Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
File:                     0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer (raw, json)
Hash identifier:          NCaOwRHNw2ZLOHF13MeFX4GGWkgeoVKz8XNuZTLtynk=
Subject key identifier:   0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       0F4AB5A296AA0495D1D3AF90998565BC69E9468B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Mar 2025 12:54:29 +0000
Certificate not after:    Fri 06 Mar 2026 12:59:29 +0000
Subordinate resources:    AS: 28634
                          IP: 177.105.128.0/20
                          IP: 179.96.128.0/19
                          IP: 189.90.96.0/20
                          IP: 201.62.64.0/19
                          IP: 2804:128::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:4a:b5:a2:96:aa:04:95:d1:d3:af:90:99:85:65:bc:69:e9:46:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  7 12:54:29 2025 GMT
            Not After : Mar  6 12:59:29 2026 GMT
        Subject: CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:83:af:57:20:4d:79:03:da:69:0f:9e:1a:2c:
                    e9:0a:d3:e1:db:a7:93:f6:72:52:43:78:ad:0a:11:
                    3a:cd:b7:ce:7c:8a:89:dd:65:76:a5:05:15:e3:76:
                    0a:48:85:e9:ef:76:20:c3:76:39:b2:46:5b:63:e5:
                    ef:e1:09:30:cb:01:fd:21:ae:88:cc:7c:ee:cf:eb:
                    7a:a7:59:89:6b:3c:92:fe:24:30:e9:f4:63:9a:f8:
                    40:d4:18:2f:bb:ae:07:4f:fa:77:4d:12:f1:a6:a2:
                    80:57:7c:ed:4f:eb:ac:d3:04:15:dc:17:47:0f:13:
                    b7:77:36:fc:d8:df:40:28:18:c2:41:69:82:29:77:
                    e6:f3:b0:21:4c:5d:80:49:68:5c:5c:35:81:8f:11:
                    88:ee:bb:1a:ca:74:9e:44:f1:73:cd:e6:94:f4:39:
                    6e:da:4b:df:93:8d:de:0a:31:8a:31:83:4c:62:a1:
                    08:ae:72:52:cb:ec:a0:ad:fd:69:e3:43:6c:79:dc:
                    4d:f4:90:85:d9:04:cc:36:f8:bc:d3:0e:54:a6:9b:
                    97:ba:4c:57:8d:e2:c8:e5:e7:23:27:82:4b:e9:1f:
                    01:eb:b0:4c:b7:6a:e0:fd:bc:4f:f9:33:7f:c1:55:
                    50:a0:c7:f2:7f:db:e7:c3:e9:55:25:f7:06:f2:47:
                    b2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.105.128.0/20
                  179.96.128.0/19
                  189.90.96.0/20
                  201.62.64.0/19
                IPv6:
                  2804:128::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28634

    Signature Algorithm: sha256WithRSAEncryption
         8e:b2:d0:af:92:08:0b:cf:fa:ff:00:f5:95:79:18:24:43:e5:
         b0:f2:98:66:96:49:3b:f0:12:17:59:2a:3d:68:f9:61:7b:f4:
         93:4a:55:bb:fe:0d:c9:fe:fd:73:1d:6a:08:ac:00:16:3e:8c:
         c1:c6:c4:5e:61:83:c3:a6:e0:12:2c:eb:14:b6:82:60:bb:1b:
         2c:c0:94:bf:d8:29:69:2a:8c:29:84:06:b0:03:9f:19:f1:57:
         1e:0e:1f:98:04:0e:13:f9:f7:c2:41:85:e8:1a:77:4c:2f:fe:
         57:d5:30:8e:c0:84:57:e3:d1:c2:17:60:a2:7f:7a:ed:ba:e3:
         ff:a6:52:4a:24:be:7f:46:93:f3:d7:38:b8:67:84:93:e9:05:
         11:fd:d3:25:86:8e:91:40:28:1b:1b:27:3b:53:e2:15:ee:7a:
         fa:12:00:9b:88:94:46:27:75:91:3f:da:bf:24:1b:9f:6e:84:
         be:1a:72:c0:6b:4e:ef:a2:58:df:71:cc:26:ed:85:33:d2:ca:
         64:51:57:20:2b:62:3a:23:16:b9:41:31:09:8e:c4:20:b3:63:
         08:28:56:94:17:c2:0c:1b:d6:44:ac:96:4c:d6:e1:5c:8d:92:
         e5:d5:3b:b7:2c:ac:1b:60:65:79:2f:e0:73:02:14:2d:38:1d:
         be:2b:1e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:11 2025 by rpki-client