Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7CA1FCF91BD0F97C0D4500E2183D85782B175D28.cer
File:                     7CA1FCF91BD0F97C0D4500E2183D85782B175D28.cer (raw, json)
Hash identifier:          cpdLh8FBXpeP8MzfJX+SmXYE8Tr4T55IoRRwlWFJv2c=
Subject key identifier:   7C:A1:FC:F9:1B:D0:F9:7C:0D:45:00:E2:18:3D:85:78:2B:17:5D:28
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       14D0E015437EF80B029E741F191FECF3517896CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/1/7CA1FCF91BD0F97C0D4500E2183D85782B175D28.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 19:11:59 +0000
Certificate not after:    Wed 02 Apr 2025 19:16:59 +0000
Subordinate resources:    AS: 269556
                          IP: 45.187.196.0/22
                          IP: 2804:6668::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d0:e0:15:43:7e:f8:0b:02:9e:74:1f:19:1f:ec:f3:51:78:96:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 19:11:59 2024 GMT
            Not After : Apr  2 19:16:59 2025 GMT
        Subject: CN=7CA1FCF91BD0F97C0D4500E2183D85782B175D28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:df:c8:66:8e:4a:b3:93:78:e8:69:39:93:d7:
                    bc:46:3b:86:76:05:0f:1c:8f:b6:45:81:aa:e2:af:
                    dc:b5:cd:15:c6:61:94:1a:00:21:f4:c6:5d:0c:cc:
                    cc:b2:d8:3c:ca:e2:a8:c9:82:5e:84:7e:19:ad:5a:
                    97:e0:67:69:4c:8f:d0:a1:d4:96:f9:cc:39:41:a2:
                    a4:ad:66:05:5b:4d:85:d0:0e:43:42:17:74:32:4c:
                    b2:fc:7b:00:62:aa:66:fd:d4:31:a2:ee:11:73:30:
                    00:bd:d9:42:cc:3a:44:21:0e:af:71:8c:f2:80:c4:
                    8a:d1:e7:bd:c5:58:a6:de:cc:b0:a8:ec:85:1c:87:
                    83:0a:25:ed:87:62:e7:56:91:88:90:07:3c:45:71:
                    14:fc:c5:56:99:6b:5c:c5:72:24:04:70:53:78:85:
                    a4:12:e2:58:fe:d6:53:55:03:86:e5:29:fd:1c:20:
                    ef:62:d6:61:b4:1d:89:bc:2f:83:73:8f:ad:64:55:
                    52:50:74:5f:a7:cd:28:0a:46:8d:2a:e8:2b:b7:6c:
                    0b:5d:9b:0f:63:69:04:d9:5b:f2:c7:9b:f2:25:ee:
                    08:c1:2b:16:9e:04:7e:35:c9:61:99:de:2e:37:06:
                    e4:87:f3:f6:d1:d9:65:58:18:55:00:df:35:07:5d:
                    d4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                7C:A1:FC:F9:1B:D0:F9:7C:0D:45:00:E2:18:3D:85:78:2B:17:5D:28
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/1/7CA1FCF91BD0F97C0D4500E2183D85782B175D28.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.196.0/22
                IPv6:
                  2804:6668::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269556

    Signature Algorithm: sha256WithRSAEncryption
         9e:80:8a:50:10:4d:4d:2c:7a:b3:b3:f6:d0:de:82:f4:c8:49:
         a0:03:d5:78:f6:64:27:d2:95:e8:e8:10:30:58:41:bb:50:27:
         ac:ab:16:6a:23:7b:a2:11:3f:12:09:c7:19:53:11:10:67:4e:
         03:29:02:6c:ed:9c:1a:7a:0a:70:0a:43:c7:17:27:dc:01:22:
         84:fd:f1:d2:da:68:66:31:4a:43:f4:b3:f8:da:ef:0c:c0:b5:
         6f:b7:25:af:4c:29:dd:98:f5:56:46:08:b2:f4:4b:b0:bd:bc:
         92:58:be:9f:69:2e:74:8a:23:1a:44:9b:24:49:e2:44:b9:da:
         f8:26:e1:7a:58:b1:aa:53:9a:a7:cb:20:8d:4b:ee:96:c4:f0:
         39:eb:cb:9f:89:e0:49:98:cf:f4:e2:0b:22:a0:a1:7f:bc:5a:
         6e:22:d6:2c:d4:3a:f9:f1:f3:6d:8e:cd:79:bd:d7:08:92:0e:
         a0:ee:28:67:db:a8:19:3d:e9:ec:af:ec:df:fe:da:55:b1:8f:
         bf:45:20:68:c9:af:6f:1c:c8:68:89:d9:5c:62:cf:93:f7:a3:
         47:24:7b:e6:73:62:c6:27:ff:d7:3e:33:1f:32:68:1a:96:47:
         46:2e:e4:75:92:1a:ef:74:b0:ea:db:b5:0b:44:6f:d3:89:40:
         dc:dd:fa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:16:57 2025 by rpki-client