Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer
File:                     7CD32787AF54793C40E640D59B41C4E38532BB54.cer (raw, json)
Hash identifier:          Y4UdDJ1Z3p251lZhgEXUWtlrbGskpf9rxOqu0QHzvFU=
Subject key identifier:   7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1B6DC2DA9ECD0309ABA3EEA604E483CFF2C39FF6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 07:54:43 +0000
Certificate not after:    Fri 06 Mar 2026 07:59:43 +0000
Subordinate resources:    AS: 267936
                          IP: 45.166.52.0/22
                          IP: 2804:5574::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6d:c2:da:9e:cd:03:09:ab:a3:ee:a6:04:e4:83:cf:f2:c3:9f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 07:54:43 2025 GMT
            Not After : Mar  6 07:59:43 2026 GMT
        Subject: CN=7CD32787AF54793C40E640D59B41C4E38532BB54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9a:44:a2:56:ab:af:42:ef:1c:32:ab:00:61:
                    1d:82:c8:e1:4b:db:8f:82:ed:90:2d:d0:d9:f2:a4:
                    e7:09:44:2f:c3:51:77:14:02:88:cd:0f:2e:f2:5b:
                    64:ee:2a:8c:cd:27:b0:76:96:a4:7a:0d:6c:5f:e2:
                    ab:4d:c8:86:d9:e9:0b:3e:87:ee:9f:c7:9c:30:dd:
                    69:31:da:31:0c:ba:2c:e6:69:10:cf:6f:c1:82:7d:
                    e2:22:28:bc:a4:30:ad:96:f1:23:d4:03:4d:6e:be:
                    69:6d:20:10:f7:7e:1f:93:90:41:60:04:80:49:93:
                    7b:43:84:49:82:d6:99:33:f2:e5:43:8f:05:fa:32:
                    b5:20:e2:43:4a:98:2c:0c:7e:67:1c:aa:64:07:0d:
                    b7:ff:fa:27:17:9e:bd:f1:16:58:6b:25:8c:8e:c0:
                    3f:00:19:18:c5:a0:78:1a:1d:28:a8:78:f9:ef:20:
                    23:26:94:72:5c:f4:51:06:49:64:d9:0b:00:24:72:
                    e8:63:13:8a:46:3d:d8:4b:d1:c8:13:36:9f:6a:8f:
                    db:0d:de:2c:7f:5f:82:8a:70:8b:ce:db:26:4b:e9:
                    0a:37:b9:45:3f:9f:a4:09:41:e7:42:1a:ab:48:18:
                    cd:cb:53:39:b3:86:6a:1c:6a:8f:0e:0d:00:5b:4c:
                    c4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.52.0/22
                IPv6:
                  2804:5574::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267936

    Signature Algorithm: sha256WithRSAEncryption
         18:eb:00:18:f1:19:13:27:11:87:3d:64:ee:ce:af:4a:1f:e0:
         f7:f5:54:81:b2:a3:91:0e:bd:25:b3:ff:99:c3:c7:26:b6:e1:
         a8:b4:6b:ba:e3:81:98:0c:bf:32:14:67:f3:8a:3d:54:6c:9a:
         03:3b:eb:9e:d7:cc:34:86:47:79:4f:ec:24:5a:14:28:e1:6d:
         4a:33:e7:25:d6:76:86:14:52:a8:16:09:95:55:2d:41:d1:d1:
         0d:12:ae:dd:42:e8:cb:c7:32:0f:3b:55:9a:db:e4:26:15:dc:
         32:66:14:26:3f:05:4d:b6:14:d1:63:f3:87:d1:ee:fe:ae:29:
         36:72:7e:f0:af:d2:93:f7:bc:0f:a4:15:5d:e4:c5:62:7c:2c:
         6a:75:da:cb:11:8b:60:4e:da:57:85:f9:36:99:ec:89:7d:7c:
         bc:fc:9e:4a:c9:62:e3:5f:2f:e9:95:70:5a:dc:64:fc:07:6c:
         ce:53:e3:73:57:50:e4:52:2e:93:53:dc:87:28:46:2d:89:93:
         7d:0f:7e:c8:59:27:53:10:7b:cb:73:7e:29:cf:fb:6d:e3:96:
         90:b7:7b:a8:7d:33:23:9b:99:f3:d4:ac:df:61:72:41:0f:83:
         25:5f:89:42:39:78:44:7c:53:06:8c:68:ba:01:d4:ae:da:16:
         c6:a8:0a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:40:02 2025 by rpki-client