Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.cer
File:                     C1C7F834309205DF0944BA5C05FE62D65607F6C0.cer (raw, json)
Hash identifier:          8JE0f6ctTUaEB7hj4ljmKl90F1GDUrgZ7TRQZM8k100=
Subject key identifier:   C1:C7:F8:34:30:92:05:DF:09:44:BA:5C:05:FE:62:D6:56:07:F6:C0
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       78F702269AF2290128C8E221A7A09EDE934D9204
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:36:34 +0000
Certificate not after:    Wed 04 Mar 2026 18:41:34 +0000
Subordinate resources:    AS: 267322
                          IP: 192.144.72.0/23
                          IP: 2801:80:2380::/48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f7:02:26:9a:f2:29:01:28:c8:e2:21:a7:a0:9e:de:93:4d:92:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:36:34 2025 GMT
            Not After : Mar  4 18:41:34 2026 GMT
        Subject: CN=C1C7F834309205DF0944BA5C05FE62D65607F6C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a4:aa:35:68:25:93:00:db:7a:b5:52:b2:48:
                    9b:6c:b2:32:4e:20:7f:4b:ea:d9:bb:68:2d:19:9d:
                    78:46:de:3b:65:ea:c2:3c:c8:9a:d2:55:e9:4f:53:
                    41:95:a6:ae:a0:61:31:3b:18:55:f0:b2:12:66:20:
                    b7:17:5f:3f:95:bc:9e:1a:f9:3f:9a:80:7d:ca:b3:
                    90:ff:e1:38:2e:16:55:7c:8f:df:22:22:c4:0c:cf:
                    d2:bc:e5:d9:f2:17:0c:4c:04:97:98:60:a2:a9:15:
                    81:84:77:2d:40:3e:49:d6:19:37:05:05:92:88:b0:
                    ef:29:42:17:ed:19:46:1e:40:7c:44:98:92:22:8a:
                    9d:c9:91:4d:17:69:1b:2f:29:70:fc:7a:6d:83:45:
                    88:43:ae:69:08:a1:69:19:a4:48:d3:f7:65:d0:60:
                    73:6c:04:a2:af:b7:bd:9c:46:03:a0:d6:85:c0:fa:
                    ff:f3:6d:e2:f1:43:53:56:85:20:07:7f:49:81:81:
                    32:92:86:1a:d8:ec:d7:0d:e9:f3:a6:e2:b3:38:4e:
                    a5:a6:44:22:b1:4b:61:0d:dd:34:c7:c3:b7:0a:6e:
                    53:81:dc:2f:35:a2:d5:85:f8:a7:75:3b:22:85:ef:
                    d8:8f:91:e4:12:36:9d:20:f3:c8:0d:6d:c3:b0:03:
                    72:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C1:C7:F8:34:30:92:05:DF:09:44:BA:5C:05:FE:62:D6:56:07:F6:C0
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/1/C1C7F834309205DF0944BA5C05FE62D65607F6C0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.72.0/23
                IPv6:
                  2801:80:2380::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267322

    Signature Algorithm: sha256WithRSAEncryption
         55:2c:f5:0c:64:7c:fa:a5:cb:d8:37:d8:84:65:18:d8:40:7b:
         4d:44:86:e4:d5:38:61:a2:ff:1a:8a:07:b9:f2:1b:02:dc:ea:
         e9:49:cc:13:93:66:77:01:14:ae:fd:c6:38:ae:e0:1e:aa:e8:
         92:ab:9a:9d:64:6b:7d:a8:7d:e5:8e:e1:82:37:6e:3e:6d:cd:
         3f:3e:5c:a0:ed:e9:82:e1:d6:2e:e9:7a:2c:c6:d9:42:65:0e:
         02:63:4f:bb:ee:33:ae:bc:0a:c6:91:49:92:fe:94:66:f9:f7:
         21:12:ed:65:57:88:e3:69:fb:b1:d7:53:63:52:38:85:ac:62:
         f1:02:3d:3e:be:e4:0b:11:d5:b8:c6:6a:7b:b7:c6:91:b2:3b:
         c3:9e:dc:8b:40:49:60:ca:53:ec:b7:90:c2:f1:56:71:86:5a:
         f7:c5:a1:e1:8f:6a:b8:bd:86:a0:aa:c7:50:72:ef:87:fd:13:
         65:d6:24:58:80:14:84:f2:63:fa:73:5d:e7:2c:c2:5f:20:3c:
         39:56:dd:de:ac:44:93:fd:11:b9:f1:a9:ca:19:21:51:d2:16:
         95:9c:e2:27:72:7e:51:d0:ae:96:9d:bd:0f:5c:4a:b2:f4:18:
         b3:c0:82:cc:3d:0d:24:21:b3:e7:21:e7:18:cf:83:8d:c7:34:
         a4:87:bd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:27:42 2025 by rpki-client