Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7CF11E9A95C22F0348D94EFA1A4E955DDE4E6D10.cer
File:                     7CF11E9A95C22F0348D94EFA1A4E955DDE4E6D10.cer (raw, json)
Hash identifier:          vWNea957u7zgnkPKdsHJXJc2PnGUf/zNhQzdBHV4vuI=
Subject key identifier:   7C:F1:1E:9A:95:C2:2F:03:48:D9:4E:FA:1A:4E:95:5D:DE:4E:6D:10
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       032E6DA4A80CA7D56CD0B400D722DADAADEF27BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/7CF11E9A95C22F0348D94EFA1A4E955DDE4E6D10.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Mar 2025 16:37:33 +0000
Certificate not after:    Tue 24 Mar 2026 16:42:33 +0000
Subordinate resources:    AS: 265138
                          IP: 143.208.72.0/22
                          IP: 2804:2b28::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:2e:6d:a4:a8:0c:a7:d5:6c:d0:b4:00:d7:22:da:da:ad:ef:27:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 25 16:37:33 2025 GMT
            Not After : Mar 24 16:42:33 2026 GMT
        Subject: CN=7CF11E9A95C22F0348D94EFA1A4E955DDE4E6D10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:70:f9:bf:1f:e6:f3:2a:c3:18:72:e4:dd:15:
                    14:02:69:a9:27:17:db:25:ab:10:35:e5:3e:9a:13:
                    4c:9d:2a:0a:23:e1:98:4c:76:c8:31:7b:ea:2f:69:
                    4a:c9:da:a5:c4:f6:12:31:30:96:e6:66:ea:96:6a:
                    c6:1a:45:5c:a6:d6:02:17:e4:86:72:3b:54:13:11:
                    87:8f:75:b2:cc:55:4f:e1:1a:8f:a1:e6:a5:4c:c8:
                    5a:f2:80:ec:a1:22:33:63:d5:35:de:a8:21:e7:71:
                    54:81:a3:80:50:1b:19:d6:df:bd:fe:06:3a:d7:1e:
                    51:a6:45:68:e0:2d:1d:3a:64:f4:33:c1:3b:3b:6d:
                    5a:53:b0:74:fa:b5:a1:64:35:80:ec:77:3a:a3:0b:
                    f6:e6:90:dc:47:b7:ab:04:fb:2c:16:31:7a:01:b6:
                    3d:99:96:c8:cf:91:fe:3d:2e:37:09:1c:d7:2d:47:
                    3e:b9:fd:12:b7:57:88:aa:cf:b3:63:44:a6:b1:f2:
                    c3:6a:e9:1f:ac:3e:b8:ea:f3:6d:bb:e6:a5:af:44:
                    1e:ae:95:72:f5:a4:60:ad:52:e7:32:28:39:a9:28:
                    61:35:80:b6:02:a7:17:48:05:22:db:6e:9d:0d:44:
                    e3:47:4e:2c:55:cb:5b:90:eb:dc:94:36:36:c9:8a:
                    de:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:F1:1E:9A:95:C2:2F:03:48:D9:4E:FA:1A:4E:95:5D:DE:4E:6D:10
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2kQ1ndqczByoXhWr2vvWnfzxMuyAZwpReh6RcUeMMveA/0/7CF11E9A95C22F0348D94EFA1A4E955DDE4E6D10.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.72.0/22
                IPv6:
                  2804:2b28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265138

    Signature Algorithm: sha256WithRSAEncryption
         91:6d:ff:68:9e:90:23:a2:76:03:38:40:93:3f:a2:a5:f1:64:
         bc:7c:44:9c:6c:bb:a4:fe:9a:81:ad:c8:8d:2f:a7:29:1a:a1:
         95:26:3f:33:3c:60:20:1d:c6:45:b9:55:3a:97:52:7e:19:ec:
         6e:2e:7d:81:03:c2:7f:4e:2f:13:18:2d:ce:1a:55:15:42:d5:
         73:88:35:bd:6c:e7:20:b7:72:dd:76:61:9c:9d:cd:67:2b:56:
         a2:dc:40:42:63:d5:93:f1:74:16:1e:0e:2f:95:5f:3d:2d:51:
         39:6d:dd:b1:98:40:09:38:04:98:07:00:33:84:17:be:af:e2:
         e7:9d:a5:d3:89:87:85:75:d3:a0:e7:2a:3b:b8:c6:e2:99:8a:
         69:b0:c5:00:03:82:b5:bd:29:e8:f6:8b:63:79:48:ad:a7:aa:
         35:bb:7d:62:76:b8:e6:ca:b2:38:50:13:a6:85:77:25:73:b1:
         02:5a:63:8c:cb:8d:1c:5a:33:bd:48:29:94:18:81:d8:9b:9c:
         6b:72:4a:43:74:00:fc:31:98:68:5c:56:a4:61:6f:5d:2b:a1:
         fd:3f:80:88:2e:32:4a:b0:5f:f4:89:7e:8e:4d:f7:8e:26:cd:
         96:b5:cb:23:6b:1f:2e:4c:ed:bb:3d:ba:ea:88:d3:a0:2b:5a:
         c8:78:4e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:38:16 2025 by rpki-client