:07:6f:7e:a6:49:2f:d3:d5:08:00:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb  6 18:37:45 2025 GMT
            Not After : Feb  5 18:42:45 2026 GMT
        Subject: CN=7AF6D962033C5C1471A4F9C06C47A9A258571734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d6:e4:2d:b9:c4:00:9d:f2:54:5a:86:85:76:
                    03:a0:f3:5c:d3:c8:ec:db:3b:69:f7:19:2a:d1:b8:
                    80:34:09:85:03:a9:bb:25:2a:af:66:88:7f:4f:52:
                    9b:3e:79:26:50:be:38:36:87:5f:e8:a9:ec:4a:f8:
                    49:62:2a:98:29:2e:31:07:c9:44:cc:3d:c2:05:c9:
                    db:f8:b7:11:a0:fd:8e:6e:d9:c9:1c:23:fa:9e:09:
                    aa:74:9d:0f:d6:2c:be:0b:bf:20:4b:1c:49:d0:c0:
                    c0:b2:d2:94:1e:fc:89:5a:b2:91:4d:0f:fa:60:ee:
                    e6:75:aa:7c:7f:96:ab:e0:c0:63:62:f4:13:74:92:
                    de:18:7d:a1:b5:f8:48:ff:1a:09:8b:6f:94:97:48:
                    85:b4:5d:59:e3:a5:8e:ad:f4:77:8c:66:f4:ed:ed:
                    77:96:00:7c:b0:f9:69:4d:8d:9e:6e:cb:af:cc:e2:
                    c5:f2:f7:ad:b0:3e:8f:05:08:54:60:5e:2e:b9:c1:
                    cf:6f:a0:b3:e6:8e:72:79:5a:fb:74:8b:30:be:ed:
                    8f:b3:d7:02:a9:e3:1d:fd:ce:47:d0:86:a8:4b:23:
                    83:c0:f0:ca:de:66:84:94:90:ca:47:97:97:ce:52:
                    64:e4:d4:85:af:5d:a2:de:3f:24:81:89:0b:23:55:
                    a9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:F6:D9:62:03:3C:5C:14:71:A4:F9:C0:6C:47:A9:A2:58:57:17:34
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6TNXVDp2GKcNQvoT13ryNogD1uzFs6x3WDeegCxY5uaf/0/7AF6D962033C5C1471A4F9C06C47A9A258571734.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8bac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273748

    Signature Algorithm: sha256WithRSAEncryption
         40:b4:43:45:f2:2c:8f:d1:f9:66:58:1a:58:ea:5d:c1:5f:6b:
         bf:27:93:48:55:ab:35:ba:d6:7a:a8:80:17:51:64:b7:6b:c6:
         f5:6a:04:6d:ec:e2:7f:37:3b:65:30:39:fe:20:ff:e1:5d:d6:
         4d:80:b1:de:ce:c9:40:bb:4f:cf:4d:9f:2d:cc:74:d8:17:e4:
         b7:39:e4:0a:a3:75:cb:a9:33:82:39:e3:27:90:d3:26:e7:b9:
         b2:cb:f3:89:09:8b:38:66:d9:ed:12:15:6d:f5:36:6d:86:2a:
         0c:07:2e:21:20:2c:2e:6d:4c:97:4e:21:4f:a4:1f:2f:cd:03:
         69:f5:3b:63:8d:3d:d5:66:04:ee:0d:6a:28:39:60:3a:e1:6d:
         e9:47:aa:07:06:07:31:75:60:7d:5a:17:9e:67:c3:28:50:4b:
         20:60:a5:fb:f5:07:20:12:be:d8:43:4c:2f:8d:ce:f0:1a:de:
         1b:28:21:30:e7:0c:aa:76:fa:9e:98:5d:fc:09:ad:5c:80:15:
         9c:d7:84:f6:6c:c2:c0:f1:7d:76:65:77:79:d9:a1:82:31:6e:
         38:53:74:c9:69:d6:83:42:dc:dc:e3:ce:2e:e7:dc:de:82:ca:
         61:e9:81:84:60:cc:00:04:71:3d:74:32:29:ca:2c:6f:49:f3:
         d7:14:e9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:51:35 2025 by rpki-client