Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.cer
File:                     9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.cer (raw, json)
Hash identifier:          GoZbPuLgVm5eH4iH8+I22VDa6rmI8Uxtun3V9R9CfwA=
Subject key identifier:   97:07:BE:0C:EE:64:AF:76:C0:9A:5D:93:BC:E5:A8:EB:45:CD:42:06
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4C7D95F452C4ED4885EDACE1F89F3B7A68B0BD34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/1/9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 17:16:19 +0000
Certificate not after:    Fri 06 Mar 2026 17:21:19 +0000
Subordinate resources:    AS: 52634
                          IP: 177.124.188.0/22
                          IP: 2804:d7c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:7d:95:f4:52:c4:ed:48:85:ed:ac:e1:f8:9f:3b:7a:68:b0:bd:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 17:16:19 2025 GMT
            Not After : Mar  6 17:21:19 2026 GMT
        Subject: CN=9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5e:ed:44:7d:dc:ad:dd:1a:82:c6:29:c6:c2:
                    dd:60:02:19:a3:af:b5:a7:66:8d:18:5b:cb:12:e7:
                    db:6a:7f:8b:9e:52:f1:c9:79:8f:40:01:14:ab:75:
                    20:eb:bc:f6:66:bd:6b:cd:01:46:32:7c:3c:81:50:
                    82:f5:83:1e:9b:d0:68:03:dd:dc:48:d9:74:31:a0:
                    9b:68:e4:95:09:33:b3:7b:0d:3b:a5:13:85:6f:5f:
                    8c:9b:6a:4c:48:b6:bb:b1:e6:ec:fe:31:21:d8:65:
                    25:f0:ae:1f:0e:85:06:4b:ea:af:c7:c1:a8:cb:90:
                    d4:1b:f3:7a:b7:12:9f:68:59:56:84:3b:cf:5b:8d:
                    92:05:9b:28:9b:97:2c:29:d9:fd:d7:d7:f2:82:de:
                    5a:37:2d:77:5b:b9:14:bc:9f:cd:bd:10:58:ec:65:
                    ed:1d:94:2e:7b:77:7a:7e:0d:3e:11:9e:6c:ab:f2:
                    44:37:0a:b2:b6:7c:74:ff:05:47:a6:4c:1b:1b:0c:
                    08:5f:8e:61:47:aa:9a:58:8e:4e:e5:09:48:88:d9:
                    6b:d5:4a:1a:f8:76:af:8e:9b:b4:05:96:9f:3a:9d:
                    65:e1:9a:0a:c5:41:d8:3a:5f:b8:bc:a5:25:21:bf:
                    9b:d9:41:f5:a1:01:2d:ca:32:21:f3:1f:6c:43:b8:
                    cd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:07:BE:0C:EE:64:AF:76:C0:9A:5D:93:BC:E5:A8:EB:45:CD:42:06
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/1/9707BE0CEE64AF76C09A5D93BCE5A8EB45CD4206.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.188.0/22
                IPv6:
                  2804:d7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52634

    Signature Algorithm: sha256WithRSAEncryption
         5d:2c:18:76:49:f9:0e:5c:81:5c:56:87:87:04:4c:d3:e7:54:
         81:58:75:79:0e:50:d2:2c:85:9d:f5:3c:33:d5:4d:42:00:33:
         1c:7d:8c:9b:ea:97:11:a7:57:9e:c7:4e:a1:79:de:7f:dc:20:
         41:2f:02:a2:6f:6e:85:14:d1:ef:e0:1e:d6:d7:ea:5e:29:dc:
         d0:b0:96:4b:43:3d:2f:f6:27:b2:3f:cc:d0:64:02:ef:41:5c:
         66:59:86:58:35:0d:5c:17:05:a7:15:a7:0d:03:64:a2:c1:d4:
         cb:1c:c1:2f:44:61:1e:81:ab:85:7f:9f:16:42:2c:04:ce:4a:
         45:05:8a:8f:62:d2:18:77:58:b5:79:95:e4:80:70:9f:d3:d9:
         bc:ab:fe:89:cb:d3:af:8e:74:cf:39:17:31:e3:a0:2d:89:a1:
         da:4e:06:da:3d:47:54:0b:ea:53:48:fb:6f:e8:4c:ca:89:ae:
         8c:aa:d1:bc:6b:62:82:e4:da:e0:a8:fe:a1:bc:62:f4:da:fa:
         47:25:58:4b:e6:ce:c2:af:e1:32:b3:ad:91:51:b2:b3:b3:c6:
         b1:ff:2f:a0:9e:07:03:78:08:db:b7:3a:06:09:4a:8e:fd:90:
         f9:47:f7:f8:27:1e:28:1c:e3:7e:0f:67:7e:4d:e1:11:3e:55:
         f1:1c:79:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:19 2025 by rpki-client