Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.cer
File:                     7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.cer (raw, json)
Hash identifier:          9kfx5xUmecCWYqh7k2VJHXBkOwzS/EQ9CjbtelU6Clc=
Subject key identifier:   77:42:14:3B:D1:4B:1F:B2:C8:2A:2C:E2:FD:5A:FA:E2:8B:CC:87:59
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       608339D0CBC5EE2981CEEA0F7460D6BCF3DD9FB4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 23:43:57 +0000
Certificate not after:    Wed 02 Apr 2025 23:48:57 +0000
Subordinate resources:    AS: 61707
                          IP: 131.0.180.0/22
                          IP: 2804:1b14::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:83:39:d0:cb:c5:ee:29:81:ce:ea:0f:74:60:d6:bc:f3:dd:9f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 23:43:57 2024 GMT
            Not After : Apr  2 23:48:57 2025 GMT
        Subject: CN=7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:1a:28:4f:61:ae:9c:79:0d:5c:a6:11:6d:
                    79:21:13:23:95:96:77:bf:7f:ff:11:05:ab:f5:7e:
                    81:c7:a0:08:da:06:79:e2:16:e7:de:06:0b:59:83:
                    2d:6e:3e:dc:07:6b:4d:ec:ab:6e:54:b4:7d:8f:31:
                    db:84:85:e3:e9:17:35:88:f4:e5:75:e7:79:29:ff:
                    a4:d0:6c:c4:60:25:39:f4:32:79:24:0e:4c:3d:60:
                    91:40:4b:86:48:2c:fa:c4:1c:4e:9b:30:00:01:21:
                    d8:c5:ab:ed:99:a6:6e:d1:22:2f:64:11:55:c4:58:
                    c5:2b:23:41:1b:1d:31:ff:62:a9:6b:d5:a5:9d:b7:
                    bd:7f:a7:62:7b:4e:bd:ec:97:ed:32:5d:85:5c:54:
                    97:8f:0e:9b:06:99:06:e3:11:fe:82:43:7a:bb:61:
                    6d:94:cf:4a:d5:00:49:f0:97:6a:62:ed:51:a7:37:
                    02:2d:4a:30:b1:21:a4:45:c8:66:95:c8:61:22:5e:
                    ef:64:8d:c8:6a:af:ef:ba:b8:16:b2:ab:b9:c9:ee:
                    22:26:1d:70:c1:ff:ad:1a:49:a3:e2:15:03:71:15:
                    68:b0:26:76:b5:fa:a2:7c:92:75:cd:86:d5:56:af:
                    1e:d9:74:3c:86:b9:6c:3c:75:31:63:83:89:14:e9:
                    e8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                77:42:14:3B:D1:4B:1F:B2:C8:2A:2C:E2:FD:5A:FA:E2:8B:CC:87:59
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7cTLgJt55hgJ59gqmyzJ2PK8VHDGmzNUxPDuB9eKzgXt/1/7742143BD14B1FB2C82A2CE2FD5AFAE28BCC8759.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.180.0/22
                IPv6:
                  2804:1b14::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61707

    Signature Algorithm: sha256WithRSAEncryption
         05:c1:36:4b:ba:1b:1d:33:39:ea:50:d2:b7:bb:8a:50:cf:42:
         3a:b4:fa:b2:3c:1c:3f:82:08:16:47:a2:43:25:0f:87:e3:10:
         f8:a4:fa:0d:d9:40:37:c4:f1:00:3a:90:41:46:45:0f:ef:35:
         44:58:dc:de:9a:87:81:62:f9:39:45:06:47:0b:51:7a:fa:20:
         ab:09:d8:80:d7:15:98:de:d2:61:b9:ad:d2:b2:10:87:cc:73:
         60:dc:51:70:ce:83:2e:83:e3:fa:f5:67:1f:d0:bd:80:f8:8b:
         80:65:24:4f:5b:6b:ec:54:66:e5:1a:6e:72:b8:82:0d:ec:7e:
         58:8b:43:7b:02:33:b9:b0:3b:d5:a2:57:58:73:71:9c:58:f7:
         53:d2:ad:4b:18:01:f8:94:1d:ab:b2:a6:53:42:3b:14:d2:c7:
         51:bb:d5:9b:2e:62:0a:24:3b:41:a1:9c:b6:ca:78:d7:c2:bc:
         3d:99:34:af:b1:7a:ae:f1:a7:91:a9:1e:05:fb:e7:6e:d1:ed:
         bb:6b:62:e4:95:ac:92:09:60:e3:8a:2c:db:50:7d:14:32:5e:
         96:22:f3:57:23:bf:d2:00:fa:b7:84:85:e2:7e:e3:a1:06:3a:
         23:b2:73:ef:74:1e:a5:2e:10:30:4c:30:f8:16:b5:7a:34:55:
         09:32:78:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:08:49 2025 by rpki-client