Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/74C039C7C150330C336CF168CC6D88F65E572B86.cer
File:                     74C039C7C150330C336CF168CC6D88F65E572B86.cer (raw, json)
Hash identifier:          7W4a0YlXkzN2YJba1VDheRv4XWPSfEMF/+PZPxWevCU=
Subject key identifier:   74:C0:39:C7:C1:50:33:0C:33:6C:F1:68:CC:6D:88:F6:5E:57:2B:86
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       086149398AB68FD8A89A689FB79E335EF56CA4CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/1/74C039C7C150330C336CF168CC6D88F65E572B86.mft
caRepository:             rsync://rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 23:55:39 +0000
Certificate not after:    Thu 03 Apr 2025 00:00:39 +0000
Subordinate resources:    AS: 263879
                          IP: 138.204.76.0/22
                          IP: 2804:2724::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:61:49:39:8a:b6:8f:d8:a8:9a:68:9f:b7:9e:33:5e:f5:6c:a4:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 23:55:39 2024 GMT
            Not After : Apr  3 00:00:39 2025 GMT
        Subject: CN=74C039C7C150330C336CF168CC6D88F65E572B86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:8c:7b:de:f0:87:9e:de:50:2c:8f:f9:21:
                    b5:1f:7d:3b:33:01:a4:bb:8d:b4:ce:f6:6f:77:ae:
                    c7:38:e8:8c:a9:9e:6b:31:3c:8f:c5:4f:fb:ef:a2:
                    16:e7:17:de:0f:f1:8d:55:7a:a7:02:45:66:8c:c2:
                    56:13:da:b5:de:1e:15:2c:26:3a:fa:72:4d:9a:bb:
                    98:5d:f0:2f:4c:48:f4:2f:a7:56:01:f6:2e:a3:fd:
                    b2:b4:00:1c:fb:a2:31:40:3b:73:7c:71:a2:b3:eb:
                    60:b9:80:4c:4a:a4:11:69:c3:3e:ed:83:60:ef:a1:
                    52:67:8d:b9:60:28:ac:06:e7:da:da:1a:da:f7:35:
                    53:c8:06:c8:47:7d:31:3b:6d:6f:18:99:85:f1:99:
                    11:15:3d:af:22:7f:3b:8d:8a:fb:87:63:4c:a5:a2:
                    76:6e:1e:5a:c5:47:85:3e:56:6e:f9:51:f3:3b:00:
                    6e:2e:30:bd:bd:ed:6e:cb:91:d0:69:04:d7:29:7e:
                    27:45:6f:25:db:a2:37:61:ac:6f:05:5f:63:eb:48:
                    ef:da:be:2e:3e:ad:2c:bf:b4:68:1c:f9:ac:03:7b:
                    b0:5d:ba:11:ac:98:89:6e:33:be:c7:2d:51:34:aa:
                    98:4c:4a:ad:1d:fd:31:f2:7a:91:ab:1e:bc:10:2a:
                    c0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                74:C0:39:C7:C1:50:33:0C:33:6C:F1:68:CC:6D:88:F6:5E:57:2B:86
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/64tM1G2ivLUWvt6hEAwFQbNTZ4VhTFca1Hjm8kGwtyic/1/74C039C7C150330C336CF168CC6D88F65E572B86.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.76.0/22
                IPv6:
                  2804:2724::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263879

    Signature Algorithm: sha256WithRSAEncryption
         26:4f:ec:1f:ca:4a:bd:1d:7d:9f:59:5f:d1:46:da:ce:bb:16:
         42:e6:c0:10:4d:1f:43:92:2e:81:97:4c:19:0f:64:93:b9:9b:
         d0:17:a7:f4:68:61:61:fc:5a:6a:35:bd:a1:bc:e3:d5:6a:ab:
         0e:07:10:f7:52:ea:a1:90:d3:a7:5d:1e:31:30:51:b9:e5:8f:
         de:b9:bb:03:80:b3:05:d9:19:07:26:bc:62:af:7a:9a:17:77:
         9c:ed:a6:c5:0b:8a:61:e3:8a:e5:f2:94:17:ea:ac:ac:a9:8c:
         c7:0d:15:bd:79:ea:df:94:af:ef:34:9f:1d:ff:96:d3:81:4b:
         52:10:28:e8:4d:97:e2:9d:b5:24:88:f9:a8:aa:ed:bf:79:96:
         55:66:35:3c:d0:66:55:80:06:2c:03:83:ec:d5:a9:2e:7b:64:
         9e:77:4d:1f:b4:75:4c:f6:76:c7:80:bf:43:d7:68:91:dd:48:
         d2:53:0d:d8:ac:1b:26:af:e1:8a:7b:ae:7b:ab:54:8a:70:97:
         0b:7a:20:d9:d0:7b:59:bc:8d:2f:f6:07:ca:1b:94:69:1e:cd:
         fb:e1:6c:70:08:bc:5b:b5:d7:04:cc:ca:d8:44:b9:81:66:a4:
         10:95:e3:35:19:82:e7:de:40:9f:3e:72:4a:f7:0c:32:41:b1:
         d6:91:b8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:51:12 2025 by rpki-client