Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/2601DE669734AEE0385101964D2ED4C0B8A927D4.cer
File:                     2601DE669734AEE0385101964D2ED4C0B8A927D4.cer (raw, json)
Hash identifier:          8EcxSHtDlX1yAOYmrlA5yoNLZ76zodv2hcLf2sAuMEY=
Subject key identifier:   26:01:DE:66:97:34:AE:E0:38:51:01:96:4D:2E:D4:C0:B8:A9:27:D4
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       07A6519FF560EC687FA742DDEA532394A9401EE9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Feb 2025 13:15:24 +0000
Certificate not after:    Thu 12 Feb 2026 13:20:24 +0000
Subordinate resources:    AS: 272619
                          IP: 2804:8614::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a6:51:9f:f5:60:ec:68:7f:a7:42:dd:ea:53:23:94:a9:40:1e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Feb 13 13:15:24 2025 GMT
            Not After : Feb 12 13:20:24 2026 GMT
        Subject: CN=2601DE669734AEE0385101964D2ED4C0B8A927D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d5:8c:f7:fb:fc:18:46:4c:05:10:50:98:28:
                    3b:a3:23:a0:bd:aa:ac:8b:02:aa:c7:b4:53:5b:75:
                    d3:0d:69:b4:af:6a:c0:b3:5b:26:94:30:fd:51:4c:
                    92:09:b2:07:e0:24:57:8c:71:a0:c6:f8:37:ad:26:
                    49:23:3d:25:cb:a2:65:65:b1:a7:2a:1d:61:30:be:
                    06:a3:ea:0d:8e:2c:5f:9e:2b:61:14:4a:95:af:e8:
                    c7:33:c0:54:2c:60:3c:1a:9c:8e:f5:15:89:97:84:
                    cd:c0:83:a4:a5:1c:fb:2a:f1:64:54:10:f3:75:32:
                    4f:e7:0b:b2:12:da:15:ac:24:59:dd:58:2c:0c:aa:
                    f6:77:5b:d2:3b:86:2d:4d:97:45:62:92:7b:94:54:
                    a6:93:d6:82:e2:31:c4:45:98:2c:55:fa:0f:f9:10:
                    0d:44:d1:74:c5:ba:22:87:af:ee:66:9a:3f:35:8c:
                    90:be:37:c1:06:da:15:70:57:65:c1:7e:c6:e9:9f:
                    4b:59:4a:87:91:85:a6:fe:9c:40:c4:1a:b0:e3:41:
                    15:7e:16:c4:a9:32:88:c6:ed:8f:20:ce:47:13:35:
                    41:eb:2c:ea:bc:c2:f4:21:d8:4d:db:43:2f:63:4d:
                    37:92:1a:79:b7:f5:7d:25:2a:29:08:b2:cb:a6:68:
                    b5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                26:01:DE:66:97:34:AE:E0:38:51:01:96:4D:2E:D4:C0:B8:A9:27:D4
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2uZVrZgKSxrt2YBikZS3fE7EcPHwnTa9Ewvwrb739T1r/0/2601DE669734AEE0385101964D2ED4C0B8A927D4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8614::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272619

    Signature Algorithm: sha256WithRSAEncryption
         af:70:ed:5b:5d:d1:64:62:a5:db:3d:b7:5d:cf:e5:0f:42:a8:
         8f:2f:b9:d5:ed:d8:88:97:e2:62:cb:49:b7:eb:fe:68:e1:c7:
         60:7d:6e:b6:eb:4e:e6:1a:44:f6:4e:b4:b0:a8:f2:a5:c2:95:
         3a:d5:25:0a:b5:0e:eb:e3:62:f3:cf:28:81:5c:85:d6:e1:de:
         5b:e8:22:78:e5:d2:a9:ad:a9:22:c6:e1:a2:df:bf:40:23:7d:
         7e:7c:9b:36:9b:07:a0:9e:bf:b2:cf:3f:0f:ac:d7:d4:8e:21:
         ed:bc:91:ff:d1:67:76:7b:ee:d6:ea:6f:ef:03:60:2b:86:a6:
         35:49:4b:a4:b1:4c:51:a1:f5:5e:99:74:55:d5:30:f7:14:c2:
         16:cd:10:8b:64:78:95:d4:56:b9:ea:19:1e:cf:3b:f7:24:12:
         0d:f5:99:47:32:f9:97:03:c1:dd:19:51:15:1a:ea:c3:52:e4:
         50:cb:51:76:79:20:06:2c:01:ff:d6:a0:23:56:d7:56:f9:51:
         3a:de:36:29:05:21:e9:44:b3:d5:f1:46:f7:20:0f:f7:68:0e:
         9a:65:1f:c6:7c:c2:0f:51:e5:66:03:eb:12:95:69:e6:da:c8:
         09:6d:93:ca:20:01:08:4b:22:76:a0:b5:d2:64:0b:8d:fa:38:
         95:a2:76:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:56 2025 by rpki-client