Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C4E77C2B0881AE69F9FB902D492C0AC9005A2C68.cer
File:                     C4E77C2B0881AE69F9FB902D492C0AC9005A2C68.cer (raw, json)
Hash identifier:          iDavAbz7mX2zMjuiKTNF9q64uY2b5xRMtqTziakhXk0=
Subject key identifier:   C4:E7:7C:2B:08:81:AE:69:F9:FB:90:2D:49:2C:0A:C9:00:5A:2C:68
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       377BC63C4DA0AA2D15BBAFEE5DE269025DCBBF9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/C4E77C2B0881AE69F9FB902D492C0AC9005A2C68.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Dec 2024 14:47:28 +0000
Certificate not after:    Mon 15 Dec 2025 14:52:28 +0000
Subordinate resources:    AS: 53123
                          IP: 187.111.192.0/20
                          IP: 2804:6478::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7b:c6:3c:4d:a0:aa:2d:15:bb:af:ee:5d:e2:69:02:5d:cb:bf:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 16 14:47:28 2024 GMT
            Not After : Dec 15 14:52:28 2025 GMT
        Subject: CN=C4E77C2B0881AE69F9FB902D492C0AC9005A2C68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d5:71:6a:07:ea:59:51:ef:fc:69:12:9d:9e:
                    fa:1a:7a:7f:73:89:6b:46:c6:42:68:f8:93:a9:74:
                    23:cf:5a:c2:d5:9a:b6:62:1f:87:6e:3f:64:0c:76:
                    80:ef:0c:04:12:3e:3a:72:b1:af:54:3d:78:12:70:
                    f8:81:bc:fd:a3:44:11:07:85:c9:61:d0:37:d6:18:
                    b2:b3:0f:3c:66:e2:17:ed:d4:64:a3:b4:aa:f3:9e:
                    42:17:f1:d2:e3:6c:de:e3:19:79:03:d0:69:d4:e4:
                    bd:4a:a1:96:b1:6a:83:09:75:21:1c:d0:76:72:ee:
                    e1:b6:a2:77:1f:0a:33:1f:f5:a6:3a:68:79:55:85:
                    1c:90:89:23:5c:44:bd:19:e8:db:69:47:d3:5f:c4:
                    c7:70:6e:00:3e:98:af:97:fe:34:c8:9e:4c:fa:e0:
                    0b:ac:65:23:13:7a:24:f5:55:d6:44:62:be:e2:d0:
                    f8:cc:94:07:cb:77:eb:2c:32:b8:29:82:61:7a:be:
                    af:85:ec:0f:11:7f:85:65:04:af:0a:ae:e7:2d:a8:
                    a3:64:46:2e:a6:0b:de:45:84:d2:8e:29:0b:cc:bc:
                    09:9c:51:8b:5c:a5:60:fc:d4:6a:bb:2e:a5:7f:7e:
                    aa:52:b7:cf:c9:c8:23:f8:6b:86:65:26:f6:e2:c3:
                    53:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:E7:7C:2B:08:81:AE:69:F9:FB:90:2D:49:2C:0A:C9:00:5A:2C:68
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/C4E77C2B0881AE69F9FB902D492C0AC9005A2C68.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.192.0/20
                IPv6:
                  2804:6478::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53123

    Signature Algorithm: sha256WithRSAEncryption
         a1:58:4f:ff:d5:2d:9d:58:12:a1:8f:50:ba:64:12:b9:b1:e3:
         dc:a7:83:4f:41:90:80:4c:47:7e:d4:62:26:9f:ef:c7:e9:db:
         82:f5:91:16:7e:37:c6:7b:d5:36:b6:a8:53:30:ea:dd:9a:49:
         83:0c:68:20:54:e0:68:c6:ff:5d:a7:50:2c:c5:97:09:26:36:
         62:48:38:15:45:1b:75:4e:9b:95:c2:35:9a:16:b4:ac:54:36:
         c2:e4:cc:4b:27:86:99:05:bb:c7:45:5f:a2:a5:51:33:85:33:
         77:37:91:a1:d2:91:ff:b3:9d:27:d7:40:57:0f:61:cb:d4:3d:
         73:8f:49:65:6a:f9:b5:75:60:91:fb:94:04:d9:d3:ba:9d:95:
         d0:36:b0:ce:92:c2:c5:3f:7b:cd:f6:89:d2:6e:9d:42:e6:60:
         7c:11:d4:c4:32:bc:6d:e6:ec:fb:27:c2:41:01:26:ad:3f:3a:
         64:01:ae:5b:ca:77:60:49:11:5e:f3:c1:95:05:05:dd:79:f6:
         22:f1:b4:00:4b:88:83:2e:16:90:a4:84:cb:92:e3:fe:8a:01:
         39:5f:fc:0b:f2:06:60:24:e6:27:62:a4:85:b2:aa:6d:7b:36:
         1a:c2:d5:cc:dd:40:41:48:58:4b:8e:0a:f3:73:92:7b:d1:8f:
         7f:c1:ec:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:22 2025 by rpki-client