Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/B7EF22DFD881235D264FE132548F573E3667BD1A.cer
File:                     B7EF22DFD881235D264FE132548F573E3667BD1A.cer (raw, json)
Hash identifier:          7p8sSydn1wA1h9B6RFk3YeVQRYV2Gkc0NMdwxHvyOIM=
Subject key identifier:   B7:EF:22:DF:D8:81:23:5D:26:4F:E1:32:54:8F:57:3E:36:67:BD:1A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4FDA485AB605461B6B683496D2F1E8DE4EE1E800
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2STZbsMdQ2f4oPm868zSRLgfJ4bYWq9tXoV8sZJzdYEN/0/B7EF22DFD881235D264FE132548F573E3667BD1A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2STZbsMdQ2f4oPm868zSRLgfJ4bYWq9tXoV8sZJzdYEN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 18 Dec 2024 19:52:42 +0000
Certificate not after:    Wed 17 Dec 2025 19:57:42 +0000
Subordinate resources:    AS: 53021
                          IP: 186.232.62.0/23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:da:48:5a:b6:05:46:1b:6b:68:34:96:d2:f1:e8:de:4e:e1:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 18 19:52:42 2024 GMT
            Not After : Dec 17 19:57:42 2025 GMT
        Subject: CN=B7EF22DFD881235D264FE132548F573E3667BD1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:89:60:d8:63:49:94:0d:d6:05:7f:89:d9:44:
                    e3:2e:9f:9d:7b:fe:78:b1:e6:70:b9:6b:e4:5c:09:
                    f9:25:71:fc:ef:e8:71:1e:45:87:99:81:1c:4f:47:
                    65:d3:c2:64:d8:6c:f3:a9:8c:bc:ae:15:24:46:59:
                    3b:6b:fd:78:07:39:0e:de:b5:79:fc:74:e5:d3:69:
                    6e:1f:07:79:e7:01:29:40:00:fd:be:22:dd:74:d0:
                    74:48:e7:0f:6d:94:88:d1:36:49:19:d2:a1:fd:22:
                    d0:6f:86:d7:1d:90:95:45:15:bc:40:bc:1e:7f:21:
                    96:7a:f7:15:0c:62:d5:4e:19:10:33:42:a8:58:7a:
                    3d:4c:aa:a1:3f:9d:0b:1d:f0:53:34:31:b8:56:a8:
                    45:33:08:6d:b8:00:f1:8c:85:af:d6:29:ad:54:3d:
                    f1:c8:fe:eb:04:94:3d:29:a3:1e:bd:93:f5:94:3f:
                    06:4f:c5:c7:4e:0a:75:fd:cd:ad:72:24:96:4f:97:
                    57:3c:0b:91:44:c0:6e:25:31:0d:49:40:e1:66:f0:
                    60:97:cd:e0:5a:5b:a9:8c:03:0d:a3:f9:c0:66:0e:
                    2c:0e:ec:3f:ec:83:4f:8a:53:36:e7:68:9a:5a:ef:
                    07:2a:9e:f8:c8:c4:6d:a3:6a:c2:22:84:cb:61:3c:
                    9d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B7:EF:22:DF:D8:81:23:5D:26:4F:E1:32:54:8F:57:3E:36:67:BD:1A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2STZbsMdQ2f4oPm868zSRLgfJ4bYWq9tXoV8sZJzdYEN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2STZbsMdQ2f4oPm868zSRLgfJ4bYWq9tXoV8sZJzdYEN/0/B7EF22DFD881235D264FE132548F573E3667BD1A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.62.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53021

    Signature Algorithm: sha256WithRSAEncryption
         25:79:6b:75:0b:75:17:d1:4c:0c:d5:09:af:89:26:b7:65:88:
         0f:e6:6c:65:27:48:09:e7:3d:68:e7:f2:32:94:22:89:a5:0c:
         59:3e:04:d3:36:68:64:af:61:3e:1c:b6:5d:f1:87:74:31:0b:
         05:c7:5d:63:cc:f9:26:35:91:b2:61:23:5d:b1:de:37:41:0a:
         ce:b6:9a:4f:7f:d4:c9:f8:6e:45:a0:57:17:52:9d:5f:d2:93:
         43:53:f0:79:f9:38:76:ff:54:7a:7f:87:26:82:69:73:c3:20:
         21:88:bb:40:14:6c:22:0e:d8:72:a6:ca:a1:2f:a7:93:e9:58:
         6d:69:46:51:a2:55:db:99:49:1d:5b:84:60:d9:08:97:1e:c0:
         40:83:de:03:ad:73:5b:63:f6:6f:8a:14:8c:34:47:66:1d:5f:
         e3:34:9c:be:ef:82:4d:b6:d7:c3:2f:72:06:a0:46:87:be:84:
         9a:23:86:fe:17:50:0a:9d:90:c0:97:ea:58:7b:5c:8e:00:43:
         0d:24:79:10:52:78:ec:c0:0c:1b:49:8f:83:20:e2:b9:d9:f0:
         e4:75:2b:11:bc:19:6b:d6:85:ec:e9:b0:2a:0d:f7:57:4c:c0:
         76:71:51:ab:d6:e6:58:ec:59:f5:f0:b0:d7:5a:3d:24:b0:48:
         35:b4:00:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:48 2025 by rpki-client