Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/60254EF66E08E1D6F15DAECBC1B31F87CC24DDFF.cer
File:                     60254EF66E08E1D6F15DAECBC1B31F87CC24DDFF.cer (raw, json)
Hash identifier:          6i8W5feWVmxWG6gbF4Ovh2WkluGM/WN7UhaQNfwI4o8=
Subject key identifier:   60:25:4E:F6:6E:08:E1:D6:F1:5D:AE:CB:C1:B3:1F:87:CC:24:DD:FF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       72AAC118105D6B802A8E61A52ED4550EA404FE9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8GQN4SmR79uvfNzmMBjHPuWkkQtfyEsznWs8cXsVEmAj/0/60254EF66E08E1D6F15DAECBC1B31F87CC24DDFF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8GQN4SmR79uvfNzmMBjHPuWkkQtfyEsznWs8cXsVEmAj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Dec 2021 21:28:36 +0000
Certificate not after:    Fri 09 Dec 2022 21:33:36 +0000
Subordinate resources:    AS: 270425
                          IP: 190.83.120.0/22
                          IP: 2804:6bc8::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:aa:c1:18:10:5d:6b:80:2a:8e:61:a5:2e:d4:55:0e:a4:04:fe:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 10 21:28:36 2021 GMT
            Not After : Dec  9 21:33:36 2022 GMT
        Subject: CN=60254EF66E08E1D6F15DAECBC1B31F87CC24DDFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a2:d1:a7:65:93:9d:c3:c0:d6:28:7c:d8:7b:
                    2b:7e:56:40:65:ef:9d:c6:a8:62:1f:9e:99:98:e2:
                    06:a0:07:eb:31:08:bf:e1:74:92:46:e6:0f:d0:47:
                    55:ce:fb:c6:83:1e:4a:8b:b9:e9:9e:fc:eb:54:ca:
                    9b:b4:74:c4:a9:73:07:3c:07:78:84:09:f5:33:69:
                    d6:bd:c7:82:cc:c7:c0:41:1e:6e:a0:fc:36:9e:20:
                    23:bc:cc:50:34:f3:75:1b:d8:17:91:2f:f1:97:b9:
                    51:d2:c8:c4:e8:d8:8c:71:93:d0:9d:2e:cd:4e:cb:
                    c0:fb:17:ed:0b:c2:fe:65:d4:2e:c9:c4:53:74:2e:
                    30:58:9c:56:e6:9c:5f:3e:30:10:79:f2:90:63:47:
                    83:89:26:a6:58:c0:8c:2f:a5:05:37:67:24:5c:6b:
                    9e:fe:c1:04:e1:86:70:c2:b5:59:4d:e2:1b:71:dd:
                    95:87:95:bd:14:bc:07:49:7a:e1:0d:31:d1:92:23:
                    6f:1d:6e:90:33:63:03:26:bd:9f:85:70:63:39:cd:
                    5c:be:2b:96:cc:bc:5f:a9:22:75:91:bf:a7:93:03:
                    3c:9f:64:0d:60:5d:70:5c:a8:93:1b:00:55:2a:de:
                    3c:c4:40:8d:ea:c8:62:26:0c:e8:c8:be:0b:a7:66:
                    28:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:25:4E:F6:6E:08:E1:D6:F1:5D:AE:CB:C1:B3:1F:87:CC:24:DD:FF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8GQN4SmR79uvfNzmMBjHPuWkkQtfyEsznWs8cXsVEmAj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8GQN4SmR79uvfNzmMBjHPuWkkQtfyEsznWs8cXsVEmAj/0/60254EF66E08E1D6F15DAECBC1B31F87CC24DDFF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.120.0/22
                IPv6:
                  2804:6bc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270425

    Signature Algorithm: sha256WithRSAEncryption
         47:c0:51:2f:6b:09:79:e2:11:da:a2:96:60:63:c3:a5:2f:66:
         7a:10:ef:7e:fe:54:a3:3e:71:5f:87:f0:d3:b5:51:cb:b2:2b:
         5f:87:ad:75:23:da:b7:c3:e1:4c:b8:af:94:62:3d:24:61:22:
         e7:14:2f:6a:77:9e:8d:a5:19:0f:6f:ac:28:a7:73:98:9d:80:
         da:ab:de:64:b0:3c:4d:39:27:17:57:1e:d3:40:1e:45:8b:d6:
         53:e5:c0:6f:ea:92:3c:36:22:06:d1:b2:9c:2d:fe:61:3c:59:
         a9:4d:14:9b:23:37:16:61:76:7a:97:67:60:a5:ac:06:3e:27:
         e8:f7:7b:ae:35:d9:0d:38:da:3a:70:4c:4a:4b:a0:a6:0d:8b:
         54:d9:45:d4:ef:99:0c:3a:4b:17:90:a1:7f:63:88:1b:7b:1b:
         59:1e:31:67:f7:f3:b6:c5:c6:b7:89:ab:8e:13:dd:36:53:35:
         3d:b8:85:8a:30:78:2e:bb:1f:26:cd:85:a4:01:4d:31:97:58:
         bd:6d:f2:eb:1b:4d:4c:45:ee:3c:47:c5:d7:78:f7:32:af:30:
         1e:06:38:24:fd:26:09:63:34:2b:49:30:82:82:ee:7b:bf:cf:
         9a:23:f3:64:05:79:7b:36:36:4a:d9:14:94:e6:4a:54:e7:87:
         11:ae:5c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 17:47:59 2025 by rpki-client