Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C72086566EE782E49254BF59EB3177E027E3F1E6.cer
File:                     C72086566EE782E49254BF59EB3177E027E3F1E6.cer (raw, json)
Hash identifier:          EHa7WlBK91qnlM/QVNohdgXvT3wT65+bT/KoWib/TBg=
Subject key identifier:   C7:20:86:56:6E:E7:82:E4:92:54:BF:59:EB:31:77:E0:27:E3:F1:E6
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       3C7FE73127725361B65FC4C8CC225C5445BFB2B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/C72086566EE782E49254BF59EB3177E027E3F1E6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 02:56:15 +0000
Certificate not after:    Fri 06 Mar 2026 03:01:15 +0000
Subordinate resources:    AS: 267088
                          IP: 45.228.28.0/22
                          IP: 2804:47f4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:7f:e7:31:27:72:53:61:b6:5f:c4:c8:cc:22:5c:54:45:bf:b2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 02:56:15 2025 GMT
            Not After : Mar  6 03:01:15 2026 GMT
        Subject: CN=C72086566EE782E49254BF59EB3177E027E3F1E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6c:61:c0:18:82:1c:b6:92:10:90:1c:cc:7e:
                    e1:7b:36:35:55:68:11:b1:74:e2:31:c1:2c:09:4b:
                    93:f3:e5:cd:29:fb:60:ad:63:4e:ff:c4:e4:98:a7:
                    d6:da:31:12:17:05:67:0a:e3:99:2e:46:56:eb:9c:
                    f5:fd:57:23:fb:b8:33:49:88:2d:a8:91:dc:5f:b9:
                    bd:ed:88:0e:bc:a7:39:88:2c:94:46:3f:72:d7:27:
                    eb:52:00:0a:ca:ca:68:ef:55:0a:51:a9:ed:ff:8a:
                    a2:65:44:a5:ba:40:9b:07:a7:1b:50:cb:14:6b:06:
                    ee:7c:a9:62:65:06:64:63:2d:02:fe:cb:7d:ad:2b:
                    58:f0:c5:f6:36:d4:ed:00:23:fa:7d:83:fb:95:e8:
                    e8:00:97:26:82:77:fa:d0:04:8b:e0:ca:58:00:0a:
                    18:e5:14:e1:e6:3e:45:56:f0:9f:cc:97:82:f2:fc:
                    b6:e6:0c:b4:9d:ef:79:32:5c:86:68:3b:99:da:70:
                    f2:a2:0e:4c:aa:73:8e:0d:f9:2e:b7:42:3c:e1:23:
                    ac:66:fd:b8:91:72:6d:e5:3c:96:ca:45:d5:bf:39:
                    a3:4f:2a:a2:cf:2c:f3:e9:22:90:53:97:a3:a2:c2:
                    fa:a9:21:7c:b9:53:46:67:20:cd:2f:f1:21:8e:de:
                    18:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C7:20:86:56:6E:E7:82:E4:92:54:BF:59:EB:31:77:E0:27:E3:F1:E6
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8jTB5JUYGu5J4572c97EVGKsT9CVB8JjBYH6tVTXr8vP/1/C72086566EE782E49254BF59EB3177E027E3F1E6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.28.0/22
                IPv6:
                  2804:47f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267088

    Signature Algorithm: sha256WithRSAEncryption
         73:46:95:10:aa:6c:e6:3c:25:68:4b:f4:c4:6b:07:6e:a6:8b:
         56:24:f8:eb:6a:19:39:39:4c:a7:31:cc:dc:37:c0:06:3c:ff:
         19:e0:21:5d:19:d0:bf:51:02:1c:e1:82:e3:c9:05:27:27:0c:
         79:c5:a8:e3:31:03:2c:5a:b8:df:0b:64:9e:1d:77:43:78:cc:
         36:9d:9c:98:d7:85:4e:26:12:f2:69:1b:9d:d9:5a:25:98:47:
         13:a4:55:05:ca:05:09:32:93:93:c4:ba:bf:fc:da:b0:fc:a8:
         82:d3:ce:1e:4b:48:4f:71:b9:6d:09:bd:f9:24:28:e7:92:d6:
         35:a2:ee:6c:16:b7:20:4d:44:f3:c9:b7:2a:4a:e9:03:c6:23:
         af:f7:35:5a:13:3c:50:e6:62:6d:d4:6f:ee:77:dc:36:db:88:
         8a:06:ea:55:49:dd:7a:1f:34:61:c3:10:ba:86:b9:9d:82:71:
         d0:b8:6c:2b:8e:64:df:c9:ea:fc:1e:1e:86:38:0b:6e:b8:d5:
         9d:a2:a0:27:ea:6e:73:9b:81:c5:e3:31:0a:34:0f:03:8f:d2:
         33:1e:db:4a:08:66:06:d0:a5:d7:9f:e4:5c:c4:ff:a1:a3:3c:
         3c:82:b7:bf:6b:f3:39:f4:12:da:fb:13:af:0b:99:8d:5d:55:
         2b:f6:51:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:40:34 2025 by rpki-client