Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16.cer
File:                     7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16.cer (raw, json)
Hash identifier:          zZfGWu06xY8tj1kWtIeG7Sh3xr3lYsGzRPd6rfhLMIg=
Subject key identifier:   7C:FB:4C:B8:D8:AD:64:B7:57:F3:3E:83:AD:9B:3C:20:B7:4A:3B:16
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6E91352550C1CA785BFC738BF95651DE13681CDA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/1/7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Mar 2025 01:54:55 +0000
Certificate not after:    Tue 24 Mar 2026 01:59:55 +0000
Subordinate resources:    AS: 268847
                          IP: 45.173.252.0/22
                          IP: 2804:5b78::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:91:35:25:50:c1:ca:78:5b:fc:73:8b:f9:56:51:de:13:68:1c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 25 01:54:55 2025 GMT
            Not After : Mar 24 01:59:55 2026 GMT
        Subject: CN=7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:79:53:03:20:b6:63:a0:a4:07:b7:62:de:
                    10:06:90:4f:06:11:65:1f:94:be:00:f1:af:02:90:
                    b4:ec:19:02:d0:1d:6e:88:27:39:ae:0d:02:db:35:
                    49:88:9b:c4:95:bb:06:de:b9:60:28:00:b7:c1:c0:
                    88:91:d7:4b:f9:cf:fa:22:59:c1:f6:50:14:e3:23:
                    bd:c4:c7:f8:98:a3:bd:cb:39:fa:82:76:2e:43:df:
                    78:fa:dc:50:60:29:cf:9f:fa:b1:02:b0:2d:8a:3f:
                    8d:69:df:48:84:35:52:33:5e:1e:7b:8e:ea:74:c9:
                    d6:d1:9d:ad:28:e5:3c:ca:80:10:3c:8e:00:e9:85:
                    0e:55:77:15:e7:29:ba:1d:d5:6f:13:95:4a:78:c4:
                    5b:59:4e:a6:64:da:38:d7:d2:d9:54:8b:69:05:74:
                    30:38:6f:52:dc:72:5b:50:d8:11:30:ec:86:a9:a8:
                    3f:12:b8:20:dc:92:09:c8:f4:da:6a:cd:d0:a9:c1:
                    63:02:2e:99:cf:47:6d:a8:4a:fa:93:6b:7f:4e:e2:
                    e4:f2:9b:dd:01:30:4d:36:dc:66:ba:b2:eb:27:1c:
                    03:91:dd:c7:3b:7f:b7:21:ca:0e:45:71:f9:f2:d4:
                    ca:3c:71:30:9b:28:9d:99:6f:98:48:dc:5c:ef:9f:
                    7e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:FB:4C:B8:D8:AD:64:B7:57:F3:3E:83:AD:9B:3C:20:B7:4A:3B:16
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CBUKq4mWRwEGZZ943jyANuJ35HQyDmRrcbLUcSnwcguL/1/7CFB4CB8D8AD64B757F33E83AD9B3C20B74A3B16.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.252.0/22
                IPv6:
                  2804:5b78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268847

    Signature Algorithm: sha256WithRSAEncryption
         93:e8:07:d2:06:2f:e0:94:ad:fe:b2:2d:da:d3:fb:6a:7f:7b:
         0b:ca:0a:4b:27:12:53:aa:ac:e1:f4:bf:1b:3e:72:8f:3b:44:
         8b:c7:1d:26:7b:e2:71:dc:82:c2:e7:02:08:a5:12:b8:16:dc:
         b1:e3:09:6f:ec:55:98:97:10:f7:69:81:d9:b0:1b:f6:3c:81:
         4f:9f:ae:70:17:db:d8:c5:af:1f:ac:e6:7d:49:d6:8d:dd:6c:
         eb:9a:90:f9:7a:aa:62:55:80:54:5c:60:a9:66:78:bf:bd:03:
         38:e2:e0:fe:b4:e8:9e:23:e7:8a:fe:ff:73:df:8f:b6:1d:10:
         72:4a:be:1c:79:19:7c:3c:c9:52:02:bf:ae:c2:b1:42:4d:04:
         2a:c0:6c:f3:53:90:11:93:2a:4e:69:21:51:f8:bb:36:a8:7b:
         96:d5:ce:44:70:c8:b3:eb:9c:9d:9b:b2:b2:68:8c:d7:1e:a4:
         bb:38:a0:4e:86:5b:d5:48:83:ca:87:fe:7f:a6:6b:50:f5:a5:
         e2:a2:c7:67:bc:5c:f5:7a:f7:33:ff:ea:2a:17:7c:4c:a0:97:
         b8:47:82:e3:d4:46:b0:66:d6:e0:c1:87:67:a9:b1:ef:9e:b4:
         6f:10:7d:f9:8b:37:54:e0:72:87:6c:19:c3:7a:ab:3a:ba:bf:
         a8:71:9f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:16 2025 by rpki-client