Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/F7C4DEB12240FF8688C32C67939C04C380824025.cer
File:                     F7C4DEB12240FF8688C32C67939C04C380824025.cer (raw, json)
Hash identifier:          1wtsuk4IdTQ/OACsVlENrux2ZpsD9h47ubYOy1c7l9o=
Subject key identifier:   F7:C4:DE:B1:22:40:FF:86:88:C3:2C:67:93:9C:04:C3:80:82:40:25
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       7E7DDB408963A54BC3599AF4620F1699D4E665CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:36:08 +0000
Certificate not after:    Wed 04 Mar 2026 18:41:08 +0000
Subordinate resources:    AS: 263530
                          IP: 143.137.64.0/22
                          IP: 191.253.68.0/22
                          IP: 2804:135c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7d:db:40:89:63:a5:4b:c3:59:9a:f4:62:0f:16:99:d4:e6:65:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:36:08 2025 GMT
            Not After : Mar  4 18:41:08 2026 GMT
        Subject: CN=F7C4DEB12240FF8688C32C67939C04C380824025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5f:ad:7c:b9:6d:e3:c8:b8:85:a5:7a:61:e7:
                    b9:95:ef:54:d7:93:8c:4e:c6:5d:bf:34:e9:5a:fd:
                    d5:57:df:de:2b:4f:3f:41:c0:79:4b:21:a7:94:96:
                    02:64:91:12:bb:50:37:9f:cd:02:78:ca:83:b1:ca:
                    12:46:03:cd:a0:de:04:22:af:a0:e9:a4:ef:c7:a4:
                    64:4c:60:c0:41:20:be:4a:bc:cd:f9:58:ed:dd:3b:
                    5b:29:51:30:13:fe:1a:d2:4a:14:da:d6:c5:cc:4a:
                    22:b9:9d:42:f7:c1:d9:6f:7b:11:02:41:c7:43:99:
                    b4:30:2b:e5:13:e7:06:e0:74:e8:6a:c0:f3:c3:fd:
                    8c:ae:e4:26:72:52:b3:a9:55:59:d1:0e:2c:38:99:
                    19:6b:6d:54:04:78:34:90:11:34:b5:80:c5:0c:c8:
                    b6:b6:40:13:b5:3d:d5:18:de:d4:8a:40:c3:78:d1:
                    79:6e:36:ca:fc:f7:cf:0b:ce:0e:c1:0a:fd:bc:70:
                    b9:4e:06:41:f3:cd:e5:8d:27:01:19:66:e9:b7:f1:
                    7f:54:db:6e:fb:ec:8e:83:38:a8:16:0a:1f:3d:a4:
                    dc:02:02:5a:3c:f7:0c:c4:b4:f5:61:07:c1:52:f7:
                    dd:53:75:da:06:25:5e:17:36:1c:c3:52:47:91:da:
                    69:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F7:C4:DE:B1:22:40:FF:86:88:C3:2C:67:93:9C:04:C3:80:82:40:25
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8ij5ND3UcVTY5pXNd8AjxtH8VTqqSmsBM6Pa4H81RaeM/1/F7C4DEB12240FF8688C32C67939C04C380824025.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.64.0/22
                  191.253.68.0/22
                IPv6:
                  2804:135c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263530

    Signature Algorithm: sha256WithRSAEncryption
         7e:79:9f:e1:c1:db:db:e6:6b:39:26:7f:24:61:4c:4c:80:18:
         00:fd:c6:35:88:1a:51:96:5c:3a:b4:98:80:81:d5:1e:d6:a5:
         08:28:83:ff:98:e9:04:fa:2c:73:39:f3:bd:d6:0c:1d:d5:ca:
         b3:a0:03:cb:74:59:48:9c:1c:50:d3:85:58:21:fe:37:99:a6:
         aa:f3:c1:d7:94:e2:7f:4a:65:3d:6b:53:5d:83:66:86:ba:0d:
         c6:55:cc:25:a8:ef:87:eb:78:a5:40:1f:6b:64:57:66:ee:e7:
         90:2a:43:68:84:b6:ab:0b:6d:26:79:1d:cb:9c:db:af:da:3e:
         48:2c:e9:ba:0a:07:a8:39:2a:e5:e5:fc:f3:45:97:d6:87:89:
         7c:ee:71:b7:c7:cb:ec:09:d7:5f:19:ed:5f:1c:6e:ae:3e:0d:
         f3:23:94:29:16:de:77:02:ee:ad:f8:da:15:79:55:7d:01:1b:
         ae:65:ea:6e:ca:dc:f5:14:1f:3f:51:d3:7d:10:5f:c2:20:a3:
         9b:e2:50:91:2b:5f:14:3c:4b:77:a5:9a:d2:ae:41:e4:3f:9c:
         59:59:15:df:be:f2:70:cf:15:ef:2e:e6:3c:6b:43:28:1e:55:
         f4:2f:47:03:f1:3a:88:f7:54:c5:34:dc:5e:9d:29:f6:01:32:
         dd:21:de:2c
-----BEGIN CERTIFICATE-----
MIIGNTCCBR2gAwIBAgIUfn3bQIljpUvDWZr0Yg8WmdTmZcowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAzMDUxODM2MDhaFw0yNjAzMDQxODQxMDhaMDMxMTAvBgNV
BAMTKEY3QzRERUIxMjI0MEZGODY4OEMzMkM2NzkzOUMwNEMzODA4MjQwMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmX618uW3jyLiFpXph57mV71TX
k4xOxl2/NOla/dVX394rTz9BwHlLIaeUlgJkkRK7UDefzQJ4yoOxyhJGA82g3gQi
r6DppO/HpGRMYMBBIL5KvM35WO3dO1spUTAT/hrSShTa1sXMSiK5nUL3wdlvexEC
QcdDmbQwK+UT5wbgdOhqwPPD/Yyu5CZyUrOpVVnRDiw4mRlrbVQEeDSQETS1gMUM
yLa2QBO1PdUY3tSKQMN40XluNsr8988Lzg7BCv28cLlOBkHzzeWNJwEZZum38X9U
22777I6DOKgWCh89pNwCAlo89wzEtPVhB8FS991TddoGJV4XNhzDUkeR2mmfAgMB
AAGjggM/MIIDOzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT3xN6xIkD/hojD
LGeTnATDgIJAJTAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI
KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGlq
NU5EM1VjVlRZNXBYTmQ4QWp4dEg4VlRxcVNtc0JNNlBhNEg4MVJhZU0vMTCBigYI
KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOGlq
NU5EM1VjVlRZNXBYTmQ4QWp4dEg4VlRxcVNtc0JNNlBhNEg4MVJhZU0vMS9GN0M0
REVCMTIyNDBGRjg2ODhDMzJDNjc5MzlDMDRDMzgwODI0MDI1Lm1mdDA/BggrBgEF
BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj
YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcB
Af8EJTAjMBIEAgABMAwDBAKPiUADBAK//UQwDQQCAAIwBwMFACgEE1wwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDBAVqMA0GCSqGSIb3DQEBCwUAA4IBAQB+eZ/hwdvb
5ms5Jn8kYUxMgBgA/cY1iBpRllw6tJiAgdUe1qUIKIP/mOkE+ixzOfO91gwd1cqz
oAPLdFlInBxQ04VYIf43maaq88HXlOJ/SmU9a1Ndg2aGug3GVcwlqO+H63ilQB9r
ZFdm7ueQKkNohLarC20meR3LnNuv2j5ILOm6CgeoOSrl5fzzRZfWh4l87nG3x8vs
CddfGe1fHG6uPg3zI5QpFt53Au6t+NoVeVV9ARuuZepuytz1FB8/UdN9EF/CIKOb
4lCRK18UPEt3pZrSrkHkP5xZWRXfvvJwzxXvLuY8a0MoHlX0L0cD8TqI91TFNNxe
nSn2ATLdId4s
-----END CERTIFICATE-----
Generated at Wed Apr 9 10:23:41 2025 by rpki-client