Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7DD9337D328A8B57E99FCF1A8378EC259B235013.cer
File:                     7DD9337D328A8B57E99FCF1A8378EC259B235013.cer (raw, json)
Hash identifier:          gMPCh12spgFK4E13dR2FI+/E1/sqSO1VpchLbOQdud0=
Subject key identifier:   7D:D9:33:7D:32:8A:8B:57:E9:9F:CF:1A:83:78:EC:25:9B:23:50:13
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       5418066165433EAC8833821B9DFB8C5309F9D6D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/1/7DD9337D328A8B57E99FCF1A8378EC259B235013.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Dec 2024 15:10:07 +0000
Certificate not after:    Tue 02 Dec 2025 15:15:07 +0000
Subordinate resources:    AS: 264390
                          IP: 131.161.156.0/22
                          IP: 170.246.32.0/22
                          IP: 2804:1dbc::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:18:06:61:65:43:3e:ac:88:33:82:1b:9d:fb:8c:53:09:f9:d6:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  3 15:10:07 2024 GMT
            Not After : Dec  2 15:15:07 2025 GMT
        Subject: CN=7DD9337D328A8B57E99FCF1A8378EC259B235013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6a:1e:7e:8d:3f:0c:53:c6:ad:bb:7e:59:69:
                    82:e8:6c:41:cb:52:98:64:e1:0e:63:c6:f9:a3:72:
                    2f:96:bf:f8:6d:cc:20:be:d3:de:4a:1f:18:fd:a0:
                    14:b8:2a:e1:eb:cd:ea:d6:b1:24:61:87:d9:7c:0d:
                    c8:16:0c:be:6b:0e:9a:1e:fa:2e:89:6a:5f:9e:d0:
                    16:c0:0f:36:60:7a:c1:29:f6:07:c5:83:ee:26:1c:
                    d2:be:96:c4:b2:e5:9f:62:1f:92:ad:aa:19:0a:c3:
                    1f:1a:e9:5a:b9:84:95:8e:62:b7:9f:36:dd:4c:a5:
                    0e:51:5c:68:71:8a:cf:78:66:9d:cc:f2:82:72:86:
                    2e:04:a3:6b:ac:38:b4:db:8b:a7:73:6f:f0:e3:fb:
                    e0:9d:23:26:76:e0:5f:b2:ca:93:a7:15:a6:d5:85:
                    3f:59:b2:32:f1:f3:12:82:e6:96:42:88:22:01:1e:
                    56:3f:66:2f:a3:81:8b:9f:a9:e8:95:e2:bd:6f:fa:
                    46:84:53:47:e7:4d:cf:f2:4c:1c:33:8e:d5:61:8c:
                    df:6c:65:db:54:1c:ad:30:1a:73:09:f5:cb:c5:1f:
                    27:01:07:99:b7:11:48:7a:8e:f9:ee:c8:6b:0f:3d:
                    48:88:42:76:4d:0f:ee:49:bb:98:87:09:0a:27:f8:
                    7a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7D:D9:33:7D:32:8A:8B:57:E9:9F:CF:1A:83:78:EC:25:9B:23:50:13
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6qbLMkv9NeoEhgbgECEYMZ85Ctnq7dBJaL3RyaNDmXy5/1/7DD9337D328A8B57E99FCF1A8378EC259B235013.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.156.0/22
                  170.246.32.0/22
                IPv6:
                  2804:1dbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264390

    Signature Algorithm: sha256WithRSAEncryption
         0e:3c:b6:b0:b4:9b:f5:de:df:fc:c0:9a:0c:35:2d:88:6e:cd:
         d8:d0:a3:29:70:a6:98:7c:d6:06:31:70:dc:af:f7:12:57:28:
         93:74:87:6c:96:5f:78:b3:56:e0:59:4c:26:24:54:23:8d:20:
         d6:eb:e8:ff:31:54:f3:0e:4a:34:f1:5f:cd:ae:4e:c4:44:71:
         3d:19:1d:9d:9b:e9:b8:56:5d:b5:c5:1e:a5:25:d4:94:32:65:
         58:63:6f:58:9b:c0:7d:99:7b:19:3a:46:2d:3f:dc:da:e3:49:
         9f:67:f0:01:7a:74:66:56:56:3c:57:5a:77:de:81:cd:82:c3:
         6c:a2:f1:bc:d1:71:45:11:39:62:8e:41:34:79:74:07:d2:4a:
         e2:12:84:cc:a8:6e:37:6a:67:a2:c2:bd:ed:c9:e8:ba:ff:bc:
         ff:99:08:40:2e:45:ef:64:f6:5a:24:64:13:d9:58:cb:e8:76:
         03:66:7c:ea:b7:c7:10:8e:39:84:36:33:67:98:a9:ba:c7:92:
         88:49:74:06:77:eb:56:80:17:3b:8e:60:0a:ad:bd:14:bd:72:
         22:3d:d0:cc:e3:e8:c5:f2:5d:ef:44:ba:0a:7b:e1:e0:cb:44:
         25:c2:c4:a7:a6:b2:94:d4:fa:2a:84:df:79:60:9b:ee:84:89:
         20:4b:41:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:06 2025 by rpki-client