Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7D1527096D95580BD6D2E62AA751B342A8ACE2C3.cer
File:                     7D1527096D95580BD6D2E62AA751B342A8ACE2C3.cer (raw, json)
Hash identifier:          cYQ4N5sZUlBLAAjiN8zDg5c+/WfYJ+ibe/eIbAXrMtY=
Subject key identifier:   7D:15:27:09:6D:95:58:0B:D6:D2:E6:2A:A7:51:B3:42:A8:AC:E2:C3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       22354E981F9627DAD1237F0AED2AC8742FA35514
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/7D1527096D95580BD6D2E62AA751B342A8ACE2C3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Feb 2025 00:51:45 +0000
Certificate not after:    Wed 11 Feb 2026 00:56:45 +0000
Subordinate resources:    AS: 52870
                          IP: 177.128.120.0/22
                          IP: 200.49.28.0/22
                          IP: 2804:594c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:35:4e:98:1f:96:27:da:d1:23:7f:0a:ed:2a:c8:74:2f:a3:55:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 12 00:51:45 2025 GMT
            Not After : Feb 11 00:56:45 2026 GMT
        Subject: CN=7D1527096D95580BD6D2E62AA751B342A8ACE2C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c0:85:37:75:f9:e6:8d:e7:9b:59:0c:af:d0:
                    6b:20:46:8a:94:ab:62:62:2f:dd:a5:7d:f4:65:3c:
                    ad:4a:39:85:2d:88:3e:a1:a0:6c:47:fa:7b:e8:2d:
                    f7:3e:49:37:6d:18:4e:aa:d4:cf:ff:39:71:ef:6b:
                    19:b5:cf:95:5f:c6:91:29:2e:63:0f:ad:c5:9e:a1:
                    57:0d:f3:06:29:bb:80:42:8d:b5:ad:60:90:79:1e:
                    75:f3:f9:35:8c:c5:54:a2:ba:30:db:97:cf:93:79:
                    d7:67:78:9e:b1:e5:f5:0c:37:b3:ff:54:fe:50:9a:
                    53:1d:ec:46:45:f9:74:f0:28:a1:e1:f9:52:2e:90:
                    e7:a6:57:1f:e0:f4:f3:dc:a7:77:f1:22:6c:1f:7a:
                    4b:84:5b:bf:88:a5:b3:fb:4c:99:50:69:31:c2:8a:
                    41:41:d4:75:dd:91:74:3b:df:cc:86:25:c3:b3:1c:
                    8c:49:9d:d4:19:6f:54:46:8b:b3:35:60:2e:28:d6:
                    52:e4:97:7e:c4:8b:63:f3:da:0a:62:df:a6:27:ba:
                    8c:65:b1:45:e3:84:d5:ea:77:aa:b0:ec:e1:ca:b6:
                    76:c7:24:64:2d:e6:22:2b:7a:66:12:cc:2e:a9:49:
                    4c:18:9a:7d:02:90:c5:8c:0c:13:e2:ac:cf:b8:ad:
                    d1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:15:27:09:6D:95:58:0B:D6:D2:E6:2A:A7:51:B3:42:A8:AC:E2:C3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C7rwGAyxckSYh7HeS7HKMvjWHkWP3ERdQ91Ndxyfpxf4/0/7D1527096D95580BD6D2E62AA751B342A8ACE2C3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.120.0/22
                  200.49.28.0/22
                IPv6:
                  2804:594c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52870

    Signature Algorithm: sha256WithRSAEncryption
         45:b8:1c:90:bf:7a:89:02:d5:c8:27:44:26:41:23:df:66:98:
         49:d7:37:c3:90:2a:d5:20:e6:75:d7:bd:2d:19:0f:33:7a:0a:
         ab:85:ea:b3:64:9a:49:55:ad:f2:ec:20:61:99:9f:db:fa:ea:
         54:b6:8b:92:a2:a9:f2:23:06:d2:aa:ff:1c:29:04:16:87:ca:
         5a:75:05:c4:2d:f2:89:91:14:b4:4b:8c:e1:cb:ed:88:0f:50:
         c6:08:41:f4:7b:42:43:67:74:2d:1e:1c:26:aa:a3:dd:93:42:
         fd:dc:2b:6c:87:75:e3:6f:b8:df:38:44:7b:cd:73:1d:54:57:
         e3:48:06:76:00:04:d0:ea:80:64:8a:35:33:72:3a:46:ac:71:
         fe:d5:4b:77:ca:19:90:ae:e3:a4:bf:1e:f3:4d:cd:a0:50:14:
         62:a5:a8:84:46:5f:d9:bb:f0:36:4d:e2:79:5a:94:18:4c:8a:
         5b:3a:fb:3d:b0:58:84:7a:86:15:ae:32:d9:b9:8e:56:dd:cc:
         65:8f:67:f9:ce:30:74:94:19:25:fb:f0:8e:8e:82:22:6d:8b:
         7b:fa:b1:95:c6:fc:ca:87:d6:23:6b:60:cd:d6:a4:ff:e5:30:
         98:2c:bb:f5:66:9a:7e:4a:24:6b:fd:83:98:e1:61:b5:f9:17:
         b8:67:57:a7
-----BEGIN CERTIFICATE-----
MIIGNjCCBR6gAwIBAgIUIjVOmB+WJ9rRI38K7SrIdC+jVRQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAyMTIwMDUxNDVaFw0yNjAyMTEwMDU2NDVaMDMxMTAvBgNV
BAMTKDdEMTUyNzA5NkQ5NTU4MEJENkQyRTYyQUE3NTFCMzQyQThBQ0UyQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKwIU3dfnmjeebWQyv0GsgRoqU
q2JiL92lffRlPK1KOYUtiD6hoGxH+nvoLfc+STdtGE6q1M//OXHvaxm1z5VfxpEp
LmMPrcWeoVcN8wYpu4BCjbWtYJB5HnXz+TWMxVSiujDbl8+TeddneJ6x5fUMN7P/
VP5QmlMd7EZF+XTwKKHh+VIukOemVx/g9PPcp3fxImwfekuEW7+IpbP7TJlQaTHC
ikFB1HXdkXQ738yGJcOzHIxJndQZb1RGi7M1YC4o1lLkl37Ei2Pz2gpi36Ynuoxl
sUXjhNXqd6qw7OHKtnbHJGQt5iIremYSzC6pSUwYmn0CkMWMDBPirM+4rdEJAgMB
AAGjggNAMIIDPDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR9FScJbZVYC9bS
5iqnUbNCqKziwzAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vQzdy
d0dBeXhja1NZaDdIZVM3SEtNdmpXSGtXUDNFUmRROTFOZHh5ZnB4ZjQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0M3
cndHQXl4Y2tTWWg3SGVTN0hLTXZqV0hrV1AzRVJkUTkxTmR4eWZweGY0LzAvN0Qx
NTI3MDk2RDk1NTgwQkQ2RDJFNjJBQTc1MUIzNDJBOEFDRTJDMy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEH
AQH/BCUwIzASBAIAATAMAwQCsYB4AwQCyDEcMA0EAgACMAcDBQAoBFlMMBoGCCsG
AQUFBwEIAQH/BAswCaAHMAUCAwDOhjANBgkqhkiG9w0BAQsFAAOCAQEARbgckL96
iQLVyCdEJkEj32aYSdc3w5Aq1SDmdde9LRkPM3oKq4Xqs2SaSVWt8uwgYZmf2/rq
VLaLkqKp8iMG0qr/HCkEFofKWnUFxC3yiZEUtEuM4cvtiA9QxghB9HtCQ2d0LR4c
Jqqj3ZNC/dwrbId142+43zhEe81zHVRX40gGdgAE0OqAZIo1M3I6Rqxx/tVLd8oZ
kK7jpL8e803NoFAUYqWohEZf2bvwNk3ieVqUGEyKWzr7PbBYhHqGFa4y2bmOVt3M
ZY9n+c4wdJQZJfvwjo6CIm2Le/qxlcb8yofWI2tgzdak/+UwmCy79Waafkoka/2D
mOFhtfkXuGdXpw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:33 2025 by rpki-client