Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7EC0B807856399E82A913F6CC7DF0DF3D2A170CB.cer
File:                     7EC0B807856399E82A913F6CC7DF0DF3D2A170CB.cer (raw, json)
Hash identifier:          dY3QtoVCZ+iu6F/e0i30P8LZWo8hWFhfMqCs7OafIos=
Subject key identifier:   7E:C0:B8:07:85:63:99:E8:2A:91:3F:6C:C7:DF:0D:F3:D2:A1:70:CB
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       69919F2B2ED6B1E5A2C25A75A289DC026951BCE9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/716UF5rQjRhvd29jPs1HtdFNrwjVdAEdSCZoSD6ciimZ/0/7EC0B807856399E82A913F6CC7DF0DF3D2A170CB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/716UF5rQjRhvd29jPs1HtdFNrwjVdAEdSCZoSD6ciimZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Jan 2025 19:07:34 +0000
Certificate not after:    Fri 09 Jan 2026 19:12:34 +0000
Subordinate resources:    AS: 270429
                          IP: 190.111.148.0/22
                          IP: 2804:6bd8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:91:9f:2b:2e:d6:b1:e5:a2:c2:5a:75:a2:89:dc:02:69:51:bc:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 10 19:07:34 2025 GMT
            Not After : Jan  9 19:12:34 2026 GMT
        Subject: CN=7EC0B807856399E82A913F6CC7DF0DF3D2A170CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:d1:8b:08:69:b7:24:45:25:f9:45:b1:83:
                    40:83:e7:df:ec:c0:db:f4:79:f3:d8:18:e6:58:cd:
                    cb:cd:69:e5:c3:6a:a9:7a:10:80:3f:b1:6c:d4:39:
                    c8:d0:ce:5b:ed:e3:10:cc:a1:72:c3:71:3f:d1:34:
                    3a:fb:ca:0c:85:ff:ae:19:e2:c5:ba:d8:b8:71:14:
                    f5:87:84:8d:9b:a5:7f:22:ba:ba:23:75:07:48:84:
                    ef:b9:92:c0:13:d0:2e:1b:9e:50:35:f4:1a:be:25:
                    5c:30:2d:fb:a7:04:ba:62:c6:eb:88:c0:98:21:ac:
                    7b:49:ac:84:4e:f8:34:81:13:5b:db:e1:c1:53:87:
                    56:8d:9c:fd:cc:79:f5:01:10:ff:0f:b8:c2:bc:02:
                    65:f0:55:1d:fc:1f:4e:45:4c:af:42:45:28:d7:c8:
                    19:2c:dd:f9:b8:0c:96:d8:ea:23:e5:2a:cd:e7:6f:
                    9e:a6:e2:26:52:0f:3f:d0:8e:d0:5a:98:88:32:ab:
                    16:f3:e9:fb:39:a1:45:12:ce:ee:4c:7b:2e:20:54:
                    34:0e:eb:68:16:15:07:2f:df:73:28:3f:b2:13:57:
                    c8:a4:90:67:32:2f:53:61:bc:f2:d4:22:10:8d:29:
                    4a:e0:50:53:85:09:d2:b0:a3:f5:57:51:81:d4:79:
                    8b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7E:C0:B8:07:85:63:99:E8:2A:91:3F:6C:C7:DF:0D:F3:D2:A1:70:CB
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/716UF5rQjRhvd29jPs1HtdFNrwjVdAEdSCZoSD6ciimZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/716UF5rQjRhvd29jPs1HtdFNrwjVdAEdSCZoSD6ciimZ/0/7EC0B807856399E82A913F6CC7DF0DF3D2A170CB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.148.0/22
                IPv6:
                  2804:6bd8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270429

    Signature Algorithm: sha256WithRSAEncryption
         b1:c7:4b:71:ab:bf:c0:34:05:02:d7:ba:9f:d9:04:07:47:9e:
         05:47:35:d0:96:ea:f6:bf:8d:25:a7:fd:5b:5f:df:6d:57:ae:
         51:e5:5a:87:af:a4:c2:4f:f7:23:04:ce:56:a2:bf:90:77:6e:
         33:81:b5:b5:74:7f:36:ba:e5:44:5e:37:8f:a3:fc:3f:72:f7:
         7d:52:72:af:b5:2c:c3:30:74:d9:fc:9b:c7:d6:cc:fd:9d:1a:
         11:20:b8:0a:d1:f4:b8:fc:16:2e:1f:13:56:49:0a:d9:0d:0c:
         f7:3c:e8:7a:5e:80:fb:f4:88:56:26:bf:90:7e:23:8f:32:13:
         0a:41:3a:bd:f9:b5:8a:c2:0c:7b:5d:61:20:31:30:6e:6f:67:
         42:05:06:23:b5:bd:86:92:4b:2f:ee:50:10:1c:c1:31:4e:25:
         65:1a:77:7a:42:fc:22:47:9d:b3:21:78:29:fe:9f:6e:49:43:
         00:60:9c:d5:70:29:94:b2:64:8c:58:9c:ad:60:a9:d3:3f:34:
         f1:1f:b0:48:7a:93:20:fd:a5:cf:39:88:16:c0:75:de:57:d2:
         ca:82:2c:7e:49:87:74:92:37:e9:35:2c:9c:92:b2:fc:bb:18:
         3c:6f:34:7b:40:fa:73:c3:2e:f6:1e:c2:01:5d:2a:99:89:3a:
         92:55:f8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:20:02 2025 by rpki-client