Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/206BD12DC7EB1E7A26A659020EDF0978056AB21A.cer
File:                     206BD12DC7EB1E7A26A659020EDF0978056AB21A.cer (raw, json)
Hash identifier:          tgc7e0B03MvqgariQOICyHotTHws0UZwO2pxMfocqHM=
Subject key identifier:   20:6B:D1:2D:C7:EB:1E:7A:26:A6:59:02:0E:DF:09:78:05:6A:B2:1A
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       6AED5D48184F137E3DC6C35950E7A518D6806DC0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9x5h6aGizgJyjR5GUUGfYTkGyyR729j82NuEufM281dZ/1/206BD12DC7EB1E7A26A659020EDF0978056AB21A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9x5h6aGizgJyjR5GUUGfYTkGyyR729j82NuEufM281dZ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Mar 2025 18:35:53 +0000
Certificate not after:    Wed 04 Mar 2026 18:40:53 +0000
Subordinate resources:    AS: 52843
                          IP: 177.66.40.0/21
                          IP: 2804:5800::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ed:5d:48:18:4f:13:7e:3d:c6:c3:59:50:e7:a5:18:d6:80:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Mar  5 18:35:53 2025 GMT
            Not After : Mar  4 18:40:53 2026 GMT
        Subject: CN=206BD12DC7EB1E7A26A659020EDF0978056AB21A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f2:c2:a3:54:82:93:ee:a9:3b:e3:79:1a:10:
                    50:c2:ba:46:b6:85:6d:19:72:fe:26:f1:04:38:b3:
                    0c:54:26:32:51:f1:68:1e:b9:56:70:81:2b:90:af:
                    c5:96:96:3b:3e:35:ce:2e:68:73:a9:65:37:d9:3b:
                    12:26:65:96:c0:d4:ea:04:90:33:38:c8:f4:40:44:
                    e6:bb:92:4d:f7:43:6b:c8:77:5e:0a:76:a1:c8:d1:
                    71:3d:3c:53:5c:74:f2:67:2a:ae:c2:fe:37:87:35:
                    66:48:df:24:a2:67:fa:e6:55:9e:be:90:55:6c:4d:
                    df:1d:6b:56:48:f4:b7:51:ca:dd:0c:f6:56:65:72:
                    8f:28:61:d3:a6:9e:a3:be:23:cb:e0:bc:ed:8a:d8:
                    25:00:3f:de:e0:1b:d7:fa:82:31:1e:74:d7:90:f3:
                    7a:3f:b5:fc:57:35:26:10:62:3d:22:f2:0a:f5:ed:
                    85:b2:e5:7e:94:03:ce:29:4f:a6:ca:c9:37:41:5e:
                    86:18:c4:be:ff:47:68:64:58:31:51:95:b0:d5:16:
                    4f:b7:0e:4c:f1:bb:2e:98:64:27:19:29:d1:b8:00:
                    62:ab:e9:21:b2:d5:67:36:0b:a3:57:6f:5f:a6:a8:
                    3d:6e:3a:7b:b0:a2:58:29:57:be:4b:fb:cd:ec:bd:
                    0f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:6B:D1:2D:C7:EB:1E:7A:26:A6:59:02:0E:DF:09:78:05:6A:B2:1A
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9x5h6aGizgJyjR5GUUGfYTkGyyR729j82NuEufM281dZ/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9x5h6aGizgJyjR5GUUGfYTkGyyR729j82NuEufM281dZ/1/206BD12DC7EB1E7A26A659020EDF0978056AB21A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.40.0/21
                IPv6:
                  2804:5800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52843

    Signature Algorithm: sha256WithRSAEncryption
         45:0a:9a:c6:94:e3:38:10:de:00:b4:2b:d5:af:f7:36:0b:58:
         25:90:57:1e:85:05:34:95:a1:4c:d8:12:ec:ef:b2:7d:34:73:
         6f:6f:39:d4:70:7f:74:03:5b:c6:20:ae:09:8a:af:43:e6:90:
         c4:c3:bd:ff:8c:39:c5:ce:bb:35:0c:62:18:9c:c4:ad:6d:e4:
         05:fe:88:1f:74:c5:db:6e:17:cf:70:af:e2:77:a8:01:d0:54:
         42:62:43:a5:68:8d:bd:fa:5b:63:58:25:24:50:77:d6:0b:1b:
         3f:38:7a:1f:74:e3:fc:6a:71:2b:dc:24:68:c2:e1:5f:22:95:
         83:2b:af:c1:04:0d:46:93:ff:00:4d:d5:d6:d3:be:02:4b:5a:
         72:a5:c1:ee:8b:a5:ea:fd:7d:0c:67:92:54:82:8e:6c:99:8f:
         0f:63:bf:0d:6c:8f:d1:ca:a1:04:e9:ed:02:bd:4d:47:2c:fd:
         c0:02:41:db:84:d6:b5:67:81:cf:47:93:14:c4:84:06:8c:50:
         be:7c:5d:ad:7e:de:33:9a:e0:b4:11:8b:8b:ee:aa:a5:e6:0d:
         3a:97:e3:7d:01:f6:86:c9:1f:fe:67:3b:4e:8a:8b:e6:25:f7:
         17:bf:67:e7:01:cd:3c:3c:58:c3:fa:5f:be:12:2d:ff:19:f4:
         df:ed:12:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:22:09 2025 by rpki-client