Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/C79E878C99DBE21D7B9A872579D4DEC88CD82C57.cer
File:                     C79E878C99DBE21D7B9A872579D4DEC88CD82C57.cer (raw, json)
Hash identifier:          tFPBkZD229rrON7+MjfelKNE8ex5tOA65Up0JKpMCh0=
Subject key identifier:   C7:9E:87:8C:99:DB:E2:1D:7B:9A:87:25:79:D4:DE:C8:8C:D8:2C:57
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       2A6380ED72DE5400C2A3238A377B279F3377D09D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8DLrZ2iURndMKEAaLCUjmxPbUkBQkFJ3hqpcB2JeDcMr/0/C79E878C99DBE21D7B9A872579D4DEC88CD82C57.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8DLrZ2iURndMKEAaLCUjmxPbUkBQkFJ3hqpcB2JeDcMr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 19 Dec 2024 04:59:53 +0000
Certificate not after:    Thu 18 Dec 2025 05:04:53 +0000
Subordinate resources:    AS: 28195
                          IP: 186.249.32.0/20
                          IP: 189.90.128.0/20
                          IP: 2804:160::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:63:80:ed:72:de:54:00:c2:a3:23:8a:37:7b:27:9f:33:77:d0:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 19 04:59:53 2024 GMT
            Not After : Dec 18 05:04:53 2025 GMT
        Subject: CN=C79E878C99DBE21D7B9A872579D4DEC88CD82C57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3e:6b:39:73:47:1a:b9:1c:14:99:f0:60:7f:
                    82:d4:04:2d:10:a3:4d:1f:e4:09:e1:91:1e:4d:70:
                    eb:27:24:80:84:df:39:55:2c:d1:13:07:c6:58:19:
                    02:e9:b9:83:13:24:7b:d7:0b:1f:d0:6c:28:4f:08:
                    96:a6:29:60:f3:56:cf:bb:aa:04:80:f4:79:45:9f:
                    f1:d3:e8:4b:1e:7d:0c:39:80:6f:6a:b3:a5:82:48:
                    da:3a:59:94:fd:f9:ff:4d:95:de:e7:0f:98:34:10:
                    76:f2:99:38:04:4d:1b:49:ea:34:11:fb:80:f3:75:
                    de:17:f7:b7:cc:06:0d:1e:08:75:a6:53:4c:3d:22:
                    27:4f:64:ca:72:e7:1c:4b:9d:27:59:e0:41:e5:08:
                    a5:0e:61:04:c2:fa:5d:ea:12:4f:71:9f:ca:47:54:
                    e5:92:0b:16:d0:b1:a3:5f:bc:0b:61:ac:b7:94:36:
                    fc:1b:22:ba:74:3a:19:83:b8:29:78:ab:b8:3b:c1:
                    67:a9:74:bb:da:33:2d:49:58:ba:cd:00:cd:69:c2:
                    80:d4:12:d3:76:44:e5:8f:7f:75:ea:49:69:79:41:
                    30:d5:3a:96:7a:8e:cc:dd:62:6b:17:8a:5e:d5:e0:
                    0c:1c:89:58:6d:68:f8:b7:60:4f:77:57:b2:73:f3:
                    f9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C7:9E:87:8C:99:DB:E2:1D:7B:9A:87:25:79:D4:DE:C8:8C:D8:2C:57
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8DLrZ2iURndMKEAaLCUjmxPbUkBQkFJ3hqpcB2JeDcMr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8DLrZ2iURndMKEAaLCUjmxPbUkBQkFJ3hqpcB2JeDcMr/0/C79E878C99DBE21D7B9A872579D4DEC88CD82C57.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.32.0/20
                  189.90.128.0/20
                IPv6:
                  2804:160::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28195

    Signature Algorithm: sha256WithRSAEncryption
         32:d7:f4:e1:5c:75:00:0d:7c:df:d8:76:a2:2c:89:c6:07:f0:
         3f:d9:ba:82:a1:b1:83:8d:41:0b:b9:84:1b:43:2b:49:52:fc:
         f3:5e:dd:5b:10:94:3a:c0:ce:ae:82:79:69:80:bc:fb:12:b3:
         0d:af:2d:c3:d9:fa:57:40:84:c4:c5:89:73:76:a5:0c:f8:c4:
         7b:2b:c7:16:d4:5d:bd:9a:79:05:c2:78:b4:e5:d2:89:b1:94:
         27:04:23:33:db:77:82:44:01:c2:ca:48:a8:30:ac:3e:89:67:
         a6:c8:ac:b6:0e:ef:57:64:92:53:d3:4b:00:46:3a:5e:fc:ca:
         5a:3d:c3:9f:67:36:d9:ea:70:5f:b3:06:ed:09:2d:cd:d1:37:
         ce:b7:e3:b0:aa:4b:54:68:a1:1d:98:90:23:e5:00:e0:e1:d3:
         74:94:68:b2:45:e2:5a:51:b1:19:89:a0:ae:2f:df:94:09:3b:
         ae:c0:83:52:a9:89:8f:9f:82:91:46:8f:61:f3:09:0b:d7:fa:
         e3:b3:18:25:35:16:c2:e3:0f:fb:b8:77:4e:99:7c:e5:77:38:
         fb:b8:57:7c:6a:47:99:e9:09:12:16:ff:c3:9c:ac:25:9c:1c:
         cf:f4:c7:33:ef:52:78:e3:d5:2a:46:81:88:ee:d2:66:1d:c4:
         70:0a:8d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:58 2025 by rpki-client