Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.cer
File:                     EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.cer (raw, json)
Hash identifier:          0Lu0MCCqt5MhJWhChLOF51Q1XXlzr98IifCGlTbwkA4=
Subject key identifier:   EF:37:AC:3A:AD:D3:EB:0F:41:65:34:BF:4E:8C:B3:C7:1C:32:BA:AD
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       1C508E65622C632F9AFB3CB54BAB89E4C199CF61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Mar 2025 16:45:18 +0000
Certificate not after:    Mon 16 Mar 2026 16:50:18 +0000
Subordinate resources:    AS: 11432
                          IP: 200.155.128.0/18
                          IP: 200.170.192.0/18
                          IP: 200.194.248.0/21
                          IP: 200.201.128.0/19
                          IP: 2804:138::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:50:8e:65:62:2c:63:2f:9a:fb:3c:b5:4b:ab:89:e4:c1:99:cf:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar 17 16:45:18 2025 GMT
            Not After : Mar 16 16:50:18 2026 GMT
        Subject: CN=EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0b:50:9f:77:27:c0:c9:19:89:d4:32:3a:6c:
                    9c:0a:21:da:c1:e8:27:fe:e5:f7:0c:2f:cb:27:b9:
                    48:f9:64:38:1f:f8:dd:9f:3c:c1:b4:d2:34:c8:81:
                    59:27:5f:0d:1b:34:03:80:2a:2d:c0:e8:9f:f6:b9:
                    1e:f4:60:b6:ee:a9:33:c7:f7:06:0e:91:e3:46:83:
                    aa:0e:ae:d7:da:81:f9:3f:3a:53:11:00:25:69:4f:
                    83:78:1c:11:b6:37:a2:95:2f:0d:9b:11:d0:f8:5e:
                    bc:a2:9d:2d:30:54:df:8c:e8:92:2d:3d:08:e7:7f:
                    bb:96:fb:9a:a7:65:28:f0:f8:22:12:58:20:67:13:
                    1b:1b:a0:4b:64:35:df:d2:6f:97:08:85:68:d9:b0:
                    f8:88:7f:7d:49:bb:41:bc:d4:75:24:43:a0:05:15:
                    21:00:27:3b:2d:0c:f9:4e:8a:f3:56:90:55:5a:20:
                    ed:13:7e:e0:19:68:c3:01:3e:7d:fc:4b:d9:60:43:
                    66:0c:36:b5:26:68:a7:d3:5f:df:41:54:8a:a4:76:
                    6d:fd:b7:2f:ea:7c:9c:83:16:6b:79:53:9f:36:41:
                    7e:cb:9a:8a:6e:27:6d:6c:a1:84:dc:6d:8d:76:b7:
                    85:b1:ff:80:78:f6:5b:62:2b:e2:45:74:76:8e:60:
                    26:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EF:37:AC:3A:AD:D3:EB:0F:41:65:34:BF:4E:8C:B3:C7:1C:32:BA:AD
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/EF37AC3AADD3EB0F416534BF4E8CB3C71C32BAAD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.155.128.0/18
                  200.170.192.0/18
                  200.194.248.0/21
                  200.201.128.0/19
                IPv6:
                  2804:138::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11432

    Signature Algorithm: sha256WithRSAEncryption
         56:89:56:c2:7d:c1:79:dc:e7:a6:1f:bb:fc:ef:03:76:fa:e9:
         fc:8c:84:19:b9:da:0a:9a:c2:4b:8e:a6:00:fa:1b:25:61:0e:
         2e:07:fc:06:eb:30:1c:2b:c6:9d:c2:30:6d:f7:6f:94:a4:cf:
         c0:e5:10:ce:1d:ec:38:7b:95:96:7e:ad:93:49:e7:6a:d1:90:
         85:b5:d2:75:cc:73:5c:1a:85:f7:de:67:ef:21:8f:33:7c:54:
         5a:9f:4a:9d:7b:bf:e4:a9:4f:8f:95:08:9d:6a:86:82:36:55:
         ca:49:6b:a8:0d:80:62:9f:d2:00:f3:c9:92:52:b3:e1:28:8e:
         19:3e:f9:3b:91:be:52:22:b0:76:69:06:83:6d:60:38:db:7b:
         ee:e2:73:07:fd:85:6d:92:c6:3c:79:1e:c4:6a:ec:b6:f2:14:
         db:5a:89:1e:5d:6e:1c:31:73:0a:70:6b:f0:86:06:14:5b:c5:
         7f:bf:5c:e8:49:b3:e6:49:9e:47:e4:84:ca:a3:cf:f5:8a:86:
         30:31:f1:6b:6e:34:06:89:22:bd:58:92:78:51:c1:0b:86:36:
         7f:e7:ce:e7:93:93:88:06:86:fd:a2:d3:16:7f:bb:9c:13:96:
         e5:98:c3:40:1b:3b:7a:7c:96:9d:d2:dd:53:16:b5:83:ce:d8:
         fb:0f:43:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:07 2025 by rpki-client