Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/E78F6793229F60787B6BB9D88C9E47A77557ED21.cer
File:                     E78F6793229F60787B6BB9D88C9E47A77557ED21.cer (raw, json)
Hash identifier:          /DYPmVnGJoX0kElCKBokkINKriShtE5EODNzJ6NUS94=
Subject key identifier:   E7:8F:67:93:22:9F:60:78:7B:6B:B9:D8:8C:9E:47:A7:75:57:ED:21
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4A57835DB263C4E83B023BACA6075269A8BFA9F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/E78F6793229F60787B6BB9D88C9E47A77557ED21.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 27 Dec 2024 17:16:59 +0000
Certificate not after:    Fri 26 Dec 2025 17:21:59 +0000
Subordinate resources:    AS: 271239
                          IP: 45.225.128.0/23
                          IP: 191.6.5.0/24
                          IP: 201.46.120.0/23
                          IP: 2804:7864::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:57:83:5d:b2:63:c4:e8:3b:02:3b:ac:a6:07:52:69:a8:bf:a9:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 27 17:16:59 2024 GMT
            Not After : Dec 26 17:21:59 2025 GMT
        Subject: CN=E78F6793229F60787B6BB9D88C9E47A77557ED21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3f:bc:a7:6a:09:b7:63:9f:88:59:41:a2:7c:
                    05:96:0c:d4:6a:8d:1a:e8:04:e1:dd:a4:1b:71:52:
                    37:ea:1e:7e:b1:76:5d:b8:2c:88:ab:5d:a3:2d:4e:
                    63:23:69:09:a9:7f:da:02:fb:b1:89:18:7e:01:56:
                    5b:17:9d:eb:61:80:c2:e2:a4:14:e1:6c:67:1a:71:
                    2e:a9:83:90:9b:11:07:10:5d:ce:ec:69:7b:3e:32:
                    0d:ed:e6:64:6b:2c:dc:d2:d8:d3:86:ca:53:94:01:
                    9e:99:29:85:aa:63:39:59:1c:10:fd:de:21:3a:ba:
                    4c:24:c7:f9:0e:68:9d:b9:3c:f1:bb:2c:10:d2:fa:
                    d8:f9:e3:2b:45:09:ea:26:37:3e:ab:2a:51:04:f7:
                    9b:cb:e4:77:e7:4c:da:f2:72:da:84:17:26:e3:29:
                    fb:b8:a7:f5:7a:0a:25:30:14:4f:ac:79:a2:dc:d4:
                    e5:e3:92:73:65:c6:bc:bd:f6:67:10:9e:c1:3f:f4:
                    b6:66:0b:b4:f7:6d:e7:84:dc:de:40:51:5b:6e:68:
                    f5:e8:ce:62:59:d9:d1:d9:7c:cd:cc:9b:32:36:e0:
                    d4:16:a2:66:23:c0:4c:ef:b4:ee:7c:db:1a:f9:5f:
                    5a:b8:b3:b3:d6:b3:e9:cf:66:0e:70:cf:58:28:17:
                    70:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E7:8F:67:93:22:9F:60:78:7B:6B:B9:D8:8C:9E:47:A7:75:57:ED:21
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/E78F6793229F60787B6BB9D88C9E47A77557ED21.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.128.0/23
                  191.6.5.0/24
                  201.46.120.0/23
                IPv6:
                  2804:7864::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271239

    Signature Algorithm: sha256WithRSAEncryption
         50:4c:3c:ee:8a:af:2c:d4:1b:aa:db:da:cd:de:e4:14:e8:5f:
         5f:4b:63:30:d7:e7:3d:ee:c7:c9:1b:c4:68:67:b3:e4:bc:92:
         d7:14:74:12:50:54:4b:db:c7:04:b7:05:26:1b:12:b9:13:a6:
         a3:21:5e:33:c2:73:17:be:0d:7d:1b:ef:54:d5:63:32:45:5b:
         6c:e6:6e:14:8d:91:81:91:94:59:8f:57:2f:3c:9a:5f:22:ed:
         a9:82:d7:86:e9:57:56:3e:22:bd:bb:63:8b:7d:bd:a8:5c:e5:
         c9:47:5b:95:93:51:b4:ba:d9:b9:e7:05:58:ea:a3:ca:75:50:
         a2:48:51:f7:4a:01:62:5c:76:34:77:5f:de:73:05:ae:01:fb:
         dd:ed:5b:30:74:05:62:0b:e3:f0:12:87:d4:d8:8b:fd:60:89:
         dd:8a:27:f4:e0:19:e4:e5:41:ad:8a:5e:70:e7:a2:45:c1:f1:
         3c:0f:8c:69:bc:d6:92:7e:c2:eb:c1:64:44:d7:20:32:2e:9e:
         38:f1:7d:ed:7b:c1:23:cf:d8:d9:17:2a:b9:3b:51:47:e7:8e:
         97:4e:76:ef:d6:7b:74:8d:84:a9:4d:48:19:de:25:ea:17:94:
         f3:8a:83:1a:c6:cf:8e:a1:b6:1d:26:b8:15:1f:cf:46:fe:c1:
         6c:c4:3f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:16 2025 by rpki-client