Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer
File:                     DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer (raw, json)
Hash identifier:          8bh7CC19b9E9Pkj0dGbhyvAfnFxmdpmoPq5PCafcI90=
Subject key identifier:   DC:D7:A1:AD:D4:DE:BD:23:B1:C5:FA:D5:E6:0B:C2:69:D2:AD:10:0F
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       15F3E19119AE6DC11D84C4212FFC4E5A5A3B4FA4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:30 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:30 +0000
Subordinate resources:    AS: 271489
                          IP: 181.232.200.0/22
                          IP: 2804:7c54::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f3:e1:91:19:ae:6d:c1:1d:84:c4:21:2f:fc:4e:5a:5a:3b:4f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:30 2025 GMT
            Not After : Mar  4 18:40:30 2026 GMT
        Subject: CN=DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d1:63:45:02:e3:0d:21:92:49:c4:07:62:b5:
                    df:01:22:fc:8c:46:ad:3d:73:08:96:65:f5:d1:a6:
                    80:ad:f1:a7:13:ac:2a:5b:45:15:b5:ce:e5:33:d0:
                    15:e8:b4:f5:2c:64:dd:d8:5d:63:40:95:04:5f:fd:
                    84:3a:38:a9:57:9a:2c:83:d8:e5:73:2e:67:84:7b:
                    de:14:d6:c9:5c:65:4d:86:bc:97:12:ff:99:ef:36:
                    3b:89:c6:04:91:6f:3d:28:a3:ca:23:c7:e4:39:a7:
                    b0:d1:32:80:2d:43:48:5a:5f:ef:e3:7c:dc:50:cb:
                    19:00:04:71:83:68:df:dc:7b:0e:90:ec:1d:1b:2b:
                    58:09:27:9e:94:47:bc:48:89:61:15:40:e9:48:01:
                    fd:b6:ab:75:88:88:58:30:b6:d9:a6:d3:61:5f:87:
                    52:19:5f:b1:12:d4:f1:2f:9f:77:18:6a:d1:11:47:
                    b5:fa:30:58:a2:f0:9b:0b:f2:eb:f6:76:1d:87:68:
                    a7:0f:91:84:ae:98:f3:33:3f:96:5d:c3:85:80:90:
                    6f:ce:f5:ab:f5:09:94:33:45:64:25:72:07:6e:20:
                    21:56:7d:a3:f3:f6:0d:56:40:8a:e4:9d:34:e4:99:
                    9f:af:b5:70:f3:67:34:10:9c:b7:e5:5e:71:29:f5:
                    60:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DC:D7:A1:AD:D4:DE:BD:23:B1:C5:FA:D5:E6:0B:C2:69:D2:AD:10:0F
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.200.0/22
                IPv6:
                  2804:7c54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271489

    Signature Algorithm: sha256WithRSAEncryption
         64:a8:ca:d1:d1:d4:c6:d6:ef:a2:8b:bb:44:8d:17:0a:09:e1:
         31:6c:89:42:77:90:16:0e:f4:b7:e7:24:ae:0d:bd:12:d2:ab:
         d1:78:9b:5e:de:e8:7e:25:71:8c:9d:5b:a4:7c:c6:87:22:9e:
         66:45:8c:54:90:59:f8:28:92:d5:54:98:56:07:78:02:ab:7d:
         ea:d9:ab:45:e4:4a:da:6e:ef:9d:9f:36:b6:2a:6b:11:7c:4a:
         de:6b:02:79:4f:2f:11:1a:df:6f:ac:e7:cb:95:ee:7f:58:e9:
         82:5a:70:01:ce:aa:c4:56:5c:df:fe:34:c8:79:7c:6c:43:4f:
         92:f5:c7:54:51:b5:39:eb:6c:60:33:30:37:b0:e8:5b:68:34:
         6a:0c:82:b3:b9:5f:70:25:ff:24:0a:55:15:83:00:d1:70:93:
         e3:3b:77:97:09:36:af:08:66:89:65:3a:56:48:66:af:60:ac:
         3c:f2:a9:5e:62:3e:59:e2:9e:47:76:e6:2b:88:ca:31:3e:2f:
         3c:50:9d:b3:22:18:36:63:fb:44:b1:3b:f8:e6:87:9b:18:11:
         4c:de:c8:16:8f:0e:38:5b:a0:9a:b5:50:68:15:e6:4a:0c:65:
         41:99:7c:16:97:79:a9:a3:04:b1:4e:a4:c4:0a:9b:bc:48:ea:
         05:83:b5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:36:27 2025 by rpki-client