Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B07267C68D91254F5CE400BAF235C12DCD2D2C0F.cer
File:                     B07267C68D91254F5CE400BAF235C12DCD2D2C0F.cer (raw, json)
Hash identifier:          MYRq5bmUsCyCREmXNxookoRW9sSHhkA9QZrfJQy7B5Y=
Subject key identifier:   B0:72:67:C6:8D:91:25:4F:5C:E4:00:BA:F2:35:C1:2D:CD:2D:2C:0F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       67F58EE666B2829A910D60DAA4DE751806846DCF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/B07267C68D91254F5CE400BAF235C12DCD2D2C0F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Dec 2024 19:43:30 +0000
Certificate not after:    Tue 02 Dec 2025 19:48:30 +0000
Subordinate resources:    AS: 61851
                          IP: 177.75.224.0/20
                          IP: 201.149.124.0/22
                          IP: 2804:1a4c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f5:8e:e6:66:b2:82:9a:91:0d:60:da:a4:de:75:18:06:84:6d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec  3 19:43:30 2024 GMT
            Not After : Dec  2 19:48:30 2025 GMT
        Subject: CN=B07267C68D91254F5CE400BAF235C12DCD2D2C0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:53:58:5a:de:06:57:49:3b:a9:e6:23:03:19:
                    21:66:1d:b5:e6:f0:5c:e9:ca:e2:fe:60:21:a6:05:
                    55:19:db:a9:79:ed:3c:5e:e2:e5:6c:b6:b9:a4:72:
                    80:6e:8b:33:cc:63:12:b0:e0:a2:cc:54:74:7d:03:
                    76:0e:89:4d:f6:8c:97:87:99:92:44:a4:7c:56:9e:
                    dc:67:49:6a:cc:97:b0:33:1b:04:d1:37:07:40:01:
                    3e:27:c3:46:b4:69:ad:c3:46:58:ff:77:98:ad:ad:
                    21:c0:62:80:37:f7:48:b8:13:e7:d0:33:5d:b5:af:
                    20:80:e6:92:79:27:ae:95:0b:1f:7a:70:f1:80:aa:
                    bb:9d:47:4f:67:a1:c8:f7:2b:81:b6:85:70:d8:2e:
                    2e:98:77:a3:15:0b:0d:b2:de:58:43:a0:72:20:43:
                    94:36:c9:f8:eb:44:10:33:96:97:51:bb:75:4a:2b:
                    08:f8:8e:51:a8:98:82:70:9a:3a:27:c6:a0:12:41:
                    c3:b1:42:68:e5:29:ff:c5:e0:45:28:6f:82:85:72:
                    d1:78:a5:e3:17:29:de:14:d9:e9:19:f6:99:f6:e4:
                    37:70:8e:15:22:f2:7b:9e:86:1e:f4:5c:af:a1:6e:
                    fa:63:a9:e7:f9:c1:39:1e:65:d9:e6:4f:65:f6:e0:
                    7a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B0:72:67:C6:8D:91:25:4F:5C:E4:00:BA:F2:35:C1:2D:CD:2D:2C:0F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/B07267C68D91254F5CE400BAF235C12DCD2D2C0F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.224.0/20
                  201.149.124.0/22
                IPv6:
                  2804:1a4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61851

    Signature Algorithm: sha256WithRSAEncryption
         b0:8c:b6:d6:e5:61:ec:d0:ab:d9:50:6f:61:95:2b:35:d8:6a:
         d6:e7:a9:59:8a:22:7d:34:a4:a0:bd:9e:74:2e:db:be:7b:f0:
         55:8a:28:67:0f:5b:ed:93:02:7f:72:06:c3:12:77:3d:77:78:
         62:e1:ac:ee:e0:65:71:85:8c:f4:91:0b:60:77:73:ef:68:14:
         af:42:36:14:d1:15:e6:83:3c:bc:6d:2f:20:d6:50:05:1f:11:
         f2:82:0f:b8:23:ba:13:68:fa:6c:36:13:56:ba:0f:48:f4:4f:
         e3:ca:a7:8f:4a:1e:59:40:e3:04:2d:ea:c4:b7:00:b2:6a:85:
         bf:fd:fe:44:2e:84:bb:46:1d:2c:2e:af:81:3a:e4:2f:d2:d0:
         3a:f8:bd:ae:a1:2e:39:a8:e7:13:e7:04:87:23:5a:a3:0f:b2:
         3c:01:fe:e1:8f:52:1f:a1:5d:44:b1:69:f5:ac:27:b5:74:75:
         66:18:90:99:d5:7b:67:26:60:39:8c:cf:bf:e1:ed:66:b7:55:
         77:49:8f:50:7c:9a:10:7a:a6:65:85:95:a0:f2:cb:e2:52:65:
         42:2f:3c:fe:52:33:81:73:73:b2:f5:20:03:95:fc:50:43:81:
         23:a0:98:c4:5d:2b:c0:6f:c1:9d:46:9e:34:0f:3a:76:a6:60:
         cb:2b:d1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:11:17 2025 by rpki-client