Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.cer
File:                     7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.cer (raw, json)
Hash identifier:          5kcLBPiqV++4DHqxWjbGWFUwvQxKKxtcDo9dmUqkQjU=
Subject key identifier:   7F:6F:AE:9C:A3:3E:D0:1F:7D:11:7F:D3:50:91:BA:8A:F4:4F:F0:A2
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2DF882705F5980A67828FBAC0804029909797D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Jan 2025 13:51:17 +0000
Certificate not after:    Tue 13 Jan 2026 13:56:17 +0000
Subordinate resources:    AS: 270997
                          IP: 138.99.124.0/22
                          IP: 2804:74b0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f8:82:70:5f:59:80:a6:78:28:fb:ac:08:04:02:99:09:79:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 14 13:51:17 2025 GMT
            Not After : Jan 13 13:56:17 2026 GMT
        Subject: CN=7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:eb:73:62:7d:40:b3:ec:a6:64:e7:02:32:59:
                    c7:65:cd:0a:84:5c:4b:60:ea:7d:e6:3b:af:57:e6:
                    59:a6:50:bb:23:00:0f:8a:a2:b4:39:9c:6b:93:78:
                    67:07:d8:e5:5a:19:d2:cb:5e:65:65:ab:b2:30:5d:
                    71:9a:7b:38:1b:79:57:5c:82:fd:7c:e2:0e:e4:ff:
                    0f:b4:8e:0a:f0:45:59:7e:52:b0:85:6b:26:8c:2c:
                    4d:b5:5c:af:53:25:3c:d2:24:3a:47:30:b0:bd:eb:
                    31:ae:dc:9d:7f:35:09:ae:cb:74:13:a8:ab:10:1e:
                    74:34:e5:6c:f0:fe:3f:27:b6:80:62:d2:0c:7c:b0:
                    81:7e:55:96:38:04:6a:d3:9c:05:73:3e:1d:f1:d9:
                    a5:5f:af:45:1a:87:08:2e:1e:a4:ee:17:1b:a6:8d:
                    cf:55:b4:69:bc:91:83:94:38:61:9d:07:cc:a7:d3:
                    f3:cf:ba:53:47:b3:7f:d7:86:92:93:57:d5:aa:74:
                    96:cf:80:99:d9:72:cc:a8:be:35:96:b6:c0:30:a4:
                    ab:30:19:d4:2c:53:6b:e8:1a:8d:60:59:a1:c6:b5:
                    9e:12:57:8f:ea:9f:52:01:d1:c4:28:71:07:59:2e:
                    2a:4c:e1:37:38:83:9f:7e:ef:8b:be:30:01:08:5f:
                    06:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7F:6F:AE:9C:A3:3E:D0:1F:7D:11:7F:D3:50:91:BA:8A:F4:4F:F0:A2
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HhWe6BvpwZBKZ4TLUVRqDoFTbwRDb8uzg7wjJr8V9aCM/0/7F6FAE9CA33ED01F7D117FD35091BA8AF44FF0A2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.124.0/22
                IPv6:
                  2804:74b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270997

    Signature Algorithm: sha256WithRSAEncryption
         07:63:ea:b5:dc:79:ed:76:47:e0:d2:8b:72:51:90:ea:0a:53:
         f2:44:c7:63:03:ae:70:f6:6d:a9:42:80:8a:4e:f9:a1:86:81:
         f3:43:e2:f1:88:be:42:66:6d:46:bb:95:9c:08:59:ea:75:8d:
         d9:4d:47:63:7b:2a:a5:bf:70:15:75:e0:44:6a:4b:48:bf:6b:
         a7:3b:dc:bf:84:3c:87:b5:52:90:d7:c0:4a:88:11:1c:0c:5a:
         dc:05:08:66:a2:94:a0:56:12:5a:a1:3d:88:03:55:87:d2:39:
         19:53:80:e6:86:0f:5a:fb:80:e7:43:3f:49:82:5a:d8:ac:03:
         a5:68:aa:d7:0e:63:c7:2f:68:a3:5f:d3:9d:98:35:e8:4e:bf:
         f8:49:2e:72:02:2c:b5:18:84:40:ff:b5:6c:1d:ab:ac:6c:bd:
         37:a8:4a:59:50:b3:80:da:1c:06:29:8d:24:3c:47:1e:48:dc:
         11:c5:18:cd:24:f7:05:c3:23:81:34:89:cd:c8:b2:cd:ba:0b:
         d9:7b:55:04:51:58:9f:5f:4b:d9:0f:62:19:58:ef:e2:3b:3e:
         7e:45:73:51:59:ef:fe:9c:14:f2:5c:e7:ba:58:cc:d1:14:68:
         fd:52:9b:d6:68:e3:a8:9f:a7:86:c9:97:5e:bd:8c:a6:b3:df:
         96:6e:30:59
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgITLfiCcF9ZgKZ4KPusCAQCmQl5fTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg2MDU0MzJFOUUxQjA1QTdFNkMyMDhCMjk0NkZEQzlDOTY3
Q0E4QTRCMB4XDTI1MDExNDEzNTExN1oXDTI2MDExMzEzNTYxN1owMzExMC8GA1UE
AxMoN0Y2RkFFOUNBMzNFRDAxRjdEMTE3RkQzNTA5MUJBOEFGNDRGRjBBMjCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKbrc2J9QLPspmTnAjJZx2XNCoRc
S2DqfeY7r1fmWaZQuyMAD4qitDmca5N4ZwfY5VoZ0steZWWrsjBdcZp7OBt5V1yC
/XziDuT/D7SOCvBFWX5SsIVrJowsTbVcr1MlPNIkOkcwsL3rMa7cnX81Ca7LdBOo
qxAedDTlbPD+Pye2gGLSDHywgX5VljgEatOcBXM+HfHZpV+vRRqHCC4epO4XG6aN
z1W0abyRg5Q4YZ0HzKfT88+6U0ezf9eGkpNX1ap0ls+AmdlyzKi+NZa2wDCkqzAZ
1CxTa+gajWBZoca1nhJXj+qfUgHRxChxB1kuKkzhNziDn37vi74wAQhfBm0CAwEA
AaOCAzowggM2MA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFH9vrpyjPtAffRF/
01CRuor0T/CiMB8GA1UdIwQYMBaAFGBUMunhsFp+bCCLKUb9yclnyopLMA4GA1Ud
DwEB/wQEAwIBBjBtBgNVHR8EZjBkMGKgYKBehlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS82MDU0MzJFOUUxQjA1QTdFNkMy
MDhCMjk0NkZEQzlDOTY3Q0E4QTRCLmNybDCBuQYIKwYBBQUHAQEEgawwgakwgaYG
CCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTE1MzFCMjRCRjUwQzQ2MUM3RjU3NENENjUyNjdBOEIwREMzMjVEQUFB
MTAwNzVGNjcxNjVCOThDNEY0RUZDMy8wLzYwNTQzMkU5RTFCMDVBN0U2QzIwOEIy
OTQ2RkRDOUM5NjdDQThBNEIuY2VyMIIBQAYIKwYBBQUHAQsEggEyMIIBLjBeBggr
BgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IaFdl
NkJ2cHdaQktaNFRMVVZScURvRlRid1JEYjh1emc3d2pKcjhWOWFDTS8wLzCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSGhX
ZTZCdnB3WkJLWjRUTFVWUnFEb0ZUYndSRGI4dXpnN3dqSnI4VjlhQ00vMC83RjZG
QUU5Q0EzM0VEMDFGN0QxMTdGRDM1MDkxQkE4QUY0NEZGMEEyLm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB
Af8EHzAdMAwEAgABMAYDBAKKY3wwDQQCAAIwBwMFACgEdLAwGgYIKwYBBQUHAQgB
Af8ECzAJoAcwBQIDBCKVMA0GCSqGSIb3DQEBCwUAA4IBAQAHY+q13Hntdkfg0oty
UZDqClPyRMdjA65w9m2pQoCKTvmhhoHzQ+LxiL5CZm1Gu5WcCFnqdY3ZTUdjeyql
v3AVdeBEaktIv2unO9y/hDyHtVKQ18BKiBEcDFrcBQhmopSgVhJaoT2IA1WH0jkZ
U4Dmhg9a+4DnQz9JglrYrAOlaKrXDmPHL2ijX9OdmDXoTr/4SS5yAiy1GIRA/7Vs
HausbL03qEpZULOA2hwGKY0kPEceSNwRxRjNJPcFwyOBNInNyLLNugvZe1UEUVif
X0vZD2IZWO/iOz5+RXNRWe/+nBTyXOe6WMzRFGj9UpvWaOOon6eGyZdevYyms9+W
bjBZ
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:31:43 2025 by rpki-client