Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7A3155CF09025C706805077AAA5B01CEBAB508F3.cer
File:                     7A3155CF09025C706805077AAA5B01CEBAB508F3.cer (raw, json)
Hash identifier:          nYRtwbpGMQ9VkLRGEIjZI5OgxidD++pndT8GX+Bj9RU=
Subject key identifier:   7A:31:55:CF:09:02:5C:70:68:05:07:7A:AA:5B:01:CE:BA:B5:08:F3
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       517238472B9D6814CD4DD724D95106E3F6BF9CE8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/7A3155CF09025C706805077AAA5B01CEBAB508F3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 29 Jan 2025 22:23:39 +0000
Certificate not after:    Wed 28 Jan 2026 22:28:39 +0000
Subordinate resources:    AS: 270431
                          IP: 190.115.84.0/22
                          IP: 2804:6be0::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:72:38:47:2b:9d:68:14:cd:4d:d7:24:d9:51:06:e3:f6:bf:9c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan 29 22:23:39 2025 GMT
            Not After : Jan 28 22:28:39 2026 GMT
        Subject: CN=7A3155CF09025C706805077AAA5B01CEBAB508F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:01:71:34:3f:0b:31:cc:2d:94:9a:f5:29:5d:
                    73:62:63:94:21:36:ca:44:c3:ea:dc:13:e5:57:80:
                    7c:03:92:29:d5:61:2a:9b:5c:68:44:70:60:ad:e7:
                    74:bf:5f:b6:9c:0d:a2:8b:75:bd:e0:80:c7:48:d0:
                    ff:d0:d3:43:7e:95:5c:d3:5f:4f:d6:fb:ca:42:ee:
                    64:04:90:85:b0:12:1d:10:93:1d:ea:f3:03:72:07:
                    1e:13:53:8b:ac:f0:37:56:af:b6:4b:20:13:ff:e0:
                    5e:a0:0c:6b:bc:25:24:cb:d9:14:5d:06:09:fc:8c:
                    33:06:4b:02:80:1f:b9:36:ae:5f:99:d4:ed:94:84:
                    7e:85:7c:65:a4:40:0a:30:8a:40:2d:e0:67:ee:18:
                    c5:f2:9c:dd:0f:2d:ca:cd:89:47:53:84:48:31:14:
                    7e:f1:93:c2:88:7e:d2:36:17:c6:5c:9b:13:2a:33:
                    a4:ba:9e:61:c7:1e:1c:8f:96:80:1a:b3:28:b0:56:
                    dd:9c:39:dc:b9:ea:8a:c5:9f:36:61:f7:1c:51:8f:
                    e9:2a:eb:6c:92:21:3b:b3:be:5a:51:72:80:cb:c4:
                    b9:9c:06:a8:82:90:f1:b0:68:47:7e:e8:89:03:2b:
                    7e:f2:94:ab:a6:32:ed:d0:52:22:16:bf:e1:80:4c:
                    08:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7A:31:55:CF:09:02:5C:70:68:05:07:7A:AA:5B:01:CE:BA:B5:08:F3
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/7A3155CF09025C706805077AAA5B01CEBAB508F3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.84.0/22
                IPv6:
                  2804:6be0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270431

    Signature Algorithm: sha256WithRSAEncryption
         ca:49:ea:45:db:1b:86:39:e7:bf:cc:70:fe:f3:a9:a9:e9:44:
         53:00:76:9b:26:2b:7a:f2:91:b3:72:c9:ac:f5:0a:f7:67:3b:
         38:a7:3a:4c:07:ed:03:49:1a:58:1d:05:a4:42:4e:40:2b:f1:
         26:e6:6d:67:bc:8d:96:a7:9c:78:d0:c2:1e:30:b3:61:4a:47:
         5e:e4:f0:a5:9d:71:63:4b:e8:b6:13:fa:cb:f4:69:43:ff:fe:
         17:b2:2a:69:43:27:9f:8d:0b:75:df:64:bb:40:80:b9:df:58:
         7b:0d:c3:b8:a8:39:d8:83:e1:ce:ac:21:c4:f1:db:2e:82:4e:
         43:bc:2e:43:49:34:dc:97:ec:e3:ed:48:b5:08:df:5f:bc:da:
         98:63:eb:fd:77:8f:ae:3b:77:2a:f6:b4:42:c2:5a:b3:17:ec:
         a4:e9:38:98:f5:38:0d:90:36:40:f4:e9:cf:5a:98:25:de:1a:
         e6:5d:60:11:fb:62:f7:6a:1c:f2:54:1d:af:43:8f:b8:6f:14:
         68:af:99:29:80:12:39:44:60:8c:67:5a:ad:44:71:29:09:6f:
         26:89:0c:b2:54:6d:a6:2d:40:6a:1c:08:3b:1a:8b:ef:ec:8a:
         e1:6f:c9:3d:0c:5f:42:b1:4a:d7:53:ed:7e:54:18:1c:94:2d:
         6e:75:05:74
-----BEGIN CERTIFICATE-----
MIIGMDCCBRigAwIBAgIUUXI4RyudaBTNTdck2VEG4/a/nOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2
N0NBOEE0QjAeFw0yNTAxMjkyMjIzMzlaFw0yNjAxMjgyMjI4MzlaMDMxMTAvBgNV
BAMTKDdBMzE1NUNGMDkwMjVDNzA2ODA1MDc3QUFBNUIwMUNFQkFCNTA4RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeAXE0PwsxzC2UmvUpXXNiY5Qh
NspEw+rcE+VXgHwDkinVYSqbXGhEcGCt53S/X7acDaKLdb3ggMdI0P/Q00N+lVzT
X0/W+8pC7mQEkIWwEh0Qkx3q8wNyBx4TU4us8DdWr7ZLIBP/4F6gDGu8JSTL2RRd
Bgn8jDMGSwKAH7k2rl+Z1O2UhH6FfGWkQAowikAt4GfuGMXynN0PLcrNiUdThEgx
FH7xk8KIftI2F8ZcmxMqM6S6nmHHHhyPloAasyiwVt2cOdy56orFnzZh9xxRj+kq
62ySITuzvlpRcoDLxLmcBqiCkPGwaEd+6IkDK37ylKumMu3QUiIWv+GATAiVAgMB
AAGjggM6MIIDNjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR6MVXPCQJccGgF
B3qqWwHOurUI8zAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD
MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm
BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv
bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB
QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC
Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAUAGCCsGAQUFBwELBIIBMjCCAS4wXgYI
KwYBBQUHMAWGUnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vM1R4
RTFZcVlzWFpWMjVGTUxNbVAzbUhWdWtaenlxR3RKMmFZVkt0WW5HNlQvMC8wgYoG
CCsGAQUFBzAKhn5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNU
eEUxWXFZc1haVjI1Rk1MTW1QM21IVnVrWnp5cUd0SjJhWVZLdFluRzZULzAvN0Ez
MTU1Q0YwOTAyNUM3MDY4MDUwNzdBQUE1QjAxQ0VCQUI1MDhGMy5tZnQwPwYIKwYB
BQUHMA2GM2h0dHBzOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JyZHAvbm90aWZp
Y2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEH
AQH/BB8wHTAMBAIAATAGAwQCvnNUMA0EAgACMAcDBQAoBGvgMBoGCCsGAQUFBwEI
AQH/BAswCaAHMAUCAwQgXzANBgkqhkiG9w0BAQsFAAOCAQEAyknqRdsbhjnnv8xw
/vOpqelEUwB2myYrevKRs3LJrPUK92c7OKc6TAftA0kaWB0FpEJOQCvxJuZtZ7yN
lqeceNDCHjCzYUpHXuTwpZ1xY0vothP6y/RpQ//+F7IqaUMnn40Ldd9ku0CAud9Y
ew3DuKg52IPhzqwhxPHbLoJOQ7wuQ0k03Jfs4+1ItQjfX7zamGPr/XePrjt3Kva0
QsJasxfspOk4mPU4DZA2QPTpz1qYJd4a5l1gEfti92oc8lQdr0OPuG8UaK+ZKYAS
OURgjGdarURxKQlvJokMslRtpi1AahwIOxqL7+yK4W/JPQxfQrFK11PtflQYHJQt
bnUFdA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 15:34:03 2025 by rpki-client