Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/06F3CB49A918297B5AC7DDDBE54A101D2FB4773B.cer
File:                     06F3CB49A918297B5AC7DDDBE54A101D2FB4773B.cer (raw, json)
Hash identifier:          r7UTy9aO9zr4sne3pd4JbAfSUiKP09veAA+c4afpOWg=
Subject key identifier:   06:F3:CB:49:A9:18:29:7B:5A:C7:DD:DB:E5:4A:10:1D:2F:B4:77:3B
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       4A7D49E6A2720DE4FD089865C8199514F9B6C7E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/06F3CB49A918297B5AC7DDDBE54A101D2FB4773B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 Jan 2025 22:19:22 +0000
Certificate not after:    Thu 01 Jan 2026 22:24:22 +0000
Subordinate resources:    AS: 263855
                          IP: 138.186.84.0/22
                          IP: 2804:26c4::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:7d:49:e6:a2:72:0d:e4:fd:08:98:65:c8:19:95:14:f9:b6:c7:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Jan  2 22:19:22 2025 GMT
            Not After : Jan  1 22:24:22 2026 GMT
        Subject: CN=06F3CB49A918297B5AC7DDDBE54A101D2FB4773B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:63:9b:d7:19:2b:dd:2b:81:8a:36:be:88:fd:
                    d7:14:8c:14:04:2a:f0:60:75:f4:81:71:7f:5c:ae:
                    60:99:d9:7f:b2:2d:34:34:00:72:6e:51:5e:d6:5a:
                    87:45:ed:8f:85:9f:e8:90:7b:66:9a:61:3c:6b:05:
                    8b:28:0d:93:0f:67:1b:bb:f4:06:d3:0b:34:f8:52:
                    27:c1:f9:fb:94:73:c0:fc:51:21:6f:47:34:1b:39:
                    79:5d:7d:99:66:a7:ae:a1:fb:bb:0a:4d:c6:8e:bb:
                    5a:b0:ea:73:b8:f7:dd:0f:f2:98:7a:39:3e:be:4e:
                    c4:36:b9:7a:ac:ce:9c:51:e8:b6:2b:79:2c:f5:31:
                    cf:88:8c:7f:e5:75:ca:93:49:1e:de:89:0b:5c:83:
                    51:2c:e6:b6:b4:e9:b6:e2:15:cc:1c:93:f9:9a:4d:
                    24:b4:00:b3:49:e2:dc:78:c4:14:aa:ed:ed:96:e8:
                    6b:57:f8:cf:9f:50:4a:4d:62:fc:3b:68:ea:d1:cc:
                    ea:dd:88:1b:5a:ab:f6:72:8b:c6:20:ec:0f:1b:e9:
                    7b:6a:14:10:b5:49:a0:67:43:1a:96:c1:0c:7d:11:
                    ad:9f:3c:f6:5f:2c:bc:c2:ad:52:7e:73:a0:9f:8b:
                    26:c7:f9:14:87:5b:a6:ca:32:84:72:82:dd:fd:8c:
                    fd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                06:F3:CB:49:A9:18:29:7B:5A:C7:DD:DB:E5:4A:10:1D:2F:B4:77:3B
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/06F3CB49A918297B5AC7DDDBE54A101D2FB4773B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.84.0/22
                IPv6:
                  2804:26c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263855

    Signature Algorithm: sha256WithRSAEncryption
         5e:26:c2:70:02:ad:5b:03:e1:ab:cf:e6:6e:b4:d8:ed:06:9c:
         55:57:ce:4d:37:ab:57:66:cc:9d:17:e6:77:10:cd:ef:10:4a:
         37:b7:d0:a4:f9:6e:c5:81:2e:57:6e:10:71:87:a6:50:48:23:
         a2:40:27:ed:69:83:ac:5c:50:b7:07:af:a6:4f:b1:e9:87:ff:
         e2:07:8a:da:66:3c:82:27:24:a0:29:1e:d6:58:d0:9c:68:af:
         ec:d4:e8:13:15:fe:6b:15:4b:c4:2c:8f:1c:53:8a:46:58:6c:
         dd:f3:7b:1b:84:0f:23:59:9b:5a:b4:a5:69:65:5a:dc:fe:b9:
         63:79:9a:c9:3a:b7:ba:3e:78:a4:69:db:fc:8e:05:25:96:de:
         44:fd:f5:e1:31:a5:d5:db:08:62:fc:0e:bf:19:9a:48:49:70:
         75:d0:7f:51:b3:1f:2d:7f:39:98:eb:36:32:3d:3d:f3:66:42:
         94:ab:e1:42:c5:10:ab:fd:8e:96:2a:a5:fe:f2:a7:07:71:57:
         6e:69:8d:16:4f:c6:93:60:46:73:d5:72:2b:7b:b7:d3:e9:4e:
         2f:d1:f8:70:ff:9f:8c:95:fe:f1:06:2c:79:a9:40:e3:7f:63:
         f4:8c:1d:ef:82:f9:a7:42:3e:fc:67:90:b7:3f:26:45:99:ea:
         68:0a:4c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:41:09 2025 by rpki-client