Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7B8E1235434FD5859B1AF0FE61E3D03E968369A1.cer
File:                     7B8E1235434FD5859B1AF0FE61E3D03E968369A1.cer (raw, json)
Hash identifier:          F1ZU+nuzrU3F0fqB2jjRmLoi2N1rvJuMv6DHj4hBDPk=
Subject key identifier:   7B:8E:12:35:43:4F:D5:85:9B:1A:F0:FE:61:E3:D0:3E:96:83:69:A1
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3517429175DADB6846CA3FE96AB0A3EB0A334BD4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/7B8E1235434FD5859B1AF0FE61E3D03E968369A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Jan 2025 02:19:13 +0000
Certificate not after:    Tue 13 Jan 2026 02:24:13 +0000
Subordinate resources:    AS: 265121
                          IP: 143.208.116.0/22
                          IP: 2804:2ad4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:17:42:91:75:da:db:68:46:ca:3f:e9:6a:b0:a3:eb:0a:33:4b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 14 02:19:13 2025 GMT
            Not After : Jan 13 02:24:13 2026 GMT
        Subject: CN=7B8E1235434FD5859B1AF0FE61E3D03E968369A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:6f:fd:8d:4c:73:74:db:74:44:12:97:c8:
                    c0:9e:ff:61:1f:d9:35:a0:e6:4c:9b:33:86:ac:d6:
                    b0:38:ef:b1:04:ed:53:f3:10:60:8a:33:66:e0:eb:
                    0c:11:23:10:05:37:de:8f:10:a7:51:fd:f6:20:2e:
                    59:79:b7:d5:e1:f7:7a:45:5f:5f:08:2a:f6:13:56:
                    96:e4:f4:a8:89:6a:d3:d9:69:ad:5e:1a:f9:e1:c5:
                    12:6a:ab:cd:b7:17:47:6a:a7:5d:bb:5c:7c:53:ad:
                    0e:15:fb:fc:af:da:06:4a:1f:e2:5f:19:2f:02:0a:
                    fc:fa:41:e6:dc:a0:74:04:c6:ec:2e:9f:fa:d9:1f:
                    84:51:a0:35:71:be:17:0d:e4:2e:b4:93:fe:48:9a:
                    48:c9:28:10:47:bd:bd:23:69:ea:4d:3d:a0:37:f1:
                    4b:96:6f:84:19:8d:b6:bb:de:00:10:0a:6f:b1:12:
                    52:39:c0:0c:79:92:20:72:52:82:c7:64:c1:fd:f8:
                    f6:ec:fe:49:b7:3f:f3:51:fa:9e:b4:f3:1a:d0:4e:
                    7b:c5:ea:62:95:18:c0:31:07:0d:84:3b:b6:1e:b1:
                    26:64:fc:51:64:db:72:c3:91:e1:42:02:16:e1:6f:
                    cd:7f:d9:11:80:cd:f3:49:fa:52:0a:95:07:de:89:
                    6c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7B:8E:12:35:43:4F:D5:85:9B:1A:F0:FE:61:E3:D0:3E:96:83:69:A1
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8sC7fgj3nPDR1bGJVS1A6oBLJoZDg3UtxQvYpitM6HSX/0/7B8E1235434FD5859B1AF0FE61E3D03E968369A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.116.0/22
                IPv6:
                  2804:2ad4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265121

    Signature Algorithm: sha256WithRSAEncryption
         31:f9:a3:0f:0c:03:8b:a3:ca:34:12:00:43:cf:93:81:a0:85:
         60:f1:98:5e:75:b1:4c:b8:6c:ca:7d:2b:12:79:14:06:07:27:
         9e:ec:4f:5d:73:22:5b:7a:11:17:12:e0:84:97:c5:09:e2:51:
         10:24:db:22:87:3a:8b:ef:61:ac:1d:57:0c:fb:02:df:2d:6b:
         e4:a2:fa:9c:05:7c:ab:7b:d0:93:0c:32:62:68:8c:68:79:8e:
         35:56:ca:96:27:7e:f5:d1:22:5c:92:cb:97:12:48:09:11:d9:
         78:c5:d0:13:b2:a5:f2:d7:ba:23:5f:bd:73:d7:a3:eb:bb:b1:
         97:50:b6:24:b2:64:b7:ed:a3:8d:9d:83:77:6c:11:6d:7f:f0:
         23:c3:75:93:0c:73:5c:2e:7b:46:06:71:b1:0c:73:88:ab:72:
         93:c2:2b:9d:c8:e5:56:7f:b5:46:db:52:ab:00:7f:65:2c:df:
         45:77:41:0c:b8:ef:9b:40:28:03:64:30:2b:a1:cd:75:b4:f6:
         ad:ed:6d:73:04:1b:d6:65:ee:91:61:fd:a5:7d:99:d4:45:69:
         62:c4:ef:3f:fc:0a:ce:e3:16:56:e9:cb:62:b1:23:d0:65:2e:
         69:5b:61:2a:c5:b9:bd:44:19:b5:43:c3:7d:90:23:dd:7e:f7:
         f9:0a:9b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:15:42 2025 by rpki-client